Privacy policy

KWYD (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This policy explains what we collect, why, and your rights under the European General Data Protection Regulation (GDPR) and applicable national laws.

1. Data controller

2. What we collect

• Email address — if you submit one of our pre-launch signup forms.
• Name, email, message — if you use our contact form.
• Cookie preferences — stored locally in your browser when you respond to our cookie banner.
• Server logs — IP address, user agent, request timestamps and paths, kept short-term for security and debugging.

3. Purpose and legal basis

• Pre-launch list — to send you product updates and launch information. Legal basis: your explicit consent (GDPR Art. 6(1)(a)). You can unsubscribe at any time.
• Contact form — to reply to your message. Legal basis: legitimate interest (GDPR Art. 6(1)(f)).
• Server logs and security — to keep the site safe and operational. Legal basis: legitimate interest.

4. Third-party processors

We rely on a small number of carefully selected processors. They are bound by GDPR-compliant data processing agreements and, where relevant, Standard Contractual Clauses for transfers outside the European Economic Area.

• Klaviyo, Inc. (United States) — email marketing platform that holds the pre-launch list.
• Resend, Inc. (United States) — transactional email service used to send contact-form submissions to our inbox.
• Vercel, Inc. (United States) — hosting provider for kwyd.eu.

5. International transfers

Some of our processors are based in the United States. Where that is the case, transfers are governed by Standard Contractual Clauses approved by the European Commission, supplemented by technical and organisational measures.

6. Data retention

• Pre-launch list: until you unsubscribe, or until 24 months after our public product launch — whichever comes first.
• Contact form messages: 24 months from receipt, then deleted.
• Cookie preferences: stored on your browser; you can clear them at any time.
• Server logs: 30 days.

7. Your rights

Under GDPR you have the right to:

• Access the personal data we hold about you;
• Request correction of inaccurate or incomplete data;
• Request erasure of your data (the “right to be forgotten”);
• Restrict or object to processing;
• Receive your data in a portable format;
• Withdraw your consent at any time;
• Lodge a complaint with your national supervisory authority (CNIL in France, AEPD in Spain, or the equivalent in your country).

To exercise any of these rights, write to contact@kwyd.es. We will respond within one month.

8. Cookies and local storage

We use a minimal amount of browser local storage to remember your cookie preferences. Currently, no analytics or marketing cookies are deployed on the site. If that changes, the cookie banner will reflect it and ask for fresh consent. You can re-open the banner at any time from the “Cookie settings” link in the footer.

9. Security

We take reasonable technical and organisational measures to protect your data, including transport encryption (HTTPS), encryption at rest by our hosting provider, and access controls on our processor accounts.

10. Children

This site is not directed at children under 16. We do not knowingly collect personal data from children.

11. Changes to this policy

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent change. Material changes will be communicated to subscribers by email.

12. Contact

For any privacy-related question, write to contact@kwyd.es.