Privacy policy.Plainly written.

Who we are

YarnOS is a product of Opti5 LABS (“we”, “us”), a technology team based in Colombo, Sri Lanka. This policy covers this website, yarn-os.com: the waitlist, the contact form and the booking calendar. Our point of contact for anything in it is yarnos@opti5labs.com.

It does not cover factory data. If you become a validation partner and share footage or records from your floor, that is handled under a separate written agreement, usually an NDA. In that case your factory stays in control of its data and we act on its instructions.

We aim to handle your details in line with Sri Lanka’s Personal Data Protection Act, No. 9 of 2022, and with the data protection law where you live if you are visiting from the European Economic Area or the United Kingdom.

What we collect

• The waitlist. Your name and email address.
• The contact form. Your name, email address, your company (if you give it) and your message.
• Booking a meeting. The name, email address, time zone and any notes you enter in the booking calendar, and the time you choose. These go to Cal.com, not through our own servers.
• Email and conversations. What you write to us, and notes from calls we have together.
• Connection data. Your IP address, browser type, the page requested and the time, recorded in server logs by our hosting provider whenever any page is served.

Each form also has a hidden field and a timer that tell us whether a person or a bot sent it. They are checked when the form arrives and are not kept.

We don’t ask for sensitive details such as health, beliefs or financial account numbers, and we’d rather you left them out of your message.

How we use it

We use your details only for the purposes below, each on the ground shown. That includes emailing you a confirmation and, if you joined the waitlist, a note when pilots open.

The waitlist and its emails

Your consent: you asked to join, and you can leave at any time

Answering the contact form and arranging meetings

Steps you asked us to take, and our legitimate interest in answering enquiries

Talking with factories that offer to validate YarnOS

Our legitimate interest in running a small product

Keeping the website secure and stopping automated abuse

Our legitimate interest

Records the law or our accounts require

A legal obligation

Where the law requires your consent for something else, we ask for it first. We do not sell your personal data, and we do not use it for advertising.

Cookies and analytics

This website sets no cookies of its own and runs no analytics, advertising pixels or session recording. We don’t profile visitors. Our fonts are served from our own domain, so loading them tells no one else you were here.

To keep your place when you refresh a page, the site uses your browser’s session storage. It stays on your device, ends with your visit and is never sent to us.

Our hosting provider may set a strictly necessary cookie to tell people from automated traffic and to keep the site available. It does nothing for advertising.

If we add analytics later, we’ll update this policy first and, where the law requires it, ask for your consent.

The booking calendar

The calendar in the “Book a meeting” window is Cal.com’s. Nothing is requested from Cal.com until you open that window. Once you do, your browser connects to Cal.com directly, so Cal.com receives your IP address, browser type and the time of the request, and it may set its own cookies. We don’t send it anything about you, and we don’t get that technical data back.

If you’d rather not use it, email yarnos@opti5labs.com with a couple of times that suit you. Cal.com’s own privacy policy explains what it does with the details you enter.

Who handles your data

A small number of providers help us run the site. Each handles your details only to provide its service to us. We share personal data with no one else, except where the law requires it, in a business transfer, or with your clear consent.

• Cloudflare, Inc.United States, global network

  Hosts this website and delivers it to your browser. To do that it handles your IP address, browser type and the address you asked for, and keeps standard server logs.

• Google LLCUnited States

  Our waitlist and messages are kept in a Google Sheet, and the emails we send you (a confirmation, a reply) go out from a Google account. Meetings we arrange may use Google Meet and Google Calendar.

• Cal.com, Inc.United States

  Runs the booking calendar. It receives the details you enter to book a time, sends the invitation, and handles rescheduling and cancelling.

We’ll update this list whenever we add or change a provider that handles personal data.

Where it travels

We are in Sri Lanka and our providers are mostly in the United States, so your details may be processed in either place, and in other countries where those providers operate. Cloudflare serves the site from a global network, so where it is processed depends on where you are connecting from.

If you are in the European Economic Area or the United Kingdom, that can mean your data leaves those areas. Where it does, we rely on the transfer protections our providers offer in their own data terms. Write to us if you’d like detail on a specific transfer.

How long we keep it

Waitlist entries

Until you ask us to remove you, and reviewed about every 24 months

Messages from the contact form

24 months

Booking records

24 months

Server request logs

About 30 days, as set by our hosting provider

Email and business correspondence

5 years

Contracts and billing records, if we work together

7 years

After that we delete it or remove what identifies you. You can ask us to delete things sooner at any time.

Your choices

You can ask us for a copy of the details we hold about you, to correct them, to delete them, to stop using them for a particular purpose, or to withdraw a consent you gave. Write to yarnos@opti5labs.com and we’ll reply within 30 days.

To leave the waitlist, reply to any email from us or write to the same address, and we’ll remove you.

If you think we have handled your details wrongly, please tell us first so we can put it right. You also have the right to complain to a data protection authority: in Sri Lanka, the Data Protection Authority set up under the Personal Data Protection Act, or, if you are in the United Kingdom or the European Economic Area, the regulator in your country.

Keeping it safe

We take reasonable technical and organisational steps to protect your details. The site is served over an encrypted connection, the forms pass your details to our records over an encrypted connection with a secret shared only between the site and our records, and access to those records is limited to the few people on the team who need it. No system is perfectly safe, so please send us only what you’re comfortable sharing.

Children

This website is not directed at anyone under 18, and we don’t knowingly collect their details. If you think a child has sent us theirs, write to us and we’ll delete it.

Other websites

This site links to others, including our team’s LinkedIn and GitHub profiles, Opti5 LABS and the Agile Team Project. This policy covers only yarn-os.com, and we aren’t responsible for how other sites handle your details. The booking calendar is covered above, because it loads on this page rather than being a link you follow.

Changes to this policy

We may update this policy from time to time. When we change it in a way that matters, we’ll change the date at the top of this page. Opti5 LABS has its own privacy policy for its own website at opti5labs.com/privacy-policy.

Version history

21 October 2026

First published.

Contact us

For any question, request or concern about this policy, write to yarnos@opti5labs.com.