Privacy policy
Last updated October 2026. This policy explains how Watchtower by NorthQA handles personal data on this site. See also the cookie policy.
What this policy covers
This policy covers watchtower.systems, the public website for Watchtower by NorthQA. It explains what personal data the site collects when you visit, join the waitlist, or use the support chat, and what happens to it.
What we collect
When you join the waitlist we collect the email address you enter. When you use the support chat, we collect what you type or say in that conversation. The site doesn't ask for anything else, and it doesn't use analytics, advertising, or tracking cookies or pixels.
Why we collect it
Your waitlist email is used to tell you when Watchtower is ready and to send your early access invite. Support chat messages are used to answer your question. We don't sell your data or use it for advertising.
Who processes it
Waitlist signups are recorded through a Google Apps Script endpoint and are subject to Google's privacy practices. Support chat conversations are handled by ElevenLabs, which runs our support agent, and are subject to ElevenLabs' privacy practices; nothing is sent until you press Chat or Talk. The site is hosted on Cloudflare Pages, so Cloudflare handles your requests to it as our hosting provider.
What stays in your browser
The site keeps two local storage entries: one remembering that you saw the cookie notice, and a local copy of the email you submit to the waitlist, kept as a safety net if the signup request fails partway. The cookie policy describes both in detail.
Legal basis for processing
We rely on your consent and on taking the steps you asked for when you submit the waitlist form or start a support chat (GDPR Article 6(1)(a) and (b); Data Privacy Act of 2012 Section 12(a) and (b)), and on our legitimate interest in keeping the site itself working (GDPR Article 6(1)(f); Data Privacy Act of 2012 Section 12(f)).
How long we keep it
Your waitlist email is kept so we can notify you when Watchtower is ready, and deleted on request at any time. Local storage entries stay in your browser until you clear them or your browser does.
Your rights
Under the GDPR you can ask to access, correct, delete, or export your data, object to or restrict its processing, and lodge a complaint with your local supervisory authority. Under the Philippine Data Privacy Act of 2012 (RA 10173) you have the same rights to be informed, access, correct, and erase or block your data, to object, to data portability, to damages, and to file a complaint with the National Privacy Commission (privacy.gov.ph).
Changes to this policy
We'll update this page if what we collect or who processes it changes.
Contact us
For questions about this policy, or to exercise any of the rights above, reach out through northqa.com.