Privacy
This site does one thing: it takes an email address for a waiting list. This page says exactly what happens to it. Everything here describes the site as it is now, not a site we might build later.
Last updated 1 September 2026.
Who we are
Insight Lab is built by S2AI Agency Unipessoal Lda, registered in Portugal, and that company is the data controller for everything on this page.EN101, Avenida Barros e Soares, Nº 423 4715-214 Braga PortugalIf you have a question about any of it, or want your address removed, write to hello@s2agency.ai and a person will answer.
What we collect
Only what the form asks for: your email address, the language you were reading the site in, and the date you signed up. Nothing else. We do not ask for your name, we do not know what you do for a living, and we do not build a profile of you.
Why we keep it
To write to you once, when Insight Lab opens. That is the whole purpose, and it is the thing you agreed to when you ticked the box. That tick is our legal basis, which the GDPR calls consent, and it is the only one we rely on. We do not sell your personal information, and we do not share it for anyone else’s advertising. Not now, and not in the twelve months behind us, because the list has never been given to anyone.
The email itself
One email, when we launch. It will carry an unsubscribe link and our postal address, and unsubscribing takes effect immediately rather than within the days the law would allow us. If we ever want to send you something else, we will ask first.
The anti-spam check
The form is protected by Cloudflare Turnstile, which is what stops a robot filling the list with addresses that are not real. To tell you apart from one, Turnstile receives your IP address and some technical signals from your browser, and Cloudflare processes them on our behalf. It is not an analytics tool and it does not follow you around the web. Cloudflare describes what it does at cloudflare.com/privacypolicy.
No analytics, no tracking cookies
There is no Google Analytics on this site, no tag manager, no advertising pixel, and no cookie set by us. We do not know how many pages you read or where you came from. Nothing here responds to a Global Privacy Control signal because there is nothing for it to turn off. If that changes, this page changes first.
Where it is stored, and who can see it
The list lives in a Supabase database hosted in Ireland, and the site runs on Vercel. Both companies handle the data on our behalf and under contract, and so does Cloudflare for the anti-spam check. Vercel and Cloudflare are American companies, so some of that handling happens outside the EU, under the standard contractual clauses the GDPR provides for exactly this. The list itself does not leave Ireland. It is not readable from the browser either: it has no public access policy at all, and only our server can write to it or read it.
How long we keep it
Until we launch and write to you, or until you ask us to delete it, whichever comes first. If we decide not to launch, we delete the list rather than keep it for something else.
What you can ask for
A copy of what we hold about you, a correction, or deletion. One email to hello@s2agency.ai is enough, you do not have to give a reason, and we will not treat you differently for asking. This applies wherever you live. The laws below give some people a formal right to it, and we would rather not make everyone else ask nicely.
Your rights under the GDPR
We are established in the European Union, so the GDPR governs everything on this page and everyone on the list, wherever they live. Our legal basis is your consent, the box you ticked, and you can withdraw it at any time by writing to us, which does not affect anything done before you did. Alongside the rights above you can object to what we do with your address, ask us to restrict it, and take it elsewhere in a portable form. If you think we have got it wrong you can complain to your national data protection authority; in Portugal that is the CNPD, and in the UK the ICO.
If you are in the United States
California, Colorado, Connecticut, Virginia and a growing list of other states give you the right to know what is held, to have it deleted, and to opt out of its sale or of targeted advertising. There is no sale to opt out of and no advertising built on this list. To use any of the rest, write to the address above. If you think we have got it wrong, a Californian can raise it with the California Attorney General.
If this page changes
We will update the date at the top. If a change affects what we do with an address already on the list, we will write to the list and say so before it takes effect.