Privacy Policy

Commander collects the least amount of data needed to run the service. No tracking, no advertising cookies, no profiling, no data sold or shared for marketing.

Your email address if you join the waitlist, plus the timestamp and signup language. Nothing else. We do not run analytics, advertising, or third-party trackers on this landing.

No cookies. This landing uses no analytics, no advertising, no tracking.

We process personal data on EU-based infrastructure where possible. The following sub-processors may process your data on our behalf:

• Vercel Inc.Hosting & edge delivery · USA (EU Standard Contractual Clauses)
• Upstash Inc.Redis data store (waitlist & rate limiting) · EU region
• Resend Inc.Transactional email delivery · USA (EU Standard Contractual Clauses)

We have signed a Data Processing Agreement with each. You may review our DPA at dekimu.com/dpa.

You have the right to access, correct, export, or erase your personal data. Use the Contact options in Dekimu ID at id.dekimu.com. You may also lodge a complaint with a supervisory authority.

Dekimu Labs S.L. (CIF B55431357) · legal@dekimu.com. For privacy-related requests, use the Contact options available in Dekimu ID at id.dekimu.com.

This policy is governed by the laws of Spain. You may lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or the supervisory authority of your habitual residence.

If you use features that issue anchored receipts (APR, ACR, or any other Anchored Receipts protocol-family member), we process salted cryptographic commitments derived from identifiers and event metadata. Commitments are designed to be resistant to direct re-identification but remain personal data under GDPR Article 4. We process them on the legal basis of legitimate interest (Article 6(1)(f)) in providing tamper-evident audit trails, with the retention period stated above. Anchored daily roots are non-retroactive by design: an erasure request received after a receipt has been anchored is honoured by ceasing to serve the receipt body, but the historical signature record cannot be withdrawn from the anchored root. This is disclosed before any receipt is minted.