1. Introduction
KAIDAN ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our pre-launch waitlist service.
By accessing our website or submitting your information through our waitlist form, you agree to the terms of this Privacy Policy. If you do not agree, please do not use our website or submit your information.
2. Data Controller
The data controller responsible for your personal data is:
Jose Luis Casadiego
Operating as KAIDAN
Spain
Email: inquiries@kaidan.es
3. Information We Collect
We collect information that you voluntarily provide when signing up for our waitlist:
3.1 Personal Information
- Email address — provided when you join the waitlist
3.2 Survey Information (Optional)
After signing up, you may optionally provide:
- Professional role — your job function or title category
- Intended use cases — how you plan to use KAIDAN
- Challenges — your current pain points with AI tools
This survey data is entirely optional and used solely for product research purposes.
3.3 Automatically Collected Information
Our hosting provider (Vercel) may automatically collect standard web server logs, which can include:
- IP address
- Browser type and version
- Pages visited and timestamps
- Referring URL
We do not use cookies, tracking pixels, or third-party analytics on this website. All fonts are self-hosted — no external font services are loaded, and no visitor data is transferred to third parties during page rendering.
4. Legal Basis for Processing (GDPR Article 6)
We process your personal data based on the following legal grounds under the General Data Protection Regulation (GDPR):
- Consent (Article 6(1)(a)) — When you voluntarily submit your email address through our waitlist form, you consent to the processing of that data for the purpose of receiving launch updates and early access notifications. You may withdraw this consent at any time.
- Consent (Article 6(1)(a)) — When you voluntarily complete the optional survey, you consent to the processing of your responses for product development and market research purposes.
- Legitimate interest (Article 6(1)(f)) — Standard server logs collected by our hosting provider are processed based on our legitimate interest in maintaining the security and proper operation of our website.
5. How We Use Your Information
We use the information we collect for the following purposes:
- Waitlist management — to notify you when KAIDAN launches or when early access becomes available
- Product development — to understand our potential users' needs and improve KAIDAN before launch
- Communication — to send you updates about KAIDAN's development, launch timeline, and related announcements
We will not use your email address for unrelated marketing, and we will not send you unsolicited promotional content from third parties.
6. Data Storage and Security
Your data is stored securely using Supabase, a managed database platform built on PostgreSQL. Supabase provides:
- Encryption at rest and in transit (TLS/SSL)
- Row Level Security (RLS) policies to restrict unauthorized access
- SOC 2 Type II compliant infrastructure
While we take reasonable measures to protect your information, no method of electronic storage is 100% secure. We cannot guarantee absolute security but are committed to using commercially acceptable means to protect your data.
7. Data Sharing and Disclosure
We do not sell, trade, rent, or share your personal information with third parties, except in the following limited circumstances:
- Service providers — we use Supabase (database hosting) and Vercel (website hosting) to operate our service. These providers process your data on our behalf and are bound by their own privacy policies and data processing agreements.
- Legal requirements — we may disclose your information if required by law, regulation, legal process, or governmental request.
- Business transfers — in the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
8. International Data Transfers
Your information may be stored and processed in data centers outside the European Economic Area (EEA), including in the United States, where our service providers (Supabase, Vercel) operate infrastructure. These transfers are made in compliance with GDPR, relying on:
- Standard Contractual Clauses (SCCs) adopted by the European Commission
- The EU-US Data Privacy Framework, where applicable
By submitting your information, you acknowledge these transfers. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy and applicable law.
9. Your Rights Under GDPR
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
- Right of access (Article 15) — request a copy of the personal data we hold about you
- Right to rectification (Article 16) — request that we correct inaccurate or incomplete data
- Right to erasure (Article 17) — request that we delete your data ("right to be forgotten")
- Right to restrict processing (Article 18) — request that we limit how we use your data
- Right to data portability (Article 20) — request your data in a structured, machine-readable format
- Right to object (Article 21) — object to the processing of your data based on legitimate interests
- Right to withdraw consent — withdraw your consent to data processing at any time, without affecting the lawfulness of processing before withdrawal
- Right to lodge a complaint — you have the right to file a complaint with a supervisory authority. For Spain, this is the Agencia Española de Protección de Datos (AEPD) at www.aepd.es
To exercise any of these rights, please contact us at inquiries@kaidan.es. We will respond within 30 days of receiving your request.
10. Data Retention
We retain your waitlist data for as long as it is needed to fulfill the purposes described in this policy — primarily until KAIDAN launches and you are notified. After that, your waitlist data will either be:
- Converted into a user account (with your explicit consent), or
- Deleted within 30 days of your request, or within 90 days of becoming unnecessary for its original purpose
11. Children's Privacy
Our website is not intended for children under the age of 16. We do not knowingly collect personal information from children. If we learn that we have collected data from a child under 16, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. If we make material changes, we will notify you by email (if we have your contact information) or by placing a prominent notice on our website. We encourage you to review this page periodically. Your continued use of the website after changes constitutes acceptance of the updated policy.
13. Contact Us
If you have questions about this Privacy Policy, wish to exercise your data rights, or have a complaint about how we handle your data, please contact us at:
Jose Luis Casadiego
Operating as KAIDAN
Email: inquiries@kaidan.es