Privacy policy

For the cuotal.com waitlist · Last updated: August 2026

1. Who is responsible for your data

Hugo Lloreda Elosegui ("Cuotal")
Spanish tax ID (NIF): 47894173P
Madrid, Spain
Contact: hugo@cuotal.app

2. What we collect

Through the waitlist we only collect your email address. If you also answer the optional short survey after signing up, we store your answers alongside your email.

3. What we use it for

• To let you know when the Cuotal app launches.
• To send you relevant product development updates.
• To share exclusive offers for waitlist members.

We never sell, share or transfer your email to third parties. Period.

4. Legal basis

We process your data based on your explicit consent, given when you submit the waitlist form accepting this policy (GDPR Article 6.1.a). You can withdraw it at any time. We apply the GDPR standard to everyone, wherever you live — including users in the United States.

5. How long we keep it

We keep your email until Cuotal launches publicly or until you ask us to delete it, whichever comes first. Once the app launches, waitlist data is deleted unless you create a Cuotal account.

6. Where your data lives

Your data is stored with Supabase, on Amazon Web Services infrastructure in the European Union. Welcome emails are sent through Resend. Any international transfer is covered by the Standard Contractual Clauses approved by the European Commission.

7. Your rights

• Access: get a copy of the data we hold about you.
• Rectification: correct wrong or incomplete data.
• Deletion: have your email removed from our database.
• Portability: receive your data in a structured format.
• Objection: object to the processing of your data.
• Withdrawal of consent: at any time, no questions asked.

To exercise any of these, email hugo@cuotal.app; we reply within 30 days. You can also lodge a complaint with the Spanish data protection authority (AEPD).

8. Security

We apply technical and organizational measures to protect your data, including encryption in transit (HTTPS/TLS), restricted database access policies and access logging.

9. Analytics and cookies

The landing page uses PostHog (EU servers) to measure visits and form usage in aggregate: no advertising cookies, no cross-site tracking, no data shared for commercial purposes. If you join the list, your email is linked to that measurement so we can attribute your signup. This legal page loads no analytics at all.

10. Changes

We may update this policy. Any relevant change will be communicated to waitlist members by email.