Ilou, by Daerus · Website & Waitlist Privacy Policy

Privacy, thoughtfully.

Effective date: October 16, 2026Last updated: October 16, 2026

Ilou is a product of Daerus. This Privacy Policy explains how Daerus ("Daerus," "we," "us," or "our") collects, uses, discloses, and retains personal information in connection with the Ilou prelaunch website at ilou.ai, our waitlist, our contact form, and related communications.

This policy applies to the website and waitlist, not to features of the future Ilou app. Before making app features available, we will provide privacy information explaining their actual data practices. Joining the waitlist does not create an app account, provide access to your private conversations or files, or subscribe you to unrelated Daerus products.

1. Who is responsible for your information

Daerus operates the Ilou website and waitlist and is responsible for the processing described in this policy. Where applicable data-protection law uses that term, Daerus is the data controller.

Privacy contact: hello@ilou.ai

Mailing address:

2. Information we collect

Information you provide

When you join the waitlist, we collect your email address. We also maintain related records, including the signup date, subscription status, signup method, and version of the signup notice presented to you. Records from an earlier signup process may include an email-confirmation date.

When you use the contact form, we collect your name, email address, message, and submission time. We also receive information you choose to include when you email or reply to us. We use your submitted address to respond to your inquiry.

You may browse the website without joining the waitlist. Providing information through a form is voluntary, but we need an email address to send launch updates and the required contact details to respond to a form submission. Please submit only an address you own or are authorized to use, and do not send passwords, payment-card details, identity documents, or other unnecessary sensitive information.

Information generated when you use the website

Our systems and service providers may process technical information such as an IP address, browser and device information, requested pages, request times, error information, and form-security results. This information supports delivery of the website, troubleshooting, and abuse prevention.

The application uses short-lived, keyed hashes for certain abuse-prevention limits rather than storing raw IP addresses in the waitlist database for those limits. This does not mean that our hosting, email, or security providers never receive or process IP addresses.

Email and subscription information

Our email systems process recipient addresses, message content, message identifiers, sending and delivery information, delivery failures, complaints, and unsubscribe events. We use these records to manage communications, prevent duplicate welcome emails, and avoid sending to addresses that have opted out, complained, or cannot receive our messages.

We receive information directly from you, automatically through website requests, and from the providers supporting these activities. If another person submits your address without permission, contact us or use the unsubscribe link to have the subscription stopped.

3. How we use information

We use information to maintain the waitlist, send the welcome email and Ilou launch or availability updates you request, respond to inquiries, and record communication preferences.

We also use it to operate, maintain, and protect the website; prevent spam, fraud, and misuse; investigate errors and delivery problems; honor privacy and unsubscribe requests; comply with applicable legal obligations; and establish, exercise, or defend legal claims where necessary.

A contact-form submission does not automatically subscribe you to the waitlist. Your Ilou subscription does not authorize unrelated marketing for other Daerus products or third parties.

The waitlist and contact form do not request access to your device's contacts, microphone, camera, private messages, or stored files. This policy does not authorize collection of future app data or describe AI-training practices for an app that is not yet available.

4. Waitlist signup and email choices

When you successfully submit an eligible email address through the waitlist form, you join immediately. There is no separate email-confirmation step. We send one welcome email for that signup and may subsequently send the Ilou launch updates you requested. Duplicate submissions do not ordinarily trigger another welcome email. Unsubscribed or suppressed addresses are handled according to the relevant preference and safety protections.

You can stop launch emails at any time by using the Unsubscribe link in an email or contacting hello@ilou.ai. You do not need to create an account or sign in to unsubscribe, and there is no charge for doing so. We honor opt-out requests within the time required by applicable law.

If you unsubscribe, we may keep a limited suppression record to prevent future marketing messages to your address. Unsubscribing does not prevent a response to a new inquiry or privacy request you send us, or a genuinely necessary legal or security communication. We do not use those exceptions to bypass marketing preferences.

You have the right to object to launch marketing at any time. Use the unsubscribe link or email hello@ilou.ai.

5. How we disclose information

We disclose information for the purposes described in this policy, including to providers that help operate the website and communications. Authorized personnel may access information as needed to perform those activities.

Resend processes recipient information, message content, and delivery-related information to send welcome emails, launch communications, and internal contact-form notifications.

Zoho Mail hosts hello@ilou.ai and processes the contact messages, replies, and other correspondence received or sent through that inbox.

Cloudflare Turnstile, where enabled, helps distinguish human visitors from automated traffic. It processes technical signals such as IP addresses, browser information, and details associated with the website and security challenge. Cloudflare also processes signals to improve its bot-detection capabilities, as described in its Turnstile Privacy Addendum.

Hosting and infrastructure providers support the application, database storage, backups, security, and delivery of website files. They may process stored information and technical request or log data needed to provide those services.

Google Fonts may be used to display the website's typography. When fonts load directly from Google, your browser sends technical request information, including its IP address, to Google's servers. If those fonts are served directly by our website instead, no connection to Google is needed for that font request.

We may disclose relevant information to professional advisers, where reasonably necessary to comply with applicable law or valid legal process, or to protect rights, security, and safety. Information may also be disclosed in connection with a proposed or completed merger, financing, reorganization, acquisition, or transfer of relevant business assets, subject to applicable law and appropriate confidentiality protections.

We do not sell personal information. We do not share personal information for cross-context behavioral advertising or provide our waitlist or contact list to other businesses for their independent marketing. A change of ownership does not, by itself, override your communication preferences or authorize an incompatible new use of your information.

6. Cookies, tracking, and automated checks

The website may use cookies or similar browser technologies for functionality and security, including to support protection against automated form abuse. Browser settings that block those technologies may affect whether some features work.

For this waitlist website, we do not use advertising pixels, behavioral-advertising trackers, or nonessential analytics cookies. We do not use email-open pixels or click tracking to measure engagement with our launch emails. Processing an unsubscribe request or recording delivery and bounce information is separate from tracking general email engagement.

Our website does not change its behavior in response to the legacy Do Not Track browser setting. We do not conduct cross-site behavioral advertising through this website. Under our current no-sale and no-advertising-sharing practices, there is no such activity for a Global Privacy Control signal to opt you out of. We honor legally required opt-out preference signals where applicable.

If we introduce nonessential tracking, we will first update the relevant disclosures and provide consent or opt-out controls where required. Visiting the website does not, by itself, provide consent to unrelated marketing or nonessential tracking.

Automated security checks may block or delay suspicious form submissions. We do not use waitlist information for automated decision-making that produces legal or similarly significant effects on individuals. Contact hello@ilou.ai if you believe a legitimate submission was blocked incorrectly.

7. How long we keep information

We retain information for as long as reasonably necessary for the purposes described here, taking into account your subscription preferences, the nature of an inquiry, legal requirements, security needs, and the need to resolve disputes or document compliance.

Waitlist information is retained while your subscription remains active and the waitlist or launch-notification purpose continues. When that purpose ends, we delete or de-identify information no longer needed, except for limited records retained for the reasons described below. We do not automatically convert a waitlist subscription into unrelated marketing consent.

Suppression and consent records may be retained after an unsubscribe or deletion request to honor an opt-out, prevent repeated delivery attempts, and document the relevant request or permission. A suppression record is not an active subscription.

Contact correspondence is retained as needed to answer the inquiry, handle related follow-up, and address reasonable legal, security, or recordkeeping needs. The temporary message content held in the contact sending queue is removed after the email provider accepts the notification for sending. This does not delete the delivered message from our Zoho inbox or immediately erase provider-side delivery records. Failed or deferred messages may remain temporarily for retry and troubleshooting.

Temporary abuse-prevention identifiers expire under the application's security controls. Other logs and backup copies follow the applicable system retention schedule, subject to legal preservation requirements. When information is deleted from active systems, limited copies may remain in backups until those backups are replaced or deleted. Restoring a backup must not reactivate marketing to an address that has opted out.

We review retention needs and remove information when it is no longer required. You may contact us to ask about retention associated with your information.

8. How we protect information

We use safeguards designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure. These include access controls, restricted administrative credentials, encrypted connections for the public website, and encryption for messages temporarily stored in outgoing queues.

No internet transmission, email service, or storage system can guarantee absolute security. These safeguards do not mean that ordinary email is end-to-end encrypted. If a security incident requires notification under applicable law, we will provide the required notification.

9. Your privacy rights and requests

You may contact hello@ilou.ai to ask about information associated with your address, request access, correction, or deletion, or change your communication preferences. You may also use the website's Contact form or write to the mailing address in this policy.

Depending on your location and the laws applicable to Daerus, your rights may include obtaining a copy of your personal information, receiving it in a portable format, restricting or objecting to processing, withdrawing consent, opting out of covered processing, and appealing a decision about a privacy request. An authorized agent may submit a request on your behalf where permitted by law.

We may need to verify your identity or an agent's authority before providing information or carrying out a request. We ask only for information reasonably necessary for verification. We do not require an account to make a request. Rights are subject to applicable exceptions, and we will explain a denial or limitation where required and respond within the applicable legal timeframe.

To appeal a decision, reply to our response or email hello@ilou.ai and explain the decision you would like reviewed. Where applicable, you may also complain to your state attorney general or relevant data-protection authority. We do not unlawfully discriminate against people for exercising privacy rights.

Unsubscribing stops launch marketing but is not necessarily a request to erase all records. A deletion request may still leave limited suppression, legal, or security records, as described in Section 7.

10. Information for international visitors

Daerus operates from the United States. Information may be processed in the United States and other countries where our providers or authorized personnel operate. Those countries may have different data-protection laws from the country where you live.

Where applicable law requires a legal basis, we rely on consent for the launch emails you request; legitimate interests in operating and securing the website, preventing abuse, responding to inquiries, and protecting legal rights where those interests are not overridden by your rights; and compliance with legal obligations where relevant. Withdrawing consent does not affect processing that was lawful before withdrawal.

Where international-transfer restrictions apply, transfers must be supported by a legally permitted mechanism, such as an applicable adequacy decision or appropriate contractual safeguards. You may contact hello@ilou.ai to request information about processing locations and copies or descriptions of safeguards applicable to your information. This policy does not, by itself, obtain consent to a restricted international transfer.

Where applicable, residents of the European Economic Area may complain to their local data-protection authority, UK residents to the Information Commissioner's Office, and Swiss residents to the Federal Data Protection and Information Commissioner. You do not need to contact us first before exercising a right to complain to a regulator.

11. Children's information

The prelaunch website and waitlist are intended for a general audience and are not directed to children under 13. We do not knowingly collect personal information from children under 13 through the waitlist or contact form.

If you believe a child under 13 has provided information, contact hello@ilou.ai. We will investigate and take appropriate steps to delete the information and comply with applicable law. Where a different age or parental-consent requirement applies, we will address that requirement. This section does not establish the eligibility rules for the future Ilou app.

12. Changes to this policy

We may update this policy when the website, our practices, providers, or legal requirements change. We will post the revised policy here and update the date above.

For material changes, we will provide additional notice where required or appropriate, such as a website notice or direct communication. If a new use requires consent, we will request it before using the information for that purpose. Posting a revised policy does not override an existing unsubscribe request or, by itself, authorize unrelated marketing.

13. Contact Daerus about Ilou privacy

For privacy questions, requests, or concerns:

Email: hello@ilou.ai
Website: ilou.ai

You may also use the Contact form on the Ilou website.

Back to Ilou