Privacy Policy
Last updated: 26 June 2025
Overview
Cacuda is built on a simple principle: your data is yours. We provide AI-powered content scanning services without retaining, selling, or training on the content you submit. This policy explains what we collect, why, and how we protect it.
Content You Submit for Scanning
- Zero retention. Images and text submitted to our detection endpoints are processed in memory and immediately discarded. We do not store your content on disk, in databases, or in logs.
- No training. Your submitted content is never used to train, fine-tune, or improve our models or any third-party models.
- No sharing. We do not share, sell, or transfer your submitted content to any third party for any purpose.
Account Information
When you create an account, we collect:
- Email address (for authentication and communication)
- Name (for display purposes)
- Hashed password (we cannot read your password)
We store this information securely for as long as your account is active. You may delete your account at any time by contacting us.
Usage Data
We record minimal usage metadata to operate the service:
- Credit transaction records (amount, type, timestamp — not the content scanned)
- API key usage timestamps (when a key was last used, not what was scanned)
We do not use analytics trackers, fingerprinting, or third-party advertising scripts.
Cookies
We use a single session cookie to keep you signed in. It is:
- HTTP-only and secure
- Strictly necessary for authentication
- Not used for tracking or advertising
Payment Information
Payment processing is handled by Stripe. We do not store credit card numbers or bank details on our servers. Stripe's privacy policy governs the handling of your payment information.
GDPR Compliance
For users in the European Economic Area:
- Lawful basis: We process account data under contractual necessity and usage metadata under legitimate interest.
- Data minimisation: We collect only what is necessary to provide the service.
- Right of access: You may request a copy of data we hold about you.
- Right of deletion: You may request deletion of your account and all associated data.
- Right of portability: You may request your data in a machine-readable format.
Security
We use industry-standard measures to protect your data: encrypted connections (TLS), hashed passwords (bcrypt), and isolated processing environments. Content submitted for scanning never touches persistent storage.
Changes to This Policy
We may update this policy from time to time. Material changes will be communicated via email to registered users. Continued use of the service after changes constitutes acceptance.
Contact
For privacy-related enquiries, data access requests, or account deletion, contact us at privacy@cacuda.com.