Loading Ableway
Routing…
Loading Ableway
Last Updated: August 27, 2026
Grey Tech LLC, d/b/a Ableway ("Ableway," "we," "us," or "our") operates the website at https://ableway.co (the "Site"). We are a small, pre-launch company based in Cumming, Georgia, United States. This Privacy Policy explains what personal information the Site collects, why, how it is stored, and the rights you have over it.
By submitting your email address on the Site, you agree to the practices described here. If you do not agree, please do not submit the waitlist form.
The Site is a pre-launch waitlist with an optional survey. Its jobs are to let you reserve a spot to be notified when the Ableway accessibility-navigation platform launches, and — only if you choose — to collect your answers to a short, optional survey about your access needs (§3.6). There are no user accounts, no login, no mobile app, no community contributions, no photos, and no payments. When the full platform ships, this policy will be updated to reflect what it actually does — and §13 governs how that happens: a new purpose for data you've already given us always requires your explicit consent first, material changes get at least 14 days' emailed notice, and every version is dated in our public changelog at https://ableway.co/privacy/changes.
When you join the waitlist, we collect exactly the fields below. Nothing else is captured from the form.
| Field | Required? | Why we need it |
|---|---|---|
| Email address | Yes | To hold your place in line and notify you at launch |
| City | No | To prioritize which cities to open first at launch |
| Referral code | Generated | To give you credit for people you invite |
| Referred-by code | No | To credit the person who invited you, if you arrived via a link |
| Unsubscribe token | Generated | A random, single-purpose token we embed in every email so one-click unsubscribe works without a login |
| Position | Generated | Your spot in line |
| Created-at time | Generated | When you joined (UTC) |
Your email is stored in lowercased form. We do not collect your name, phone number, postal address, payment information, profile photo, or any profile data.
ableway-theme) — stored in your browser's
localStorage so the page renders in dark mode without a flash on reload.
This is not a cookie, does not track you across sites, and you can clear
it from your browser settings at any time.This is an exhaustive list. We do not collect, store, or process:
One deliberate exception, disclosed in full: access-need answers you voluntarily give in the survey (§3.6) are treated as health/sensitive- category data. They are collected only after explicit consent, used only to decide what we build first, never sold or shared, never used for advertising or profiling, and deleted with your record the moment you unsubscribe. If you never take the survey, this exception never applies to you — no health or sensitive-category data of any kind is collected.
To keep the waitlist honest, we apply two automated checks to the email address you submit, before a record is created. Both run server-side and neither builds a profile of you:
Neither check involves profiling or automated decision-making with legal effect under GDPR Article 22 — both are simple allow/deny filters. Your ability to contest either decision is the same as any other data-subject request: email privacy@ableway.co and a human will review it.
The waitlist form includes one hidden field (company) that real users
never see or fill. If the field is non-empty when the form is submitted,
we treat the submission as bot-generated and silently drop it. We do not
store the value, log it, or use it for any other purpose.
If you choose to answer the optional survey, we store your answers in a separate survey table keyed only to your unsubscribe token — the survey store never contains your email address. The survey collects:
| Data | Required? | Why we need it |
|---|---|---|
| Consent record | Yes | Proof that you explicitly agreed before any access-need question |
| How you get around (e.g., wheelchair) | No | To prioritize which accessibility features we build first |
| Navigation needs (e.g., low vision) | No | Same — features and coverage, by need |
| Feature priorities (e.g., step-free) | No | Same — what to check and surface first |
| Pain points (multiple-choice + free text) | No | To understand what to fix first |
| City (free text, if you re-confirm it) | No | To prioritize launch cities |
| Interview consent (yes/no) | No | To know who is open to a 20-minute conversation |
| Submitted-at time (UTC) | Generated | Retention accounting |
Every survey question is optional and offers "Prefer not to say." Answering the survey is never required and has no effect on your waitlist position. Because answers about access needs are treated as health data under GDPR Article 9, we ask for explicit consent on a dedicated consent screen before such questions are shown, and you can skip them entirely.
We use your email and city solely to:
We do not sell your personal information. We do not share your email with third parties for their own marketing.
For users in the European Economic Area, United Kingdom, and Switzerland, the lawful bases for our processing are:
| Processing activity | Lawful basis |
|---|---|
| Holding your place on the waitlist | Consent (you affirmatively submitted the form) |
| Sending the welcome / confirmation | Contractual necessity / consent |
| Occasional launch updates | Consent (separate from the transactional welcome) |
| Referral tracking | Legitimate interest (operating the program you opted into) |
| Disposable / role-address filtering | Legitimate interest (avoiding bounces and bot signups) |
| Honeypot (bot filtering) | Legitimate interest (protecting the waitlist from abuse) |
| Aggregate, cookieless measurement (§3.2) | Legitimate interest (knowing how the launch is going) |
| Survey feature/city/pain-point answers | Consent (you chose to answer) |
| Survey access-need answers (§3.6) | Explicit consent (GDPR Art. 9(2)(a) — dedicated consent screen) |
You may withdraw consent at any time by using the one-click unsubscribe link in any email, or by emailing privacy@ableway.co and asking to be removed. Withdrawing consent deletes your record immediately; we keep no tombstone. Withdrawal does not affect the lawfulness of processing that occurred before withdrawal.
We send three kinds of email:
Every email we send includes:
One-click unsubscribe. Every email carries a working Unsubscribe link
and an RFC 8058 List-Unsubscribe header. Clicking it deletes your
waitlist record immediately — you do not need to reply, log in, or wait.
If you prefer, you may also email privacy@ableway.co; those requests
are honored within 10 business days, which is the maximum permitted by the
U.S. CAN-SPAM Act.
We share data only with the service providers that operate the Site for us. We commit to notifying you by email before adding any new sub-processor that processes your personal data.
| Provider | Role | Data shared |
|---|---|---|
| Cloudflare | Hosting, Workers runtime, D1 database, edge network | Your waitlist record (email, city) |
| MXroute | Outgoing email relay (sends the welcome and launch emails) | Your email address and email content |
Cloudflare does not have observability enabled for our Worker. We receive no request logs, traces, or invocation records. MXroute processes your email only to deliver the message we asked it to send. Both are bound by their own privacy and data-processing terms and may only use your data to provide the service we contracted them for.
We do not transfer your data to any other third party except:
Your waitlist record (email, city, referral code, referred-by, position, unsubscribe token, created-at) is kept until the earlier of:
If you unsubscribe, your record is deleted within the same request — there is no 30-day buffer, no scheduled purge job, and no fulfillment log kept. There is no inactivity-based auto-deletion today: we keep your record until you ask us to remove it or until launch.
Your survey responses (§3.6), if any, are deleted in that same request — the unsubscribe handler removes both the waitlist row and the keyed survey row together, and the survey row is not restorable by the 60-second undo (it is gone; you can always answer the survey again).
We do not store your IP address. Your IP is read by Cloudflare at the edge as part of normal request handling, but we do not extract, log, or retain it in any of our systems. The waitlist record we keep contains email, optional city, referral code, referred-by code, position, generated unsubscribe token, and created-at — nothing else.
If you ask us to delete your waitlist record, the IP — never having been stored by us — is removed with nothing further to do.
Cloudflare's global edge network processes the request in transit on the way to our Worker; we do not control or retain those transient records, and Cloudflare's own retention is governed by their privacy policy. See §9 for international-transfer notes.
The Site runs on Cloudflare's global network. If you are outside the United States, your email address may be processed in the U.S. or the EU. Cloudflare provides Standard Contractual Clauses for transfers out of the EEA. MXroute processes email transmission in the course of delivery.
Depending on where you live, you may have the following rights over your personal information:
To exercise any of these rights, email privacy@ableway.co. We respond within 30 days. If you are in the EEA and unsatisfied with our response, you may lodge a complaint with your local data protection authority.
Ableway is a small, early-stage company and does not currently meet the thresholds that make it a "business" subject to the CCPA. Even so, we treat your email as personal information and extend you the rights above. We do not sell your personal information, and we do not share it for cross-context behavioral advertising. If that ever changes, this section will be updated and a "Do Not Sell or Share My Personal Information" link will appear in the Site footer and here.
wrangler secret put SMTP_PASS). It is
never committed to source code and never written to logs.No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your information.
The Site is not intended for anyone under the age of digital consent in their jurisdiction (16 in most of the EEA and the U.S.; lower in some member states). We do not knowingly collect personal information from children. If you believe a child has submitted an email, contact privacy@ableway.co and we will delete it.
Ableway is new, and this policy will evolve with the product. We keep that evolution visible rather than surprising:
If you disagree with a material change, you can have your record deleted at any time before it takes effect — one click via the unsubscribe link in any email, no questions asked. Where a change applies a new purpose to data you've already provided, your existing data is never migrated without your affirmative yes.
If Ableway is acquired, merges, or ceases operations, we will either transfer your data to a successor entity bound by equivalent privacy commitments, or delete all waitlist records within 90 days. We will notify you by email before any such transfer.
Grey Tech LLC, d/b/a Ableway · Cumming, Georgia
Ableway is committed to privacy and digital accessibility. For questions about this policy, contact privacy@ableway.co.