Privacy Policy

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Organic Law 3/2018 of 5 December on the Protection of Personal Data and guarantee of digital rights (LOPDGDD), we inform you about the processing of your personal data.

1. Data controller

• Identity: Raúl Cotrina
• NIF: 09012736W
• Address: Avenida de la Coruña 37 1A, San Sebastián de los Reyes, Madrid, Spain
• Email: raulcotrina@gmail.com

2. Personal data we process

3. Retention period

Data will be retained for as long as the user keeps their account active. Once the account is deleted, data will be erased within a maximum of 30 days, unless there is a legal obligation to retain it for a longer period.

4. Recipients and international transfers

Data is not shared with third parties for commercial purposes. For the provision of the service, the following technical providers act as data processors:

• Vercel Inc. — Application hosting (EU servers available).
• Supabase Inc. — Database (EU West region).
• Resend Inc. — Transactional email delivery.
• Anthropic / OpenAI / Google — AI providers, depending on the API key configured by the user. Article content may be processed by these providers to generate summaries.

Where providers are located outside the European Economic Area, transfers are covered by the Standard Contractual Clauses approved by the European Commission or the EU-US Data Privacy Framework, as applicable.

5. Your rights

You may exercise the following rights at any time:

• Access: find out what personal data is being processed.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data.
• Portability: receive your data in a structured, machine-readable format.
• Restriction of processing: request that the use of your data be restricted.
• Objection: object to the processing of your data.

To exercise these rights, send an email to raulcotrina@gmail.com stating the right you wish to exercise and attaching a copy of your identity document.

6. Right to lodge a complaint

If you consider that the processing of your data does not comply with the GDPR, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD), located at C/ Jorge Juan 6, 28001 Madrid, through its website www.aepd.es.

7. Security

The necessary technical and organisational measures have been adopted to ensure the security of personal data and prevent its alteration, loss, processing or unauthorised access. Passwords are stored encrypted using secure hashing algorithms (bcrypt) and are never stored in plain text.