Privacy Policy - Zignolz

1. Personal data we collect

We collect and process the following types of personal data:

1.1. User-provided data

• Registration information: Name, surname, email address, password (encrypted).
• Profile information: Profile photo (optional), account preferences.
• Payment information: Credit/debit card data processed and stored securely by our payment provider Stripe. Zignolz does not directly store complete payment card information.
• Communications: Messages sent through our support or chat system.

1.2. Automatically collected data

• Technical data: IP address, browser type, operating system, pages visited, visit duration.
• Cookies: We use cookies to improve user experience, analyze site traffic, and personalize content. Please refer to our cookie policy for more information.
• Usage data: Interactions with the platform, features used, subscription history.

2. Purpose and legal basis of processing

We use your personal data for the following purposes, based on the legal bases established by GDPR:

3. Sharing data with third parties

Zignolz does not sell, rent, or share your personal data with third parties, except in the following cases necessary for service delivery:

• Stripe: Payment processing provider. Stripe complies with PCI-DSS standards and processes payment data securely. See Stripe's Privacy Policy.
• Google Analytics (if applicable): Web analytics service to understand user behavior. Data is anonymized when possible. See Google's Privacy Policy.
• Infrastructure providers: Hosting and cloud storage services necessary to operate the platform.
• Legal obligations: We may disclose personal information if required by law, a court order, or a competent government authority.

All our external providers comply with GDPR data protection standards and are contractually obligated to protect your information.

4. International data transfers

Some of our service providers may be located outside the European Economic Area (EEA). In these cases, we ensure that appropriate safeguards are in place, such as:

• Standard contractual clauses approved by the European Commission
• Certification under recognized data protection frameworks
• European Commission adequacy decisions for countries with adequate levels of protection

5. Data retention

We retain your personal data for as long as necessary to fulfill the purposes described in this policy:

• Active accounts: As long as you maintain an active account with us.
• Canceled accounts: Up to 30 days after cancellation, unless you request immediate deletion.
• Billing and payment data: Retained for the legally required period (generally 6-10 years according to Spanish tax legislation).
• Marketing data: Until you withdraw your consent.

6. Your rights under GDPR

As a user, you have the following rights regarding your personal data:

• Right of access: You can request a copy of the personal data we hold about you.
• Right to rectification: You can request the correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten"): You can request the deletion of your personal data in certain circumstances.
• Right to restriction of processing: You can request that we restrict the processing of your data.
• Right to data portability: You can request to receive your data in a structured, commonly used format.
• Right to object: You can object to the processing of your data in certain circumstances.
• Right to withdraw consent: If processing is based on your consent, you can withdraw it at any time.
• Right to lodge a complaint: You can file a complaint with the Spanish Data Protection Agency (AEPD) if you believe your rights have been violated.

To exercise any of these rights, you can contact us at soporte@zignolz.com. We will respond to your request within 30 days.

7. Data security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include:

• Data encryption in transit (HTTPS/TLS)
• Password and sensitive data encryption
• Strict access controls and multi-factor authentication
• Regular security monitoring and audits
• Secure servers and periodic backups

Despite our efforts, no data transmission or storage system is 100% secure. If you have reason to believe that your interaction with us is no longer secure, please notify us immediately.

8. Cookies and similar technologies

We use cookies and similar technologies to improve site functionality, personalize your experience, and analyze service usage. Cookies are small text files stored on your device.

Types of cookies we use:

• Essential cookies: Necessary for basic site functionality (authentication, security).
• Performance cookies: Help us understand how users interact with the site.
• Functionality cookies: Allow us to remember your preferences and settings.

You can configure your browser to reject cookies, although this may affect site functionality. For more information on how to manage cookies, consult your browser settings.

9. Minors

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from minors. If we discover that we have collected data from a minor without verifiable parental consent, we will take steps to delete that information as soon as possible.

10. Changes to this privacy policy

We reserve the right to update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. We will notify you of any significant changes through a notice on our website or by email. We recommend that you review this policy regularly.

11. Contact

If you have questions, concerns, or requests related to this Privacy Policy or the processing of your personal data, you can contact us at:

12. Data controller