2can Privacy Policy
Effective date: July 22, 2026
In short: we collect your first name, email address, your role (homeowner or pro), optionally whether you're in the Charlotte area - plus standard server logs and cookie-less, aggregate site-usage statistics. We use this to email you about the 2can launch; you can unsubscribe anytime and we'll delete your data. We never sell your data, never use it for advertising, and never train AI on it. Details below.
1. Who we are
This website, 2can.app (the "Site"), including the 2can waitlist, is operated by:
CraftConnect spółka z ograniczoną odpowiedzialnością ("CraftConnect", "we", "us")
ul. Obrzeżna 3/179, 02-691 Warsaw, Poland
Registered in the Register of Entrepreneurs of the National Court Register (KRS) under no. 0001235597, Tax ID (NIP): 5214161973
2can is a brand of CraftConnect. We are the "data controller" of your personal data under the EU General Data Protection Regulation ("GDPR"), which applies to us because we are established in Poland.
Privacy contact: kontakt@craftconnect.pl
2. What we collect
When you join the waitlist, we collect only:
- First name
- Email address
- Your role - whether you sign up as a homeowner/client or as a contractor/pro
- General location (optional) - whether you are in the Charlotte, North Carolina area (a checkbox), so we can plan and prioritize our launch markets
- Signup details - date and time of signup, double opt-in confirmation status
- Technical data - standard server logs created by our hosting provider (IP address, browser type, timestamp), used for security and abuse prevention
- Usage statistics (first-party, cookie-less) - which pages and page sections were viewed, which buttons were clicked, and how far the waitlist form was taken, together with timestamps, approximate time spent on the Site during a visit, general device type, and the traffic source of the visit (e.g., campaign tags in the link). Events from the same visit are grouped using a random visit identifier. On your device, that identifier exists only in browser memory for the duration of the visit; a copy sent with each event is kept with the raw events for the retention period in Section 7. It cannot recognize you across visits. Usage events do not include your name, email address, text or values entered in form fields, or URL parameters other than campaign tags. These events are collected by our own site infrastructure (Cloudflare Workers, acting as our processor), without cookies on your device and without advertising identifiers. The visit identifier and usage events are never added to the waitlist form, sent to Brevo, or linked with your waitlist record.
We do not use third-party analytics services, advertising trackers, or social-media pixels on the Site. The only cookies on the Site are strictly necessary technical cookies set by our hosting provider, Cloudflare (for example, for security and bot protection) - no analytics or advertising cookies. We do not sell your personal information, we do not share it for advertising purposes, and we do not use it to train artificial-intelligence or large-language models. Because there is no cross-site tracking on the Site, the Site does not respond to "Do Not Track" browser signals; this applies to all users, wherever you live.
3. Why we use your data and on what legal basis
| Purpose | Legal basis (GDPR) |
|---|---|
| Managing the waitlist and emailing you about the 2can launch and founding-member benefits | Your consent (Art. 6(1)(a)) |
| Internal statistics about the Site and the waitlist (visits, clicks, form completion, signup counts and timing, launch markets) to plan our launch and improve the Site | Legitimate interest (Art. 6(1)(f)) |
| Site security, abuse and fraud prevention (server logs) | Legitimate interest (Art. 6(1)(f)) |
| Complying with legal obligations | Legal obligation (Art. 6(1)(c)) |
Double opt-in. After you submit the form, we send a confirmation email. You are added to the waitlist only after you click the confirmation link. You can withdraw your consent at any time via the unsubscribe link in any email or by contacting us - withdrawal does not affect the lawfulness of processing before withdrawal.
Voluntary; no automated decisions. Providing your data is voluntary - we simply cannot add you to the waitlist without it. We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects (GDPR Art. 22).
4. Who receives your data
We share personal data only with service providers ("processors") who help us run the Site and the waitlist, under data-processing agreements:
- Waitlist emails and signup records: Brevo (Sendinblue SAS, France - data processed in the EU)
- Website hosting: Cloudflare, Inc. (USA) - hosts the Site, passes your signup to Brevo when you submit the form, creates the server logs described in Section 2, and processes our first-party cookie-less usage events and aggregate reports only on our instructions
- Corporate email: home.pl S.A. (Poland)
- Professional advisers (legal, accounting) where necessary
- Public authorities, where required by law
5. International transfers
Your waitlist record and our email systems (Brevo, home.pl) are processed in the European Economic Area. Our website runs on Cloudflare (USA), which handles your signup in transit, keeps server logs, and processes the cookie-less usage events and aggregate reports described above; these transfers to Cloudflare and any other U.S. providers take place under recognized safeguards - the EU-U.S. Data Privacy Framework and/or Standard Contractual Clauses. You can request a copy of these safeguards at kontakt@craftconnect.pl. Wherever your data is processed, we apply GDPR standards to it.
6. Business transfers
We are preparing to launch 2can in the United States through a U.S. company affiliated with CraftConnect. Your personal data may be transferred to an affiliate or successor entity in connection with a corporate reorganization, financing, or transfer of the 2can business. Any such recipient will be bound by terms no less protective than this Policy, and we will notify you (e.g., by email or a notice on the Site) before your data is processed by a new controller.
7. How long we keep your data
We keep waitlist data until 12 months after the public launch of 2can in your market (where we can determine your market - for example, if you told us you are in the Charlotte area), or until you withdraw consent or ask us to delete your data - whichever comes first. If 2can has not launched in your market within 36 months of your signup - or if we cannot determine your market - we will delete your data no later than the end of that period. Signup records that are never confirmed (no click on the confirmation link) are deleted within 30 days. Raw cookie-less usage events are kept for up to 3 months; after that only aggregate statistics (counts and totals) remain. Server logs are kept for a shorter period appropriate to security purposes.
8. Your rights
You have the right to: access your data; correct it; delete it; restrict processing; data portability; object to processing based on legitimate interest; and withdraw consent at any time. To exercise any right, email kontakt@craftconnect.pl. You also have the right to lodge a complaint with a supervisory authority - in Poland, the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
We extend these rights to all users, including U.S. residents, regardless of location.
9. California residents
We collect only the categories of personal information described in Section 2 (identifiers, the general location information you choose to provide, and internet activity), for the purposes in Section 3. We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the preceding 12 months. That means there is nothing for a Global Privacy Control signal to opt you out of; if our practices ever change, we will honor GPC signals as required by law. Our Site does not respond to "Do Not Track" browser signals beyond the practices described here. California residents may exercise the rights in Section 8 without discrimination.
10. Children
The Site and the waitlist are intended for users 18 years of age or older. We do not knowingly collect personal data from anyone under 18. If you believe a minor has provided us data, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy. If we make material changes, we will notify you by email or by a prominent notice on the Site before the changes take effect, and we will update the effective date above.
12. Contact
CraftConnect sp. z o.o., ul. Obrzeżna 3/179, 02-691 Warsaw, Poland - kontakt@craftconnect.pl