Waitlist Privacy Policy

This document explains how data is processed for the confirmed waitlist, one launch notification and a separate voluntary subscription to Ausu news.

Data we collect

• email address;
• selected subscription purposes, language, form location on the website, consent versions, and the dates of the request, confirmation, withdrawal and sending;
• an irreversible technical identifier used to limit abuse. It is used within a two-hour rate-limit window and is deleted by the hourly technical cleanup or when the next valid request is processed. The original IP address, User-Agent and referrer are not stored in the waitlist database.

Purpose and basis

The required consent is used to verify that the user controls the email address, add the address to the waitlist, prevent abuse and send one notification when Ausu starts operating. The user first selects an unchecked checkbox and then confirms the address with a separate button on the page opened from the email. Until confirmation, the record is not included in the active list.

News and updates are sent only if a separate optional checkbox is selected and the same email address is confirmed. Declining news does not prevent the user from joining the waitlist.

The service confirmation and one launch notification are sent from info@ausu.kz. News is sent from news@ausu.kz.

Storage and transfer

The primary database is stored outside the public website directory on the ausu.kz server in the Republic of Kazakhstan. Internet Company PS LLP provides the technical hosting. Access is limited to authorised AUSU LLP personnel and the hosting provider’s technically necessary access.

The primary database and outgoing mail system are located in the Republic of Kazakhstan on PS.kz infrastructure. To deliver a message to the address provided by the user, the email address and message content may be processed by the mail provider chosen by the user, including Gmail, Outlook or another service whose infrastructure may be outside Kazakhstan. At this stage, Ausu does not use a foreign bulk-mail platform or tracking pixels. The data is not published in publicly accessible sources.

Retention

• unconfirmed request and confirmation token: the token is valid for 24 hours; unconfirmed data is deleted within 72 hours;
• waitlist: until the launch notification is sent, but no later than 31 October 2026, or until consent is withdrawn, whichever comes first; the completed record is deleted within 30 calendar days;
• news: until consent is withdrawn, but no longer than three years from confirmation;
• technical delivery and bounce information: no longer than 30 calendar days, unless a longer period is required for an investigation or by law.

Technical backups are cleared according to the applicable retention cycle and are not used for new mailings.

Rights and withdrawal of consent

The user may request information about their data, correction or deletion, and may withdraw consent by emailing info@ausu.kz from the address added to the list. Every news email includes an unsubscribe link; unsubscribing from news does not cancel a separately confirmed one-time launch notification. After withdrawal, processing stops within the period required by law unless further retention is legally required.

Security and restrictions

The database is stored outside the internet-accessible directory, files are created with restricted permissions, and requests are validated and rate-limited on the server. Only addresses confirmed with a one-time token from the email are added to the active list. Do not submit a national identification number, documents, banking details, wallet addresses, passwords or verification codes through the form.