Privacy policy

Hudson is operated by Calashock OÜ, a company registered in Estonia under commercial register code 14863911, at Maakri tn 44, 10145 Tallinn, Estonia. In this policy, “Hudson”, “we” and “us” all mean Calashock OÜ.

Hudson is the data controller for the personal data described in this policy. If you want to ask us anything about it, write to support@hudson.app.

When you join the early-access list, we collect:

• Your email address — because the list exists to send you an email.
• Which form you used (the one at the top of the page, or the one at the bottom). This tells us which part of the page persuaded people, and nothing about you.

When you simply visit the site, our hosting provider records ordinary server logs — including your IP address, the page requested, the time, and your browser’s user-agent string. We do not use those logs to build a profile of you.

We also measure aggregate traffic: how many visits a page received, roughly where in the world they came from, and what kind of device was used. This measurement is cookieless and does not identify you. See our cookie policy for the detail.

We do not collect names, phone numbers, company details, payment details, or anything else. There is no account to create, and there is nothing to log in to.

Your email address is processed on the basis of your consent, which you give by submitting the form. We use it for exactly one purpose: to tell you once, when Hudson opens to merchants. We will not use it for a newsletter, a drip sequence, or anything you did not ask for, and we will not pass it to anyone else to market to you.

Server logs and aggregate traffic measurement are processed on the basis of our legitimate interests — keeping the site available, secure, and worth running. We have weighed that against your interests, and the measurement is deliberately built so it cannot identify you.

We use two service providers, both of whom process data on our instructions:

• Resend — stores the early-access list and will send the launch email. Their privacy notice is at resend.com/legal/privacy-policy.
• Vercel — hosts the site, and provides the traffic measurement described above. Their privacy notice is at vercel.com/legal/privacy-policy.

We do not sell personal data, we do not share it with advertising networks, and there are no third-party trackers on this site.

We may disclose personal data if we are legally required to — for example, in response to a valid court order.

Both providers are based in the United States, so your email address is transferred outside the European Economic Area. Those transfers rely on the safeguards each provider offers — certification under the EU–US Data Privacy Framework, and the European Commission’s Standard Contractual Clauses where it does not apply. You can ask us for more detail about these safeguards.

We keep your email address until whichever comes first:

• you unsubscribe or ask us to delete it — every email we send carries an unsubscribe link, and you can also just write to us;
• twelve months after we have sent the launch email, by which point the list has done its job;
• twenty-four months from the day you joined, if we have not launched by then. If we are still not ready, we would rather ask you again than hold an address indefinitely on a promise we have not kept.

Server logs are kept for a short period by our hosting provider in the ordinary course of running the service. Aggregate traffic measurement is retained as counts, which are not personal data.

Under the EU General Data Protection Regulation you have the right to:

• ask what personal data we hold about you, and get a copy of it;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we use it;
• receive it in a portable form;
• withdraw your consent at any time — which, here, means unsubscribing. Withdrawing consent does not affect anything we did with it beforehand.

To exercise any of these, write to support@hudson.app. We will respond within one month. We will not charge you, and we will not make it difficult.

If you think we have got this wrong, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee, our lead supervisory authority. If you live elsewhere in the EU, you may complain to the authority in your own country instead. We would appreciate the chance to fix it first.

This site is aimed at people who run online retail businesses. It is not directed at children, and we do not knowingly collect personal data from them.

If we change what we do with personal data, we will change this page and update the date at the top of it. If the change is significant and we still hold your address, we will tell you by email rather than quietly editing the page — a company that sells review integrity does not get to be sly about its own disclosures.