Privacy Notice

Last updated: 4 November 2026

1. Who is responsible for your information

Controller: The Limitless Codex.

For privacy questions, withdrawal requests, or to exercise your rights, email codex-support@limitlessenterprises.org. If you need a postal contact channel, request it through that address. The formal legal-entity name and registered postal details will be added to this notice before paid general availability.

2. Information we collect

Depending on whether you join the waiting list or request beta participation, we may collect:

• your name, email address, and mobile or WhatsApp number;
• your role, intended use, desired outcome, current workflow, and application responses;
• your beta-terms acceptance and your privacy and WhatsApp consent choices;
• basic source information, such as campaign or referral parameters, when present; and
• technical and security information processed by our hosting and form providers when you use the site.

Please do not submit health information, payment-card or banking details, identity documents, passwords, client secrets, or other sensitive or third-party confidential information through these forms.

3. Why we use it

We use the information to:

• record and review your waiting-list or beta request;
• assess fit, current cohort capacity, and readiness to provide feedback;
• contact you about your request, participation status, onboarding, and beta operation;
• send relevant beta availability, product education, limited re-engagement opportunities, and launch updates when you join the waiting list or separately choose email updates;
• send WhatsApp beta-access, onboarding, participation, and closely related product updates when you explicitly opt in;
• improve the beta experience using aggregated application and feedback patterns; and
• protect the site, forms, and beta from abuse or security threats.

4. Our legal bases

For waiting-list and application processing, we rely on the consent you provide with the form under Article 6(1)(a) of the UK/EU GDPR, where applicable. WhatsApp communications rely on a separate, optional consent. You can withdraw either consent at any time without affecting processing that was lawful before withdrawal.

If you are accepted, some operational processing may also be necessary to provide and administer the beta arrangement you requested. We may rely on legitimate interests for proportionate security, fraud prevention, and service protection, taking your rights into account.

5. WhatsApp communications

We request a mobile number so the beta team can identify and administer the contact record and, where appropriate, coordinate onboarding. Providing it does not by itself subscribe you to WhatsApp updates. We use WhatsApp only when you select the separate WhatsApp permission. Messages may include beta-access decisions, onboarding instructions, participation updates, and closely related product news. Message frequency varies and standard data charges may apply.

You can stop WhatsApp messages at any time by replying STOP or emailing codex-support@limitlessenterprises.org. We use a broadcast or one-to-one workflow rather than exposing applicant details in a participant group.

6. Service providers and recipients

We use carefully selected providers to host the site, collect form responses, communicate, and operate the beta. These may include Google Workspace and Google Forms for intake and records, and Meta/WhatsApp for communications you request. Our providers process information under their own terms and applicable safeguards.

Information may be processed outside your country, including outside the European Economic Area. Where cross-border transfer rules apply, the provider and controller must use an applicable transfer mechanism, such as an adequacy decision or approved contractual safeguards. We may also disclose information where required by law or to protect legal rights and service security.

7. How long we keep it

• Waiting-list marketing profile: we may retain the limited contact, consent, source, and engagement record while you remain subscribed or meaningfully engaged. After 12 months without a meaningful interaction, we may move it into an inactive/reactivation review and send proportionate re-engagement messages within the scope you requested. If there is no renewed interest for 24 continuous months, we delete or anonymise the marketing profile, subject to the limited records described below.
• Unsuccessful beta application content: detailed application answers are kept only as long as needed to assess and administer the request and normally no longer than 12 months after the decision or last application-related interaction. If you separately join the waiting list or choose email updates, the limited marketing contact and consent record is handled independently under the waiting-list cycle above.
• Active beta participants: for the participation period and up to 12 months afterward for operational follow-up, unless a documented legal obligation requires longer.
• Opt-outs: we stop the relevant marketing communications promptly and retain only the minimal suppression evidence reasonably needed to honour the opt-out and prevent accidental re-enrolment.

Consent evidence may be retained for an appropriate period where reasonably necessary to demonstrate compliance or establish, exercise, or defend legal claims.

8. Your choices and rights

Depending on the law that applies to you, you may have rights to access, correct, delete, restrict, or receive a copy of your information, object to certain processing, and withdraw consent. Email codex-support@limitlessenterprises.org with your request. We may need to confirm your identity before acting on it.

If you are in Spain or the European Economic Area, you may also complain to your local supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD).

9. Decisions and age limits

Beta admission is reviewed by people and is not based solely on automated decision-making with legal or similarly significant effects. The waiting list and beta are intended for adults aged 18 or over. Please do not submit information about children.

10. Security

We use reasonable organisational and technical measures designed to protect beta records. No online service can promise absolute security, so please submit only the information requested and contact us promptly if you believe your information has been mishandled.

11. Changes to this notice

We may update this notice as the beta changes. The date above shows the latest revision. If a material change affects how we rely on your consent, we will provide an appropriate notice and seek new consent where required.