Global Privacy Policy

Last Updated: August 19, 2026

1. Overview & Commitment

At Cajita ("we", "our", or "us"), we believe in data minimization and user privacy. This Privacy Policy explains how we collect, store, use, and protect your information when you register an account, visit a Cajita page, or interact with our platform.

2. Information We Collect

A. Account Information (Creators)

When you create an account, we collect your email address, chosen username, password hash, and optional profile branding details (display name, bio, social links).

B. Payment & Billing Data

Subscription payments are processed directly by our PCI-DSS certified payment processor (Stripe). Cajita does not store, process, or have access to full credit card numbers or banking credentials.

C. Analytics & Telemetry

We collect aggregated, privacy-preserving page view and block click statistics using Cloudflare Analytics Engine to provide creators with real-time performance insights. We do not use invasive third-party cross-site trackers or sell visitor browsing data.

3. How We Use Your Information

To host, render, and maintain your custom Cajita profile page.
To authenticate account login, password resets, and verify session integrity.
To communicate service updates, security notifications, and billing receipts.
To prevent fraud, platform abuse, spam, and security exploits.

4. Data Sharing & Third-Party Service Providers

We do not sell, rent, or trade your personal data. We only share necessary operational data with trusted infrastructure service providers under strict data protection terms:

Cloudflare: Edge hosting, DNS routing, and DDoS security.
Stripe: Secure SaaS subscription payment processing.
Resend: Transactional verification and system email delivery.

5. Cookies & Local Storage

We use strictly essential cookies and secure session tokens to authenticate user logins, store language preferences, and ensure website security.

6. Your Data Rights & Deletion

You have full control over your personal data:

Export Data: You may request an export of your stored profile and block configuration data at any time from your account settings.
Account Deletion: You can permanently delete your account, pages, and uploaded assets. Once deleted, your data cannot be recovered.

7. Security & Contact

We implement industry-standard encryption protocols (TLS 1.3, encrypted database fields) to safeguard your data. If you have questions regarding this Privacy Policy or your personal information, please contact us at: privacy@cajita.me.

Terms Privacy Acceptable Use