Legal

Privacy Notice

Last updated: 2026-10-16

1. Who we are and who controls your data

Obvious Later is operated by 106 Enterprises Ltda, CNPJ 49.059.143/0001-68. For the processing described in this Privacy Notice, 106 Enterprises Ltda acts as the Controller where it determines the purposes and means of processing.
Registered address: R. Bernardo Guimarães 2717, sala 703, Belo Horizonte, MG, 30140-085, Brazil

2. Data we collect

• Account data: name, email, login credentials, username.
• Sign-in providers: if you choose Continue with Google, Google shares your name, email address, profile picture and a Google account identifier with us. If you sign in with World App, we store your World App wallet address and World username, and we check a signed message from your wallet to confirm the sign-in. Accounts created through World App get an internal placeholder email that never receives mail. We do not receive World ID verification or biometric data.
• Profile data you provide (display name, bio, avatar).
• Product usage: views submitted, private notes, saved signals, activity timestamps.
• First-party aggregate product analytics: a random per-session identifier, whether the browser has visited before, whether the visit is signed in, the language, the page type, and, for content pages, the identifier of the Question or Signal viewed. These first-party records are stored on our own infrastructure and are not linked to your account: we never attach your account, email, forecast answer, confidence value, private notes, or IP address to them.
• Product analytics (PostHog) and error reports (Sentry): to understand how the site is used and to fix errors, we send PostHog and Sentry the pages you view, the product steps you take (for example viewing a question, recording a forecast or completing sign-up), your language, coarse device and browser details and, if you are signed in, your internal account ID. We never send your email, name, forecast answers, notes or form contents. No cookies are used for this, IP addresses are not stored, browsers that send "Do Not Track" are excluded, and we do not record sessions.
• Support messages you send us.
• Founding list: if you reserve the founding price, we store your account email and the date you reserved, so we can email you when Member opens.
• Sponsor enquiries: if you use the sponsor form, we store your name, company, work email, website and message, so we can reply and manage a sponsorship.
• Payments: Paddle, our Merchant of Record, collects your billing and payment details directly. We receive information about your purchase, such as your plan and payment status, but never your full card number.
• Technical data: device identifiers, IP address, browser type, telemetry.

3. Purposes and legal basis

• Providing the service (contract).
• Account creation, login with email, Google or World App, and support (contract).
• Security, fraud prevention, abuse mitigation (legitimate interests).
• Product improvement and aggregated analytics (legitimate interests).
• Product analytics and error monitoring with PostHog and Sentry, using usage events, your account ID and technical data (legitimate interests, article 7, IX of the LGPD).
• Founding list emails (consent). You can ask to leave the list at any time through the support form or by email.
• Replying to sponsor enquiries and managing sponsorships (steps before a contract and legitimate interests).
• Compliance with legal obligations.

4. Sharing

• Service providers / subprocessors (hosting, database, email).
• Sign-in providers: Google LLC and World (Tools for Humanity) handle your sign-in under their own privacy notices when you choose them. We only send them what is needed to complete the sign-in.
• Product analytics and error monitoring: PostHog Inc. (EU Cloud, data hosted in Frankfurt, Germany) receives usage events, your account ID and technical data, with no IP address stored. Functional Software, Inc. (Sentry, data hosted in the EU, Germany) receives error details, technical data and your account ID.
• Merchant of Record: Paddle.com, our reseller, processes payments, subscription management, invoicing, and tax compliance for our orders. Paddle acts as an independent controller of your payment data under its own privacy notice (paddle.com/legal/privacy). Paid subscriptions are not sold during the closed beta, so no payment data is shared with Paddle at this time.
• Professional advisers (legal, accounting) as necessary.
• Authorities where required by law.

5. Retention

We keep personal data only as long as needed for the purposes described above or as required by law, after which it is deleted or anonymised.

PostHog analytics events are kept for up to 1 year (the data retention period of the PostHog free plan we use) and Sentry error reports for up to 90 days, under Sentry's plan retention limits.

6. Security

We use appropriate technical and organisational measures, including encryption in transit and role-based access controls.

7. Your rights and how to reach us

You can ask us to confirm whether we process your data, access it, correct it, anonymise, block or delete unnecessary data, port it, learn who we share it with, and withdraw consent (article 18 of Brazil's LGPD). Users in the EU, EEA and UK also have the rights to restriction and objection. You can complain to Brazil's data protection authority, the Autoridade Nacional de Proteção de Dados (ANPD, gov.br/anpd), or to your local supervisory authority. International transfers rely on appropriate safeguards where applicable.

• For any privacy question or request, write to obviouslater.hq@gmail.com.
• Submit privacy or data-access requests through the in-product support form under the Privacy or Data-access category.
• Signed-in users can request permanent account deletion at account deletion. An administrator reviews and completes the request.

The in-product form is provided for convenience during the closed beta. It does not replace any legally required external contact method that may apply once paid services are in place.

8. Cookies

We use only essential cookies and browser storage, for sign-in, security and preferences. We do not use advertising or marketing cookies. The analytics storage we use is described below.

We do not use advertising or cross-site tracking technology, and there is no cross-site identifier or device fingerprinting. Our first-party analytics events are stored on our own infrastructure. PostHog and Sentry, described in section 2, run without cookies or browser storage of their own. First-party analytics relies on a random session identifier held in your browser's session storage (discarded when the tab closes) and one first-party flag in local storage that records only that this browser has visited before. Aggregate visitor counts for the published site are also produced by our hosting platform from server-side request data.

During the closed beta, the platform is informational only, no wagering or prizes are offered, and no personalized professional advice is provided.