Privacy Policy
Updated: October 16, 2026
Information we collect
We collect information you provide directly (name, email, profile photo) and service usage data (pages visited, features used, devices). We do not collect more data than strictly necessary.
Use of information
We use your data to provide and improve our services, communicate with you, personalize your experience and comply with our legal obligations. We never sell your personal data to third parties.
Storage and security
Your data is stored on secure servers with encryption at rest and in transit. We implement technical and organizational measures to protect your information against unauthorized access.
Data sharing
We only share data with essential service providers (AWS, Redis) under confidentiality agreements. We do not share data with third parties for marketing purposes.
Cookies and tracking
We use essential cookies for service operation (user session). We do not use third-party tracking cookies or behavioral advertising.
Your rights
You have the right to access, rectify, export or delete your personal data. To exercise these rights, contact us at privacy@p-sf.com. We will respond within 30 days.
Data retention
We retain your data while your account is active. When you delete your account we erase your personal data — name, email, phone, photo, profiles, messages, devices, sessions, addresses and files — across every service of the platform: immediately if yours is a recent account with no subscriptions, and when the 30-day grace period expires in any other case. All that is left of your account is an empty identifier with no personal data in it.
What is retained and why
The following survives deletion, unlinked from your identity and pointing at that empty identifier: (1) invoices, orders, payments and wallet entries, as required by tax and commercial law (art. 66 of the Spanish General Tax Act and art. 30 of the Commercial Code); (2) identity verification of payees and chargeback files, as required by anti-money-laundering rules; (3) the proof that you accepted the terms and the privacy policy, required by art. 7.1 GDPR; (4) security and anti-fraud records, and moderation files opened on third-party reports; (5) your address on the mail suppression list, because deleting it would make us write to you again; (6) signed documents and their signature trail, which are evidence towards third parties. None of this is used to identify you again.
International transfers
Your data may be processed on servers located outside your country. In such cases, we ensure that transfers comply with applicable data protection regulations.
Contact and DPO
For privacy inquiries or to exercise your rights, you can contact us at privacy@p-sf.com. Phoenix Software Factory acts as the data controller for your data.