Legal
Privacy policy
Last updated: August 2026
This policy explains how we process your personal data in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data controller
[FULL NAME OR COMPANY NAME], Tax ID [TAX ID], address at [FULL ADDRESS], email: [EMAIL].
2. Data we process
Account data: email, password (stored irreversibly encrypted) and the date you accepted the legal notice.
If you sign in with Google: your email and the identifier Google provides us. We never see your Google password.
Purchase data: product bought, amount, order status and Stripe transaction identifiers. We do not store card details.
Minimal technical security data (server access logs).
3. Purposes and legal basis
Managing your account, licences and downloads: performance of the contract.
Processing payments and issuing invoices: performance of the contract and legal obligation (tax law).
Providing support: performance of the contract.
Service security and fraud prevention: legitimate interest.
We do not use your data for advertising or sell it to third parties.
4. Recipients
Stripe Payments Europe (payment processing).
Google (only if you choose to sign in with Google).
Our hosting provider, located in the European Union.
Public authorities where legally required.
5. International transfers
Stripe and Google may process data outside the European Economic Area. Such transfers rely on standard contractual clauses approved by the European Commission and/or the EU-US Data Privacy Framework.
6. Retention
Account data is kept while your account is active. Billing data is kept for the periods required by tax and commercial law (generally up to 6 years). It is then deleted or anonymised.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [EMAIL] from your account email.
You can also lodge a complaint with your data protection authority (in Spain, the AEPD, aepd.es).
8. Security
We apply appropriate technical and organisational measures: TLS encryption in transit, passwords stored with robust hashing algorithms, restricted data access and backups.