Privacy Policy

We process personal data under the GDPR and Spanish LOPDGDD. The legal bases are contract (delivering your subscription), legitimate interests (security, fraud prevention), and legal obligation (tax records). We do not sell personal data and we do not run advertising trackers.

What we collect

• Account email, name, hashed password, Google account id if you use OAuth, language preference
• Stripe customer and subscription identifiers and limited payment metadata (never full card numbers)
• Tracked technology areas, cancellation tokens, email send logs, notification preferences
• Server logs (IP, user agent) for a short security window

Processors

Stripe (payments, US/EU), Resend (email reports), and your Postgres host. International transfers use SCCs or an adequacy decision as offered by those vendors.

Retention and rights

Account data lasts for the life of the account plus a short winding-up period. Invoices are kept for the Spanish tax period (generally six years). You may access, rectify, erase, restrict, object, and port your data, and you may complain to the AEPD (aepd.es). Email hello@lapsight.app.

Cookies

Strictly necessary session cookies for sign-in and CSRF, plus a language cookie. No advertising cookies.

Children: the service is for professionals, not for anyone under 16.