Legal
Privacy notice
This notice explains how Sicilean s.r.l. processes personal data collected through the 1HERO site: the waitlist, the confirmation and the hero card, invitations to the people you bring along, the early access invitation, the investor form and the community channels. The 1HERO product will have its own notice, published before early access.
Version 0.1Last updated: September 28, 2026Draft for review
Who the controller is
The data controller is Sicilean s.r.l., with the details shown below.
For any question about your data, write to privacy@1hero.ai. A person replies, with their own name.
Sicilean s.r.l., Via Roma n. 95, 91021 Campobello di Mazara (TP), Italia. VAT IT02898760810. Email privacy@1hero.ai, certified email (PEC) sicilean@pec.it.
Which data, what for and for how long
Waitlist
- Which data
- Full name, email, what you need the app for, your idea if you write it, the site language, the page you came from, the date and the version of the notice you read.
- What for
- Managing your sign-up, confirming your address and sending you the invitation.
- Legal basis
- Your request to sign up (Article 6(1)(b) of the General Data Protection Regulation).
- Required?
- Full name, email and what you need the app for are required: without them, sign-up isn't possible. The idea is optional.
- How long
- Until the end of early access, and in any case no longer than 24 months from sign-up.
Emails about how 1HERO is coming along
- Which data
- Name, email and language.
- What for
- Writing to you only about how 1HERO is progressing: sign-up confirmation, new versions, the opening of your access, meetups, what's changed. Never promotions or other people's content.
- Legal basis
- Your request to sign up, of which these emails are the stated purpose (Article 6(1)(b)).
- Required?
- Yes, as long as you stay on the waitlist. Every email has a link to leave.
- How long
- Same as the waitlist.
Hero card
- Which data
- The name to show, your superpower, Hero's pose, milestones with their dates and, only if you choose to show them, your idea in one line and the kind of idea.
- What for
- Creating your card and, if you choose, making it visible to anyone with the link.
- Legal basis
- Your request to create the card (Article 6(1)(b)). The card stays private until you decide to show it.
- Required?
- No. You can change or delete it whenever you like.
- How long
- Same as the waitlist, or until you delete it.
Invitations to people you bring along
- Which data
- The link between your sign-up and the sign-up of whoever uses your invitation.
- What for
- Letting whoever receives your invitation sign up. The person who invited you doesn't see your data: they only see how many people used their invitation.
- Legal basis
- The request of the person inviting and of the person invited (Article 6(1)(b)).
- Required?
- No.
- How long
- Same as the waitlist.
Profile at invitation
- Which data
- Your Discord username, how you get on with technology, the device you'll use to try 1HERO, whether you'd like a guided session, your city. All optional.
- What for
- Looking after each person the way they prefer, inviting you to Discord and organising possible in-person meetups.
- Legal basis
- Your choice to provide them (consent, Article 6(1)(a)), which you can withdraw at any time.
- Required?
- No.
- How long
- Until the end of early access, or earlier if you delete them.
Investor form
- Which data
- Full name, email, organisation, who you represent, what you're interested in, your message.
- What for
- Replying to your request.
- Legal basis
- Your request for a reply (Article 6(1)(b)).
- Required?
- Name, email, who you represent and what you're interested in are required; the rest is optional.
- How long
- to be defined with legal counsel
Technical data
- Which data
- IP address, date and time, page requested, browser type.
- What for
- Running the site and protecting it from abuse.
- Legal basis
- The legitimate interest of Sicilean s.r.l. in the security of the site (Article 6(1)(f)).
- Required?
- They're needed to show you the site.
- How long
- to be defined with legal counsel
The community on Discord and WhatsApp
Discord and WhatsApp process the data of people who use their services as independent controllers, under their own privacy notices.
Sicilean s.r.l. only sees what you post in the 1HERO channels and, on Discord, your username. It doesn't receive the numbers of the people following the 1HERO WhatsApp channel.
The community is for adults only.
Who can see the data
The people on the Sicilean s.r.l. team who work on 1HERO, only as far as their job requires.
The providers that help run the site, the waitlist and the emails, as processors under a written contract. They're listed on the transparency page.
Sicilean s.r.l. doesn't sell your data and doesn't share it with anyone for advertising.
Where it's processed
The data is processed and stored in the European Union. Some providers are US companies: this means some remaining exposure, explained on the transparency page.
When data leaves the European Union, the transfer uses the safeguards set out in the Regulation, such as standard contractual clauses or an adequacy decision.
Your rights
You can ask to see your data, correct it, delete it, restrict its use, receive it in a format other software can read, object to its processing and withdraw any consent you've given. Write to privacy@1hero.ai.
If you think your data is being processed incorrectly, you can complain to the Italian data protection authority (Garante per la protezione dei dati personali), or to the supervisory authority of the country where you live.
Automated decisions
No decision about you is made solely by automated means.
Changes to this notice
Every version has a number and a date, and the history is on the legal information page. If a change affects what happens to your data, you'll get an email before it comes into force.