Privacy Policy

1. Data Controller

The data controller is Brisa Partners, contactable at brisapartners@gmail.com. For any data protection inquiries, please reach out to us at this address.

2. What Data We Collect

When you create an account using Google Sign-In, we collect:

• Your name (as provided by your Google account)
• Your email address
• Your Google profile identifier

When you use our products and services, we may also collect:

• Company name and business information you provide during setup
• Product configuration preferences
• Usage data and service interaction logs

We do not collect sensitive personal data, financial information, or data from minors.

3. How We Use Your Data

We use your personal data solely for the following purposes:

• To authenticate your identity and manage your account
• To provide, maintain, and improve our products and services
• To communicate with you about your account and service updates
• To comply with legal obligations

We do not use your data for automated decision-making or profiling. We do not sell your personal data to third parties. We do not use your data for advertising purposes.

4. Legal Basis for Processing

We process your data based on:

• Contractual necessity: to provide the services you have requested
• Legitimate interest: to improve our services and ensure security
• Consent: where explicitly given, which you may withdraw at any time

5. Data Storage and Security

Your data is stored on servers located in the European Union, hosted by our infrastructure provider Supabase (EU region). We implement appropriate technical and organizational measures to protect your data, including encryption in transit and at rest, access controls, and regular security reviews.

6. Data Sharing

We may share your data with:

• Infrastructure providers (Supabase, hosting) who process data on our behalf under data processing agreements
• Third-party service integrations you explicitly configure (e.g., project management tools, messaging platforms) as part of product functionality
• Legal authorities, if required by law

We do not share your data with any other third parties.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you with our services. If you request account deletion, we will erase your personal data within 30 days, except where retention is required by law.

8. Your Rights Under GDPR

You have the right to:

• Access your personal data
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing of your data
• Data portability (receive your data in a structured format)
• Object to processing based on legitimate interest
• Withdraw consent at any time

To exercise any of these rights, contact us at brisapartners@gmail.com. We will respond within 30 days.

9. Cookies

Our website uses only essential cookies required for authentication and session management. We do not use tracking cookies, analytics cookies, or third-party advertising cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered users of material changes via email. The latest version will always be available at this page.

11. Complaints

If you believe your data protection rights have been violated, you have the right to lodge a complaint with your local data protection authority. For users in Spain, this is the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.

Contact: brisapartners@gmail.com