Privacy policy
What we do with your data and how to ask us to delete it. Last updated: 8 Nov 2026.
This is a translation: if it differs from the original, the Spanish version prevails.
1. Who processes your data
Company name: pending (tax ID Tax ID: pending, Address: pending). For anything about your data, write to us at Contact email: pending.
This policy explains what we do with your data: that of account holders, invited people and anyone who asks us for a demo. The data of your tenants, suppliers and other people you store in the app is processed by you, and by us only on your behalf: that is covered by the data processing agreement.
2. Which data, why and on what basis
- Your account: name, email, the titleholder of the properties (individual or company) and their tax ID. To provide the service you sign up for (art. 6.1.b GDPR).
- Invited people: name, email and their relationship with the owner (accountant, family…), entered by whoever invites you. So you can access what has been shared with you. Basis: the contract with the owner and their legitimate interest in sharing their information with whoever they choose (art. 6.1.b and 6.1.f).
- Demo requests: name, email, phone and whatever you tell us. To reply and show you the app (pre-contractual steps at your request, art. 6.1.b).
- Feedback you leave from the app, with the screen you write from. To improve it (legitimate interest, art. 6.1.f).
- Technical data: IP address, browser, access logs and errors. To keep the app secure and fix faults (legitimate interest, art. 6.1.f). Error reports do not include your name or email.
- Billing, once there are paid plans: tax and payment details. To charge you and meet our tax obligations (art. 6.1.b and 6.1.c). Card details are stored by Stripe, not by us.
We do not sell your data or use it for third-party advertising. We make no automated decisions about you.
3. How long
For as long as you have an account. When you close it, we delete your data within 30 days, except what the law requires us to keep (invoices, for six years, for example), which is blocked. Demo requests, for one year at most if you don’t go on to create an account. Technical logs, for one year at most.
4. Who we share it with
With the companies that help us provide the service, under a processor contract and with the safeguards of the GDPR. Some are based in the United States; in those cases we rely on the EU-US Data Privacy Framework or the European Commission’s standard contractual clauses.
| Company | Purpose | Where |
|---|---|---|
| Supabase, Inc. | Database, account access and files | European Union (Paris). US company: standard contractual clauses |
| Vercel, Inc. | Hosting the app | European Union (Paris) and global delivery network. US company: EU-US Data Privacy Framework and standard contractual clauses |
| Anthropic, PBC | AI reading of the invoices and receipts you scan. It does not use the data to train its models | United States: standard contractual clauses |
| Functional Software, Inc. (Sentry) | Error reports from the app, without your personal data | European Union (Frankfurt) |
| Stripe Payments Europe, Ltd. | Charging for plansOnce payments are switched on | Ireland |
| Resend (Plus Five Five, Inc.) | Sending emails: sign-in codes, invitations and remindersOnce our own email is set up | United States: standard contractual clauses |
Beyond that, only if the law requires it (a court or the tax authorities, for example).
5. Your rights
You can ask to see your data, correct it, delete it, take it with you, restrict its use or object to it. Write to us at Contact email: pending from your account’s email address. We will reply within one month at most.
If you think we haven’t handled it properly, you can complain to the Spanish Data Protection Agency (aepd.es).
6. Security
Data is encrypted in transit and stored on servers in the European Union. Each person only sees what the owner has given them. The links you share expire, files only open with a signed-in session and changes are logged.