Privacy Policy

Data Controller

The data controller for personal data processed via brasio is: Hoover Developments SL CIF: B01777820 Calle San Antonio 10, Rojales, 03170, Alicante, Spain Email: [email protected]

Data We Collect

We collect the following categories of personal data: • Account data: your email address and, where applicable, business name and address provided during sign-up. • Billing data: payment information processed by our payment provider (we do not store full card numbers). • Usage data: log data, feature usage, and session information collected to operate and improve the service. • Support data: any information you provide when contacting our support team.

Purposes and Legal Basis

We process your data for the following purposes: • Providing the brasio service and managing your account (legal basis: performance of a contract). • Processing payments and issuing invoices (legal basis: performance of a contract; legal obligation). • Customer support (legal basis: legitimate interest). • Analytics and service improvement, with your consent only (legal basis: consent).

Data Storage and Transfers

All personal data is stored in Spain, within the European Union. Data does not leave the EU. Our infrastructure and sub-processors are selected to comply with GDPR Chapter V requirements.

Sub-processors

We use the following third-party sub-processors: • Stripe — payment processing. Data processed: cardholder name, email, billing address, transaction amounts. See stripe.com/privacy. • SMTP2GO — transactional email delivery. Data processed: recipient email address, email content. See smtp2go.com/privacy. • Verifacti — Spanish fiscal compliance and Veri*Factu submission to the AEAT. Data processed: invoice and transaction data required for fiscal reporting.

Retention

We retain account data for as long as your account is active. Fiscal and invoicing records are retained for the periods required by Spanish tax law (currently six years for accounting records). You may request deletion of your account at any time by emailing [email protected].

Your Rights

Under GDPR and the Spanish Organic Law on Personal Data Protection (LOPDGDD) you have the right to: • Access the personal data we hold about you. • Rectify inaccurate or incomplete data. • Request erasure of your data (right to be forgotten). • Receive your data in a portable format. • Object to or restrict certain processing. To exercise any of these rights, email [email protected] with your request. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD) at aepd.es.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email or via a notice in the application. Continued use of the service after the effective date constitutes acceptance of the updated policy.