Privacy notice
Last updated October 31, 2026.
Pencil is made by Devea Oy, which is responsible for the personal data this site collects. Write to privacy@pencilagent.com with any question about it.
What we collect
When you sign up for early access, we keep the email address you enter. That’s all we ask for.
Anything you type into the demo on the home page stays in your browser and is never sent to us. The site uses no tracking cookies, analytics, or ads.
Like any website, ours receives your IP address and basic details of each request, such as the page you asked for and your browser. We use them to deliver the site, to limit how often one address can sign up, and in short-lived logs for fixing problems.
Why we use it
We use your email address to tell you when your early access is ready and to give you the perks that come with your place, such as priority support. We don’t use it for anything else, and we never sell it or share it for anyone else’s marketing.
Our legal basis is your consent, which you give when you sign up. You can withdraw it at any time, and we’ll delete your email address. We handle request details on the basis of our legitimate interest in running a site that works and stays secure.
Who handles it for us
- Resend (USA) keeps the early-access list and sends our emails.
- Cloudflare (USA) hosts the site, protects it from abuse, and keeps our request logs.
Both work only on our instructions, under data processing agreements, and both are certified under the EU–US Data Privacy Framework, which covers moving your data to the United States.
How long we keep it
We keep your email address while early access runs and, if your place came with a perk for life, for as long as you use Pencil. You can have it deleted sooner at any time. Request logs are deleted after at most seven days.
Your rights
You can ask to see the data we have about you, correct it, delete it, or get a copy to take elsewhere, and you can object to or restrict how we use it. Write to privacy@pencilagent.com and we’ll answer within a month.
If you think we’ve mishandled your data, you can complain to a data protection authority, such as the one where you live. In Finland, where Devea Oy is based, that’s the Data Protection Ombudsman.