Privacy notice

Who we are

The waitlist is run by KLYVRA AI Private Limited, a private limited company registered in India (CIN U58202MP2026PTC087901).

We decide what the waitlist data is used for. In legal terms that makes us the "controller" under EU and UK data protection law, and the "data fiduciary" under India's Digital Personal Data Protection Act, 2023.

Questions or complaints about your data go to [email protected].

What we collect

Joining creates one entry, filed under your email address. It holds three kinds of information:

Sign-up details

Your name, email address and LinkedIn profile link, when you joined and the order you joined in. We save the link, not a copy of the profile. We also record when you ticked the boxes confirming you're 18 or older and agreeing to our waitlist terms and this notice.

Challenge results

How you did on the challenges on the sign-up page, including what you typed as an access code and any hidden extras you found, plus notes we work out from these and your sign-up details to score them. Please don't type anything personal into the access code boxes.

Technical details

The country your connection comes from, and which design of the sign-up page you saw.

If you sign up again with the same email, you keep your original place. We may add to your entry, for example a better challenge result or a detail that was missing before.

What we don't collect

• Your chat with the gatekeeper stays in your browser. When you join, the page sends us only the code you won, if you won one, so our server can check it. We keep the result, not the chat.
• We don't store your IP address. The only exception is the short sign-up limit described under How long we keep it, which keeps a scrambled form of it for about 10 minutes.
• The site has no analytics, ad pixels or other tracking scripts. If we ever add one, we'll update this page first.
• We never ask for payment details, a phone number or a postal address.

How we use it

Telling you about the launch

We'll email you about Adversary Club's launch, meaning the first event date and your invite. We only write when there's news, and every email tells you how to stop them.

Picking players

How many seats there are and how we choose players is set out in the waitlist terms. To work out the order, we use your challenge results and the order you joined in.

We might also look at the public LinkedIn profile you linked, to check you're a real person and to see if you work in or near security. A person on our team reviews the list and makes the final decision, so nobody is picked or turned down by a computer alone.

Enforcing the waitlist terms

If we turn down an entry or bar someone under the waitlist terms, we keep their email address and a short note so the block holds.

Keeping out bots and abuse

The bot check and a short limit on sign-ups from one connection help us keep out automated and repeat sign-ups. Your country tells us roughly where interest is coming from.

After Adversary Club launches

Your waitlist entry doesn't move into Adversary Club. When it opens, we'll email you to say it's live and where to sign up. Signing up there is a fresh start and entirely up to you. Being on the waitlist doesn't create an account for you.

Legal reasons

We may also use or keep your details when we need to follow the law, deal with a legal claim, or look into abuse of the waitlist.

We don't use the waitlist for anything else, and we won't sell it.

Our legal basis

If you're in the EU or the UK, we rely on our legitimate interest in running a waitlist you chose to join: writing to you about it, picking players, and keeping out bots and anyone we've barred. You can object at any time and we'll take you off the list. When the law requires us to keep or share something, we rely on that legal obligation.

If you're in India, the Digital Personal Data Protection Act, 2023 applies. We rely on the legitimate uses it allows under section 7: you gave us these details yourself for the purposes on this page, and we may need to keep or share them to comply with a law or a court order. You can tell us to stop using them whenever you like, and we'll take you off the list.

Who else handles it

A few service providers help us run the waitlist. They handle your details on our behalf and only to do that job.

Cloudflare

Cloudflare hosts this site, stores the list and runs the bot check on the sign-up page. The bot check reads signals from your browser and connection, such as your IP address. Cloudflare also uses those signals to improve its own bot detection, and decides for itself how to do that. See Cloudflare's privacy policy and Turnstile Privacy Addendum.

Email

One email provider sends our emails and another hosts our support inbox. They see your email address and anything you write to us. If you'd like to know which providers we use, just ask.

Nobody else

We don't sell the list or share it with advertisers or data brokers. We'd only pass your details to someone else if the law requires it, if we need to protect our rights in a legal claim, or if another business takes over Adversary Club. In that last case, they'd have to keep to this notice.

Where it's stored and how it's protected

We're based in India, and that's where we read and back up the list. Cloudflare stores it in its data centres and may hold copies in other countries. So your details may be stored or read outside your country, including in India and the United States. Where the law asks for extra protection on these transfers, we rely on the safeguards in our providers' data processing terms, such as the EU's Standard Contractual Clauses.

Cloudflare encrypts the list on its disks, and every connection to this site uses HTTPS. Only our team can open the list.

Cookies and browser storage

We don't set any cookies. Cloudflare says it may set a few strictly necessary security cookies on the sites it serves, for things like bot detection. Its cookie policy lists them.

If you beat the gatekeeper in the chat, the page saves a small note in your browser's local storage so your win survives a reload. Nothing else is saved, so skipping the gatekeeper or typing in an access code leaves your browser untouched. The note holds nothing personal and never gets sent to us. Clearing this site's data in your browser removes it. You'd just have to win again.

How long we keep it

Nothing is deleted automatically yet. We'll keep your entry until Adversary Club launches and we've sent the launch emails and invites. Then we'll delete the waitlist. None of it is copied into the main app. If you want your entry gone sooner, ask and we'll delete it. The exceptions are anything we have to keep longer for a legal reason, and the email address and note for anyone we've barred, which we keep for as long as the block lasts.

To limit sign-ups from one connection, our server keeps a scrambled form of your IP address and a count of recent tries, separate from the list. It deletes itself after about 10 minutes.

We keep private backups of the list. The same rules apply to them, and a deletion request covers them too.

Your rights

Wherever you live, you can email [email protected] to:

• get a copy of what we hold about you
• fix something that's wrong
• have your entry deleted
• stop our emails, or object to how we use your details

Please write from the address you signed up with. If you can't, we may ask you to prove the address is yours first. A real person reads every request, and we'll reply within a month. Sometimes the law lets us, or makes us, hold something back or say no. If that happens, we'll tell you why.

Depending on where you live, you may have more rights. In the EU and UK, that includes getting your data in a reusable format and asking us to limit how we use it. In India, you can also name someone to use your rights for you if you die or can no longer act for yourself.

Complaints

Tell us first at [email protected] and we'll try to fix it. You can also go to a regulator:

• in the EU, the data protection authority in your country (the European Data Protection Board lists them)
• in the UK, the Information Commissioner's Office
• in India, the Data Protection Board of India, once you've raised it with us

Children

Adversary Club is for adults, and the waitlist isn't meant for anyone under 18. Everyone who joins confirms they're 18 or older. If you think a child has signed up anyway, let us know and we'll delete the entry.

Changes to this notice

If we change this notice, we'll update this page. If a change affects how we use details you've already given us, we'll email you before it takes effect.

Contact

KLYVRA AI Private Limited
CIN U58202MP2026PTC087901
[email protected]