Privacy Policy
Last updated 9 August 2026. What we collect, why, and what you can do about it.
Who is responsible
Cadive, operating from Montevideo, Uruguay, is the data controller for personal data described here. Uruguay's data protection law (Ley N.º 18.331) applies, and the regulator is the Unidad Reguladora y de Control de Datos Personales (URCDP). Contact us at privacy@cadive.net.
What we collect
| Data | Why |
|---|---|
| Email address, and name if you give one | To create your account, sign you in, and contact you |
| Password, stored only as a salted hash | To authenticate you. We never see or store the password itself |
| Task prompts, results and generated files | To run the task and show you your history |
| Credit balance and transaction ledger | To bill accurately and let you audit charges |
| Usage records — task counts, model, token counts, cost, timings | To bill correctly, control our own costs, and improve routing |
| A session cookie | To keep you signed in. Strictly necessary; no ad tracking |
What we do not do
- We do not sell personal data.
- We do not use your prompts or results to train our own models.
- We do not run advertising trackers or third-party analytics that profile you.
Legal basis
We process your data to perform our contract with you (running tasks, billing), to meet legal obligations (accounting records), and for legitimate interests in keeping the service secure and working. Where consent is required, we ask for it and you can withdraw it.
Sending your content to AI providers
To run a task, the relevant parts of your prompt are sent to the model providers listed on our Subprocessors page. This is unavoidable — it is how the task gets done. Do not put secrets, credentials, or personal data about other people into a task unless you are entitled to share it.
Where data is processed
Our infrastructure runs on Cloudflare's global network, so data may be processed outside Uruguay, including in the United States and the European Union. Where we transfer personal data internationally we rely on the safeguards our providers offer, including standard contractual clauses.
How long we keep it
- Account details: while your account is open.
- Tasks, results and files: while your account is open, or until you delete them.
- Billing ledger: up to ten years after the transaction, to meet accounting and tax obligations.
- Aggregate usage statistics that no longer identify you: kept indefinitely.
When you close your account we delete your personal data within 30 days, except records we must keep for the reasons above.
Your rights
Under Ley N.º 18.331 you can ask us to give you a copy of your data, correct it, delete it, or object to how we use it, and you may lodge a complaint with the URCDP. Email privacy@cadive.net and we will reply within 30 days. We may need to confirm your identity first.
Security
Passwords are stored as salted PBKDF2 hashes, never in plain text. Sessions use signed, HTTP-only cookies. Traffic is encrypted in transit. Access to production data is limited to people who need it. No system is perfectly secure; if a breach affects you we will tell you and the regulator as required.
Children
Cadive is not for anyone under 18. We do not knowingly collect data from children. If you believe a child has an account, tell us and we will delete it.
Changes
We will post any update here and change the date at the top. If a change is significant we will email you.