Privacy policy

The full identification details of the data controller are set out in the Legal notice. To exercise your rights or for any enquiry, write to us at [email protected].

• Name and email address (Google OAuth): to create and manage your account. Legal basis: contract performance.
• Billing and payment data: processed directly by Stripe. We do not store card numbers. Legal basis: contract performance and legal obligation.
• Website project information (content, design preferences): to deliver the contracted service. Legal basis: contract performance.
• Transactional emails: sent via Resend (status notifications, invoices). Legal basis: contract performance.
• Server technical logs: for diagnostics and security. Retained for 30 days. Legal basis: legitimate interest.

We share data only with:

• Stripe Inc. — payment processing (policy: stripe.com/privacy)
• Google LLC — OAuth authentication (policy: policies.google.com/privacy)
• Resend Inc. — transactional email delivery (policy: resend.com/legal/privacy-policy)
• Directus — dashboard database (self-hosted on our own servers within the EU)

We do not sell data to third parties or use it for advertising.

• Account data: while the account is active.
• Billing data: 5 years (Spanish tax obligation).
• Technical logs: 30 days.

You may exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Stripe and Google may process data outside the EU, covered by Standard Contractual Clauses approved by the European Commission and/or adequacy decisions.

We only use the strictly necessary session cookie for the dashboard. See our cookie policy for more detail.