Privacy Policy

The data controller is Blanca's IT Professional SL, CIF B16398596, Calle Bazan 25, 03181 Torrevieja, Spain. You can reach us at info@blancas-it.com for any privacy question or rights request.

Account data: name, email address, hashed password, language preference and the organizations you belong to.

Project content: the prompts, project briefs, blueprints, files and AI memory you create inside the product.

Technical data: IP address, browser type, device identifiers and time stamps that we need to keep the service available and secure.

Billing data: only the metadata returned by our payment processor (last four digits, country, plan). We never store full card numbers.

To provide the service and the features you ask for (contract, GDPR Art. 6(1)(b)).

To keep the service secure, prevent abuse and comply with legal obligations (legitimate interest and legal obligation, Art. 6(1)(f) and 6(1)(c)).

To send service-related emails. Marketing emails are sent only with your explicit consent and you can withdraw it at any time.

When you use AI features, your prompts and the necessary context are sent to the AI provider you have selected (OpenAI, Anthropic, Google, Mistral, the Lovable AI Gateway or your own key in BYOK mode).

We do not use your prompts to train models. Providers are contractually bound not to train on your data when their API offers that option, and we always enable it where possible.

We share data only with the subprocessors we need to run the service: Supabase (database, auth, storage), Cloudflare (hosting, CDN), Resend (transactional email) and the AI providers you choose.

We do not sell your personal data and we do not share it with advertisers.

Account data is kept while your account exists and for up to 90 days after deletion for backup rotation. Billing records are kept for the period required by Spanish and EU tax law (currently 6 years).

You have the right to access, rectify, erase, restrict and port your personal data, and to object to processing based on legitimate interest. EU and UK users may also lodge a complaint with their national supervisory authority. California residents have equivalent rights under CCPA.

Send any request to info@blancas-it.com. We respond within 30 days.

Some subprocessors are located outside the EEA. Where this is the case, transfers are protected by the European Commission's Standard Contractual Clauses or an adequacy decision.