Privacy Policy
LAST UPDATED · 15 OCTOBER 2026
This Privacy Policy explains how Caudena collects and uses personal data in connection with caudena.com and its subdomains, including academy.caudena.com, prism.caudena.com and crm.caudena.com (the “Sites”), and our blockchain intelligence products and services (the “Services”).
At a glance
- Our Services are provided to organisations, including regulated financial institutions and public authorities, not to consumers.
- We do not sell personal data.
- AI-assisted features are used only when a customer’s user requests them, and our AI providers may not train on our data.
- To exercise your rights or ask a question, email [email protected].
Who we are
“Caudena”, “we”, “us” and “our” mean the following companies:
United States
Caudena Corp.
136 Madison Avenue, 5th Floor
New York, NY 10016, United States
Controller for individuals outside the EEA, the UK and Switzerland.
Cyprus · EU
MNRV Analytics Ltd
Leoforos Agiou Athanasiou 51, Office 201
4102 Agios Athanasios, Limassol, Cyprus
Controller for individuals in the EEA, the UK and Switzerland, except where MNRV Analytics SAS is the controller.
France · EU
MNRV Analytics SAS
37 Boulevard Dubouchage
06000 Nice, France
RCS Nice 953 726 304
Controller of account and contact data for customers that contract with MNRV Analytics SAS in France.
Where we process personal data on behalf of a customer under a contract (for example, data a customer uploads to our products), the customer is the controller and our data processing agreement with that customer applies instead of this policy.
Personal data we collect
Website visitors
- Technical data, such as IP address, browser and device type, pages visited and the time of your visit.
- Information you submit through forms, such as your name, business email address, organisation, job title and message.
- Cookie and similar technology data, as described in our Cookie Policy.
Customers and product users
- Account and sign-in data, such as name, business email address, organisation and role.
- Usage, log and error data generated when you use our products.
- Support and feedback communications.
- Business contact and billing details needed to invoice our customers. We do not collect payment card details.
Business contacts
Name, business email address, organisation and role of people we communicate with for sales, partnerships and marketing purposes.
Blockchain intelligence data
Our Services analyse public blockchain data together with information from publicly available sources, such as websites, social media, forums, public registries, news reports and official sanctions lists. Some of this information may relate to an identifiable individual, for example where a blockchain address has been publicly associated with a person, a business or an online account. We do not collect this information from the individuals concerned and we do not have a direct relationship with them.
How we use personal data
The table below sets out why we use personal data and, for individuals in the EEA, the UK and Switzerland, the legal basis we rely on.
| Purpose | Personal data | Legal basis (EEA, UK, Switzerland) |
|---|---|---|
| Providing, operating and securing our products and the Sites | Account, sign-in, usage, support, error and log data | Performance of a contract; our legitimate interests in running secure, reliable services |
| Responding to enquiries and demo requests | Contact form data | Steps taken at your request before entering into a contract; our legitimate interests |
| Billing and account administration | Business contact and billing details | Performance of a contract; legal obligations (accounting and tax) |
| Improving the Sites and products | Usage and analytics data | Consent where required (see our Cookie Policy); otherwise our legitimate interests |
| Sending marketing emails to business contacts | Name, business email address, organisation | Our legitimate interests or consent, as required by law. You can unsubscribe at any time. |
| Providing blockchain intelligence to our customers | Blockchain intelligence data | Our and our customers’ legitimate interests in preventing, detecting and investigating financial crime, fraud, money laundering and sanctions evasion, and in supporting regulated institutions and public authorities in meeting their legal obligations |
| Complying with law and protecting our rights | Any of the above, as needed | Legal obligations; our legitimate interests in establishing, exercising or defending legal claims |
AI-assisted features
Some of our products include optional AI-assisted features. These are used only when a customer’s user requests AI assistance on a specific case. In that case, relevant case information is sent to the AI service provider we use to deliver the feature. Our contracts with these providers prohibit them from using our data to train their models.
Who we share personal data with
- Caudena group companies, to provide and support the Sites and Services.
- Service providers that process personal data on our behalf, including hosting and infrastructure (Hetzner, Amazon Web Services), sign-in (WorkOS), website and product analytics (Google Analytics, PostHog, Cloudflare), CRM and website forms (HubSpot), customer support and onboarding (Gleap, Flows), error monitoring (Sentry), email delivery (Resend), advertising measurement (LinkedIn, X) and AI services (OpenAI, Anthropic, Google, xAI) as described above.
- Our customers, who use our Services to access blockchain intelligence data.
- Public authorities, courts and regulators, where required by law or to protect our rights.
- Professional advisers, such as lawyers, accountants and auditors.
- A buyer or successor, in connection with a merger, acquisition or sale of all or part of our business.
We do not sell personal data.
International transfers
We and our service providers may process personal data in countries outside the EEA, the UK and Switzerland, including the United States. Where we transfer personal data from these regions to a country without an adequacy decision, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses (with the UK Addendum where relevant) or the recipient’s certification under the EU-U.S. Data Privacy Framework.
How long we keep personal data
| Data | How long we keep it |
|---|---|
| Customer account and customer content in our products | For the duration of the contract. Data that is no longer in active use, including after the contract ends, is deleted automatically no later than 12 months after it is no longer in active use |
| Security and system logs | Up to 1 year |
| Backups | Kept for a limited period and then overwritten on a regular schedule |
| Support requests, sales and business contact records | For the duration of our business relationship, and afterwards for as long as needed for our legitimate business purposes, to comply with legal obligations or to resolve disputes |
| Marketing email list | Until you unsubscribe or object |
| Website analytics and cookies | As described in our Cookie Policy |
| Blockchain intelligence data | For as long as it remains relevant to the purposes described above, including the prevention and investigation of financial crime, and as required or permitted by law |
Your rights
If you are in the EEA, the UK or Switzerland, you have the right to request access to, correction or erasure of your personal data, to restrict or object to its processing, to data portability, and to withdraw consent at any time where we rely on consent. You also have the right to lodge a complaint with a data protection authority, such as the Commissioner for Personal Data Protection in Cyprus, the CNIL in France or, in the UK, the Information Commissioner’s Office.
These rights are not absolute. We may decline a request, in whole or in part, where the law allows it, for example where we have compelling legitimate grounds for the processing, such as the prevention, detection or investigation of financial crime; where the processing is necessary to comply with a legal obligation; or where it is needed to establish, exercise or defend legal claims. If we decline a request, we will tell you why.
For blockchain intelligence data, notifying each individual concerned is not possible or would involve disproportionate effort, so we provide the required information through this policy. Because this information comes from publicly available sources, it may continue to be available from those sources.
How to make a request
Email us from the address the request relates to, or tell us how we can identify you. We may ask for information to verify your identity. We will respond within one month, which may be extended by two further months where necessary, in which case we will tell you.
Other information
Security
We use technical and organisational measures designed to protect personal data, including access controls, encryption of data in transit and at rest, logging and monitoring. No method of transmission or storage is completely secure.
Children
Our Sites and Services are intended for businesses and public authorities and are not directed at children. We do not knowingly collect personal data from children.
United States
We do not sell personal information. Our Sites do not respond to “Do Not Track” browser signals.
Changes to this policy
We may update this policy from time to time. We will post the updated version on this page and change the date at the top.
Contact us
Questions about your personal data?
Email us or write to us at the addresses above.