Privacy Policy

I. Privacy Policy and Data Protection

1. Data Controller

2. Applicable Laws

This Privacy Policy complies with the following legislation:

• Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR)
• Spanish Organic Law 3/2018, of 5 December, on Personal Data Protection and guarantee of digital rights
• Royal Decree 1720/2007, of 21 December, approving the Regulations implementing Organic Law 15/1999
• Law 34/2002, of 11 July, on information society services and electronic commerce (LSSI-CE)

3. Data Processing Principles

Yoloop SL commits to processing all personal data in accordance with the following principles:

1. Legality, loyalty and transparency: We require your consent and inform you of the purposes of data processing
2. Purpose limitation: Data is collected for explicit, legitimate purposes and not processed incompatibly with those purposes
3. Data minimization: We collect only data that is adequate, relevant and limited to what is necessary
4. Accuracy: We maintain accurate and up-to-date data
5. Storage limitation: Data is kept only as long as necessary
6. Integrity and confidentiality: We ensure appropriate security of personal data
7. Accountability: We are responsible for demonstrating compliance with these principles

4. What Data We Collect

We collect and process the following personal information when you use fullPage Studio:

• Account Information: Name, email address, profile image
• Authentication Data: Login credentials managed securely through Clerk authentication service
• Usage Data: Information about how you use our service, pages created, sections used, features accessed
• Technical Data: IP address, browser type, device information, operating system
• Communication Data: Messages sent through our support chat (Crisp)
• Payment Information: Subscription and billing data processed through Polar (we do not store credit card details)

Special Categories of Data: We do not collect or process special categories of personal data as defined in Article 9 of the GDPR (racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic data, biometric data, health data, or data concerning sex life or sexual orientation).

5. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: You provide explicit consent when creating an account and using our services
• Contract Performance: Processing is necessary to provide you with the service you requested
• Legal Obligation: To comply with applicable laws and regulations
• Legitimate Interests: To improve our services, prevent fraud, and ensure security

You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Withdrawal of consent does not condition access to our website.

6. How We Use Your Data

We use your personal information for the following purposes:

• To create and manage your account
• To provide and maintain our service
• To process your subscription and payments
• To communicate with you about your account or our services
• To provide customer support
• To send you important updates about our service
• To improve and optimize our platform
• To detect and prevent fraud or abuse
• To comply with legal obligations
• To analyze usage patterns and enhance user experience

7. Third-Party Services

We use the following third-party services that may collect and process your data:

• Clerk: Authentication and user management service
• Sentry: Error tracking and monitoring
• Crisp: Customer support chat widget
• Google Analytics: Website analytics and usage statistics
• Polar: Subscription and payment processing
• Unsplash: Image hosting service

Each of these services has their own privacy policies and data processing practices. We recommend reviewing their privacy policies.

8. Data Retention

We retain your personal data for the minimum time necessary for the purposes of its processing, in accordance with the following criteria:

• Account Data: Retained while your account is active and for up to 3 years after account closure for legal compliance
• Usage Data: Retained for 26 months in Google Analytics
• Support Communications: Retained for 5 years for customer service quality
• Payment Records: Retained for 10 years as required by Spanish tax law

You may request deletion of your data at any time by contacting us at [email protected].

9. Your Rights

Under GDPR and Spanish data protection law, you have the following rights:

• Right of Access: You can request a copy of your personal data we hold
• Right to Rectification: You can request correction of inaccurate or incomplete data
• Right to Erasure ("Right to be Forgotten"): You can request deletion of your data
• Right to Restriction of Processing: You can request we limit how we use your data
• Right to Data Portability: You can request your data in a structured, commonly used format
• Right to Object: You can object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: You can withdraw consent at any time
• Right Not to be Subject to Automated Decision-Making: Including profiling that produces legal effects

To exercise any of these rights, please contact us at [email protected]. We will respond to your request within one month.

10. Security Measures

We implement appropriate technical and organizational measures to protect your personal data, including:

• SSL/TLS encryption for data transmission
• Secure authentication through Clerk
• Regular security audits and monitoring through Sentry
• Access controls and authentication requirements
• Regular backups and disaster recovery procedures

In the event of a data breach that poses a high risk to your rights and freedoms, we will notify you and the Spanish Data Protection Agency (AEPD) without undue delay, and in any case within 72 hours of becoming aware of the breach.

11. International Data Transfers

Some of our service providers are located outside the European Economic Area (EEA). When we transfer your data internationally, we ensure appropriate safeguards are in place, such as:

• Standard Contractual Clauses approved by the European Commission
• Privacy Shield certification (where applicable)
• Adequacy decisions by the European Commission

12. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to improve your experience. For detailed information about the cookies we use, please see our Cookie Policy.

13. Third-Party Links

Our website may contain links to external websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage you to read the privacy policies of any website you visit.

14. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us.

15. Supervisory Authority

You have the right to lodge a complaint with the supervisory authority:

II. Acceptance and Changes to This Privacy Policy

1. Acceptance

By using fullPage Studio, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree with this policy, please do not use our service.

2. Changes to This Policy

We reserve the right to modify this Privacy Policy at any time. When we make changes, we will:

• Update the "Last updated" date at the top of this page
• Notify you via email if changes are significant
• Publish a notice on our website

Your continued use of our service after changes are published constitutes your acceptance of the updated policy.

3. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: