Valley
Privacy Notice
Effective 11 July 2026
Valley is a product of theNetwork. This notice explains how we handle personal data when you visit valleyapp.co or join the Valley waitlist. Questions and privacy requests can be sent to team@valleyapp.co.
What we collect
- The name, email address, and city or region you provide.
- Your optional answer about what you are working on.
- Signup time, consent version, landing path, referring domain, and limited campaign attribution.
- Random session identifiers used to understand the waitlist journey.
- A keyed, one-way representation of your IP address for abuse prevention. We do not store the raw IP address.
- Operational records such as email delivery, bounce, complaint, and unsubscribe status.
- Privacy-limited product analytics and performance measurements. We disable analytics autocapture, session replay, person profiles, and long-lived analytics persistence.
Why we use it
We use this information to operate the waitlist, communicate meaningful Valley updates, understand interest by place and acquisition channel, improve the signup experience, prevent spam and abuse, maintain deliverability, diagnose failures, and protect the service. We do not sell personal data or use waitlist answers for third-party advertising.
Our legal grounds
Where applicable, we rely on your consent to place you on the waitlist and send waitlist communications. You may withdraw that consent at any time using the unsubscribe link in an email or by contacting us. We also process limited security and operational information where necessary to protect Valley, prevent abuse, and maintain the reliability of the service.
Who processes data for us
We use carefully selected service providers to run this site:
- Vercel for website hosting and network delivery.
- Supabase for the Postgres database.
- Resend for transactional email and delivery events.
- Cloudflare Turnstile for bot and spam prevention.
- PostHog US for privacy-limited product analytics.
- Sentry’s European ingest service for redacted error and performance monitoring.
These providers may process information in countries other than your own. Where required, we use contractual and technical safeguards for international transfers.
How long we keep it
- Waitlist information is kept while the waitlist is active and for up to 12 months after Valley becomes generally available, unless you join Valley, request deletion, or we need a limited record for legal or security reasons.
- The keyed IP representation is removed after 30 days.
- Funnel and email-delivery records are retained for up to 24 months and then deleted or aggregated.
- PostHog data should be configured with a 14-month retention period; browser identifiers last only for the current tab session.
Your choices and rights
Depending on where you live, you may have rights to access, correct, delete, restrict, or receive a copy of your personal data; object to certain uses; withdraw consent; or complain to a data-protection authority. Email team@valleyapp.co from the address you used to join. We may need to verify that the request is yours.
Security
We use server-only database writes, row-level database security, encryption in transit, bot protection, rate controls, scoped credentials, signed webhooks, redacted monitoring, and access restrictions. No internet service can guarantee absolute security, but we design Valley to minimize both the data collected and its exposure.
Children
The waitlist is intended for people aged 18 or older. We do not knowingly collect personal data from children through this form. Contact us if you believe a child has submitted information.
Changes
We may update this notice as Valley evolves. Material changes will be posted here with a new effective date, and we will provide additional notice where required.