CloudCaive is run by Cloudcave Ltd (trading as CloudCaive), registered at [[REGISTERED_ADDRESS]], company number 16477937. For anything in this policy, email hello@cloudcaive.com — a person reads it.
This page tells you exactly what we collect, where it goes, and why — system by system, because that's how it actually works.
What we collect, and why
| What | Handled by | Why | Lawful basis |
|---|---|---|---|
| Email address + first name | Kit (our email platform) | To send you the 90-day roadmap and one useful email a week. Unsubscribe with one click, any time. | Consent |
| Persona + how you found us | Kit | A one-question poll after signup, plus the source of your first visit (e.g. "tiktok/bio"). It tells us who we're writing for, so the content gets better. | Consent / legitimate interests |
| Payment details | Stripe | To process Core Pro subscriptions and bootcamp purchases. Your card number never touches our servers — we store only your plan and a Stripe customer reference. See Stripe's privacy policy. | Contract |
| Community account | Skool | Paid members join our community on Skool, which holds your account there under Skool's privacy policy. | Contract |
| Lab profile | Us (database hosted on Cloudflare) | Creating a profile in the Lab stores a display name you choose and a passcode (stored hashed — we can't read it), so you can sign in from any device. | Contract / legitimate interests |
| Learning progress | Your browser; our database if you make a Lab profile | Progress, scores and review schedules live in your browser's local storage. If you create a Lab profile, a copy syncs to our database so you can pick up where you left off on another device. No profile, no sync — it stays on your machine. | Contract / legitimate interests |
| AI tutor conversations | Our server + Anthropic | Tutor messages are sent through our server to the Anthropic API to generate the reply (see Anthropic's privacy policy). We don't use them to identify individuals. Conversations are saved as part of your Lab progress; we also log per-profile usage counts (tokens, not content) to keep costs honest. | Legitimate interests |
| Security & performance logs | Cloudflare | The site runs on Cloudflare, which keeps standard, short-lived technical logs (like IP addresses) to keep things fast and to block abuse. | Legitimate interests |
Who processes data for us
Five companies, each doing one job:
- Kit — sends the newsletter and stores subscriber details.
- Stripe — takes payments; the only one that ever sees card details.
- Skool — hosts the paid community.
- Cloudflare — hosts the site, the Lab's sync database, and security logs.
- Anthropic — generates AI tutor responses from the messages you send it.
That's the full list. We don't sell your data, share it with advertisers, or pass it to anyone not named here.
Cookies
Honestly minimal. Our own pages set no cookies — no analytics cookies, no advertising trackers, no cross-site anything. What does exist:
- Local storage (data kept in your browser, never sent to us automatically): your learning progress, your Lab sign-in token, how you first found the site, and your poll answer.
- Kit's signup form is embedded on some pages and may set its own functional cookies.
- Stripe checkout happens on Stripe's own pages, which set their cookies for fraud prevention.
- Cloudflare may set a security cookie to tell humans from bots.
How long we keep things
- Newsletter data — until you unsubscribe; Kit then removes you from our list.
- Lab profile and synced progress — until you ask us to delete it.
- Payment records — kept as long as UK tax law requires (six years), by Stripe and in our accounts.
- Technical logs — days, not years.
- Progress in your browser — yours to clear whenever you like (it's in your browser's site data).
Your rights
Under UK GDPR you can, free of charge:
- Access — ask for a copy of what we hold about you.
- Rectification — have anything wrong corrected.
- Erasure — have your data deleted.
- Objection — object to processing based on legitimate interests.
- Withdraw consent — for anything consent-based (like the newsletter), at any time, as easily as you gave it.
Email hello@cloudcaive.com and we'll respond within a month. If you're not happy with how we handle it, you have the right to complain to the Information Commissioner's Office at ico.org.uk.
International transfers
Some of our processors (Kit, Stripe, Anthropic) are US-based, so some data is processed in the United States. Those transfers rely on UK-approved safeguards — the UK Extension to the EU-US Data Privacy Framework or the UK's standard contractual terms — which put those companies under obligations equivalent to UK law.
Changes to this policy
If we change what we collect or who processes it, we'll update this page and the date at the top. For anything significant, we'll email newsletter subscribers rather than hope you notice.
Contact
Questions, requests, or something here doesn't match your experience? hello@cloudcaive.com.