Legal
Privacy Notice
Provisional closed-beta version.
1. Who we are and who controls your data
Obvious Later is operated by 106 Enterprises. For the processing described in this Privacy Notice, 106 Enterprises acts as the Controller where it determines the purposes and means of processing.
2. Data we collect
- Account data: name, email, login credentials, username.
- Profile data you provide (display name, bio, avatar).
- Product usage: views submitted, private notes, saved signals, activity timestamps.
- Aggregate product analytics: an anonymous per-session identifier, whether the browser has visited before, whether the visit is signed in, the language, the page type, and — for content pages — the identifier of the Question or Signal viewed. We never attach your account, email, forecast answer, confidence value, private notes, or IP address to these records.
- Support messages you send us.
- Technical data: device identifiers, IP address, browser type, telemetry.
3. Purposes and legal basis
- Providing the service (contract).
- Account creation, login, and support (contract).
- Security, fraud prevention, abuse mitigation (legitimate interests).
- Product improvement and aggregated analytics (legitimate interests).
- Compliance with legal obligations.
4. Sharing
- Service providers / subprocessors (hosting, database, email).
- Merchant of Record: Paddle.com processes payments, subscription management, invoicing, and tax compliance for our orders. Paid subscriptions are not sold during the closed beta, so no payment data is shared with Paddle at this time.
- Professional advisers (legal, accounting) as necessary.
- Authorities where required by law.
5. Retention
We keep personal data only as long as needed for the purposes described above or as required by law, after which it is deleted or anonymised.
6. Security
We use appropriate technical and organisational measures, including encryption in transit and role-based access controls.
7. Your rights and how to reach us
Subject to applicable law, you may request access, rectification, erasure, restriction, portability, or objection, and may withdraw consent where processing is based on consent. Users protected by data-protection laws such as the GDPR or the Brazilian LGPD may also complain to their supervisory authority. International transfers rely on appropriate safeguards where applicable.
- Submit privacy or data-access requests through the in-product support form under the Privacy or Data-access category.
- Signed-in users can request permanent account deletion at account deletion. An administrator reviews and completes the request.
The in-product form is provided for convenience during the closed beta. It does not replace any legally required external contact method that may apply once paid services are in place.
8. Cookies
We use essential cookies for authentication and preferences. Analytics or marketing cookies are described in the cookie notice if enabled.
We do not use advertising or third-party tracking technology, and there is no cross-site identifier or device fingerprinting. Product analytics is entirely first-party: events are stored on our own infrastructure and are never shared with an analytics vendor. It relies on a random session identifier held in your browser's session storage (discarded when the tab closes) and one first-party flag in local storage that records only that this browser has visited before. Aggregate visitor counts for the published site are also produced by our hosting platform from server-side request data.
Draft operational copy — not final legal advice. During the closed beta, the platform is informational only, no wagering or prizes are offered, and no personalized professional advice is provided.