Privacy policy

1.Who we are (the data controller)

The controller of your data is „XIUNITE SOFTWARE” S.R.L. (IDNO 1025600036775), operating the Caduc brand, with its registered office at MD-2068, 22 Miron Costin St., ap. 83, Chișinău, Republic of Moldova. You can reach us at office@caducstudio.com or +373 67 714 979.

2.What data we collect

• Through the contact form: your name, phone number and your message.
• Automatically, through the Plausible analytics tool (cookie-free, anonymous and aggregated data): pages visited, device type, visit source.
• Technical fields attached to the form: site language, the page you submitted from, campaign source (UTM).

3.Why we collect it (the legal basis)

• To contact you about your request — based on your consent (the checkbox in the form) and the pre-contractual steps you requested.
• To understand how the site is used and improve it — legitimate interest, with aggregated data.
• We don't use your data for newsletters or unsolicited advertising. We don't sell it to anyone.

4.Who we share it with

Form data is sent directly to HubSpot, our CRM platform (a US-based provider — a transfer outside the Republic of Moldova, covered by your informed consent and the provider's contractual safeguards, including its standard contractual clauses). HubSpot processes the data only on our behalf.

For anti-spam protection of our forms we use Cloudflare Turnstile: during verification, your IP address is processed by Cloudflare, Inc. (USA) solely to tell humans from bots, under the provider's standard contractual clauses.

5.How long we keep it

Form data: for as long as we're discussing your project and for 2 years after the last interaction, then we delete it. Analytics data: only in aggregated, anonymous form that cannot identify you.

6.Your rights

Under the GDPR and Law no. 133/2011 on personal data protection (Republic of Moldova; from 23 August 2026 — Law no. 195/2024), you have the right to:

• request a copy of the data we hold about you (access);
• request its correction if it's wrong (rectification);
• request its deletion (the right to be forgotten);
• withdraw your consent at any time, as easily as you gave it;
• file a complaint with the National Center for Personal Data Protection (CNPDCP), datepersonale.md.

Write to us at office@caducstudio.com and we'll resolve it within at most 30 days.

7.Cookies

The site does not use tracking cookies. Traffic analytics (Plausible) works without cookies and without personal data.

8.Changes

If we change this policy, we update the date above. For important changes, we say so visibly on the site.

9.The Caduc Business app and Meta platforms (Facebook, Instagram, Threads)

Through our Caduc Business app (Meta App ID 948035514985859), only with your explicit authorization (OAuth), we access data from your Facebook, Instagram and Threads accounts:

• profile information of your pages and business accounts (name, picture, identifiers);
• content published and scheduled on those accounts;
• performance statistics (insights) for posts, pages and audiences;
• data about advertising campaigns managed through the API.

We use this data exclusively for the contracted services: publishing content on your behalf, performance reporting and managing marketing campaigns. The legal basis is the performance of our contract. We don't sell it and we don't share it with third parties; we keep it only for the duration of the contract.

You can revoke access at any time: the easiest way is our disconnect page, caducstudio.com/connect/, or directly in your Facebook/Instagram account settings — "Business integrations" (facebook.com/settings?tab=business_tools).

Data deletion: to delete the data obtained through Meta platforms, send a request to office@caducstudio.com or revoke the app's access in your Meta settings — we delete the associated data within at most 30 days.

10.TikTok integration

Through our app connected to TikTok (TikTok Login Kit and the Content Posting API), only with your explicit authorization, we access:

• basic information from your TikTok profile (display name, avatar, account identifier);
• the ability to publish, on your behalf, the video and photo content you provide to us.

We use this data exclusively for the contracted services: scheduling and publishing content and performance reporting. The legal basis is the performance of our contract. We don't sell it and we don't share it with third parties; we keep it only for the duration of the contract.

You can revoke access at any time: the easiest way is our disconnect page, caducstudio.com/connect/, or directly in your TikTok account — Settings and privacy → Security → Connected apps (tiktok.com/setting).

Data deletion: to delete the data obtained through TikTok, send a request to office@caducstudio.com or revoke the app's access in your TikTok settings — we delete the associated data within at most 30 days.