Privacy Policy

Data controller

Cristovão Gonçalo Miguel dos Reis, self-employed sole trader (Mexida brand). Contact: hello@mexida.com. Full identification in Legal information.

Waitlist

• Data: email, language, Day 1 starting level (no health data), date and wording of consent, confirmation date.
• Purpose: until launch, send the emails you agreed to (confirmation, welcome with Day 1, updates at most every 2 weeks, launch announcement with the founder price and one single reminder only to people who haven't bought); news after launch only with separate consent. Every email has a link to leave.
• Legal basis: consent (GDPR art. 6(1)(a); Portuguese Law 41/2004 art. 13-A).
• Retention: we keep your data until you leave the list or, at the latest, 30 days after the launch reminder. If you didn't tick the box for news after launch, we delete everything then. If you did, we keep your email and language until you leave. If Mexida hasn't opened within 12 months of your signup, we delete your data or ask you to confirm you want to stay. Unconfirmed requests are deleted after 7 days.
• Providers: Cloudflare, Inc. (hosting, database and forwarding of hello@mexida.com), Plus Five Five, Inc. (Resend: email delivery; data is stored in the US) and Google (Gmail, the mailbox where we read hello@mexida.com). All three are in the US and certified under the EU-US Data Privacy Framework (Commission adequacy decision of 10 July 2023). Cloudflare and Resend also apply the European Commission's standard contractual clauses. You can ask for a copy of these safeguards at hello@mexida.com.
• Your rights: access, correction, erasure, portability and restriction of processing, and withdrawing consent at any time (link in every email or hello@mexida.com), without affecting anything done before. You can lodge a complaint with the CNPD in Portugal (www.cnpd.pt) or with the supervisory authority of the EU country where you live or work, or where the alleged infringement took place (GDPR, Art. 77).

Cookies and measurement: this page uses no cookies, stores nothing on your device and uses no third-party analytics. When you use the page, your browser sends our server signals without identifiers (for example, "quiz finished"), which we only add up into daily totals (visits, quizzes started and finished, price seen, signups, confirmations and unsubscribes). We don't store your IP or anything that identifies you. Emails have no open-tracking pixels and no individual click tracking; links only carry a campaign label (e.g. ?src=e-launch), counted in the same anonymous total.