Privacy Policy
Last updated · May 6, 2026
This Privacy Policy explains how cAIrusel ("cAIrusel", "we", "us", or "our") collects, uses, discloses, and safeguards your personal information when you visit our website or join our waitlist. We are committed to complying with the EU General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act as amended by the CPRA (CCPA/CPRA), and other applicable US state privacy laws.
1. Who we are
cAIrusel is the data controller for personal data processed through this site. You can reach us at dumitru@digitalmoldova.com for any privacy-related questions or to exercise your rights.
2. Information we collect
- Waitlist data: the email address you submit through the waitlist form.
- Technical data: IP address, browser type, device information, referring URL, and pages viewed, collected automatically through our hosting and analytics tools.
- Cookie data: see our Cookies Policy for details on what we set and why.
- Communications: any information you send us by email.
We do not knowingly collect personal information from children under 16.
3. How we use your information
- To add you to the waitlist and notify you when cAIrusel launches.
- To operate, secure, and improve the website.
- To respond to your inquiries and provide support.
- To comply with legal obligations and enforce our terms.
4. Legal bases (EU/UK users)
We rely on the following GDPR legal bases:
- Consent — for joining the waitlist and for non-essential cookies.
- Legitimate interests — to secure the site, prevent abuse, and understand aggregate usage.
- Legal obligation — when we must retain or disclose data to comply with the law.
5. Sharing your information
We do not sell or rent your personal data. We share it only with:
- Service providers that help us run the site (hosting, database, analytics, email delivery), bound by contractual data-protection obligations.
- Authorities or third parties when required by law, court order, or to protect our rights.
- A successor entity in the event of a merger, acquisition, or asset sale.
6. International transfers
Personal data may be processed in countries outside your own, including the United States. Where required, we use appropriate safeguards such as the EU Standard Contractual Clauses or equivalent mechanisms.
7. Data retention
We keep waitlist data until launch and for a reasonable period afterward to invite you to the product, or until you ask us to delete it. Technical and analytics data is retained for up to 24 months. We delete or anonymize data when it is no longer necessary for the purposes above.
8. Your rights
Depending on where you live, you may have the right to:
- Access, correct, or delete your personal data.
- Object to or restrict certain processing.
- Withdraw consent at any time (without affecting prior processing).
- Receive a portable copy of your data.
- Lodge a complaint with your local data protection authority (EU/UK).
US residents (CA, CO, CT, VA, UT and others): you may request to know, delete, correct, or opt out of the "sale" or "sharing" of your personal information. We do not sell or share personal information for cross-context behavioral advertising. To exercise any right, email us at the address above. We will not discriminate against you for exercising your rights.
9. Security
We use industry-standard technical and organizational measures to protect your data, including encryption in transit, access controls, and row-level security on our database. No system is 100% secure, so we cannot guarantee absolute security.
10. Changes
We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the most recent version. Material changes will be highlighted on the site.
11. Contact
Questions or requests? Email dumitru@digitalmoldova.com.