Privacy notice

Caudian is a product of Flouvia, S.A.S. de C.V. ("Flouvia"), based in Mexico City, Mexico, which is responsible for processing your personal data. For anything about this notice, write to hi@caudian.app.

When you request early access:

• Your email address.
• What you trade or want to follow: crypto, stocks or both.
• Your X handle, if you choose to give it.
• The language of the page you request it from, which is the language we write to you in.
• When you signed up, when we sent the confirmation email and when you confirmed, and the version of this notice in force when you signed up.

When you write to us through the contact form:

• Your email address and, if you choose to give it, your name.
• The topic you choose (general, press, business and data, or privacy) and your message.

When you report a problem:

• The title and description you write, where it happened (the terminal, the API or the site) and how much it affects you.
• The link to a screenshot, if you paste one, and your email address, if you choose to give it.
• Unless you leave it out, the technical context the form shows you in full before sending: the page you came from, your browser's name and version, your operating system, the size of your window and screen, your browser's language and your local time with its time zone.

With each message and each report we also keep the page's language, when it arrived and the version of this notice in force when you sent it.

To protect the forms from abuse we use an irreversible fingerprint of your IP address (an HMAC code that cannot be turned back into it), deleted within 24 hours. Our hosting provider records the IP address of every visit in its technical logs.

We do not collect sensitive personal data or financial data. This site uses no cookies and no analytics. The footer's globe reads your browser's time zone to turn toward your region; that stays on your device and never reaches us.

We use your data only for these purposes, all of them needed for what you ask of us:

• Keeping your request on the waitlist and confirming the address is yours (double opt-in).
• Deciding the order of invitations by what you trade or want to follow.
• Inviting you to Caudian when it is your turn and preparing your access.
• Telling you about changes to early access.
• Reading and answering what you write through the contact form, including requests about your data.
• Finding and fixing the problems you report and, if you left your email, writing to you about them.
• Protecting the site from automated sign-ups and abuse.

The contact and problem report forms send you no automatic emails: each message reaches our inbox and, if needed, we answer.

We do not use your data for advertising, we do not sell it and we do not use it for any other purpose.

To run the list, the contact form and the reports we use providers that process the data on our behalf and only for these purposes:

• Vercel Inc. (United States): hosting of the site.
• Neon (United States): the database of the waitlist, the messages and the reports.
• Resend, Inc. (United States): sending the emails, including the notice of each message and each report to our inbox.

These providers are outside Mexico, so your data is stored and processed in the United States. We will only hand data to an authority when a law or an order requires it.

• If you do not confirm your address, we delete it 30 days after your last request.
• If you confirm it, we keep it for up to 24 months after your confirmation while you wait for your invitation.
• When we invite you, we keep the waitlist record 12 more months to link it to your account; your account's data is governed by its own privacy notice.
• Messages from the contact form and problem reports, with their technical context, are deleted 12 months after we receive them.
• The fingerprint of your IP address is deleted within 24 hours.

You can access your data, correct it, cancel it or object to its processing (ARCO rights), withdraw your consent and limit the use or disclosure of your data. To withdraw your request, just ask.

Write to hi@caudian.app from the address you signed up or wrote to us with, with your name and the right you want to exercise; if you ask on behalf of someone else, attach the document that proves it. We answer within 20 business days and, if it applies, carry it out within the following 15 business days.

If you believe your right to data protection was violated, you can go to the Mexican personal data protection authority.

Early access is only for people over 18. If we learn that a minor signed up, we delete the record.

We will publish any change at caudian.app/en/privacy, with its date. If a change affects the purposes, we will tell you by email before applying it.