Privacy policy

1. Who the controller is

• Controller: LIA ASSISTANT SL
• Tax ID (NIF): [NIF]
• Address: [DOMICILIO SOCIAL]
• Email for any privacy matter: [EMAIL DE CONTACTO]

We don’t have a data protection officer: we are not required to appoint one.

2. What data we process

• Your account: first name and surname, email, password (stored encrypted: nobody can see it), postcode, region (the one you choose in the questions, so we can suggest the deadlines and dates that apply there), language, time zone, whether you want email reminders and the date you accepted automatic renewal and these texts (with their version).
• Billing: name, billing address and tax ID if you give it to us. Stripe stores them, as well as your card details, which never go through our servers.
• What you enter: your deadlines (name, description, date, time, frequency, amount and, if you add them from the questions or from a suggestion, which typical deadline they correspond to), categories, people and teams (with each person’s photo, if you upload one), the reminders you set up and the dates you mark as done.
• The questions: your answers (for example, your nationality, your residence status or whether you have a car, children or a pet) are only used to suggest deadlines. They are processed in your browser and we don’t store them on our servers: we only store your region, the deadlines you decide to add and the names of the people you add (for example, your children). While you fill them in, your answers are saved in your browser so you don’t lose them (see the Cookie policy).
• Reminders: the technical data of each device on which you turn on notifications (the address of its notification service and its encryption keys) and the log of the reminders we send you (which one, when and whether it could be sent).
• Technical data: the IP address and connection data kept by our providers’ security and error logs.

If you enter data about other people (in “People”, with their photo, or in descriptions), enter only what is necessary and make sure you are allowed to, taking special care if they are minors. If you use urclip for your company or professional activity, you decide about that data and we process it only to provide you with the service.

3. What we use it for and on what legal basis

• Providing the service: creating and maintaining your account, storing your deadlines, sending you reminders and the necessary emails (confirmations, password changes, changes to the service or the terms). Legal basis: performance of the contract you accept when you subscribe (article 6.1.b GDPR).
• Charging the subscription and managing renewals, failed payments, cancellations and withdrawals. Legal basis: performance of the contract (article 6.1.b GDPR).
• Issuing and keeping invoices and meeting our tax and accounting obligations. Legal basis: compliance with a legal obligation (article 6.1.c GDPR).
• Keeping the service and your account secure, for example with technical access logs. Legal basis: our legitimate interest in protecting the service and its users (article 6.1.f GDPR).

We don’t send you advertising, we don’t build profiles and we don’t make automated decisions that affect you.

4. Who we share it with

We don’t pass your data on to third parties, except when a law requires us to (for example, to the Spanish Tax Agency or a court). To provide the service we use these providers, which process the data on our behalf, only following our instructions and under a signed data processing agreement:

• Supabase · Supabase Pte. Ltd (Singapore)

  Database, photo storage and account management (login). It stores your account, your deadlines and everything you enter.

  Where: The data is stored on servers in Ireland (European Union).

  Safeguards: For any access that may take place from outside the European Economic Area (for example, for technical support), standard contractual clauses approved by the European Commission.

  Data processing agreementPrivacy

• Stripe · Stripe Payments Europe, Limited (Ireland)

  Charging the subscription, renewals, invoices and the portal to manage the subscription. It processes your name, email, billing address, tax ID (if you give it) and your card details, which never reach us.

  Where: It may process the data in other countries where it operates, including the United States (Stripe, LLC).

  Safeguards: Stripe, LLC participates in the EU-U.S. Data Privacy Framework and also uses standard contractual clauses.

  Data processing agreementPrivacy

• Resend · Plus Five Five, Inc. (United States)

  Sending the service’s emails (account confirmation, deadline reminders, password changes…). It processes your email address and the content of those emails.

  Where: Email data is stored in the United States.

  Safeguards: It participates in the EU-U.S. Data Privacy Framework and also uses standard contractual clauses.

  Data processing agreementPrivacy

• Vercel · Vercel Inc. (United States)

  Hosting of the website and the app. The server functions, which are the ones that access your data, run in Dublin (Ireland); the pages are served from its worldwide network.

  Where: It is a United States company and may access the data from there.

  Safeguards: It participates in the EU-U.S. Data Privacy Framework and also uses standard contractual clauses.

  Data processing agreementPrivacy

Stripe also processes some data as a controller in its own right (for example, to prevent fraud and meet its financial obligations), under its own privacy policy.

Push reminders reach your devices through the notification service of your browser or operating system (Apple, Google, Mozilla…). They are end-to-end encrypted: those services cannot read their content.

5. How long we keep it

• As long as you have the account. If you cancel the subscription, the account and your data are kept so you can come back whenever you want, until you delete it.
• If you start signing up but don’t pay, we delete the account after 7 days.
• Invoices and payment data: Stripe keeps them for the period required by law (for example, Spanish commercial law requires accounting records to be kept for 6 years), even if you delete your account.
• Our providers’ technical logs are deleted according to their own policies.

6. If you delete your account

You can delete it whenever you want from Profile → Delete my account. At that moment we delete your account and all your urclip data: profile, categories, people and their photos, teams, deadlines, reminders, dates marked as done, devices and reminder log. Automatic database backups, if any, are overwritten within a few days.

The only thing we do not delete is your customer record at Stripe, with your billing details and your invoices, because the law requires us to keep them for the period stated above.

7. Your rights

You can ask us at any time to access your data, rectify it, erase it, object to its processing, restrict it or receive it in a format you can take to another service (portability).

You can exercise many of them yourself from the app: editing your details, your deadlines and your billing details, downloading your deadlines in Excel or for your calendar (Profile → Export deadlines, with an active subscription) or deleting your account. For anything else, write to us at [EMAIL DE CONTACTO] from your account email. We will reply within one month at most (extendable to two if the request is complex, in which case we will let you know).

If you think we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es), although we would appreciate it if you wrote to us first so we can try to sort it out.

8. Security

All communications are encrypted (HTTPS), passwords are stored encrypted and the database is set up so that each user can only access their own data. We only access your data when it is needed to provide the service or solve a problem.

9. Minors

urclip is not intended for people under 18, who cannot sign up for it.

10. Changes to this policy

If we change this policy, we will update the date at the top and, if the change is important, we will let you know by email before it applies. More about what we store in your browser in the Cookie policy.