Privacy policy

1. Data controller

The owner of Analízamelo is the controller of the personal data you provide through the platform, under Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD). You can contact them at any time through the contact email above.

2. What data we collect

We only process the data needed to provide the service:

• Account data: email address and, if you provide it, your name. Collected when you sign up (including signing up with Google).
• Product usage data: the markets you analyse and save, your favourites and your account settings.
• Subscription data: plan, status and billing period. If you pay by card, the payment details are handled directly by our payment provider (Stripe); we never see or store your card number.
• Your business data (optional): if you use business tracking, the name and location of the business you enter so it can be compared against its market.
• Technical data: basic server logs (IP, date, page requested) needed for the security and operation of the platform.

The data of the businesses shown in the analyses (name, address, ratings, etc.) comes from public sources such as Google Places and relates to establishments, not individuals. We do not enrich that data with private information.

3. What we use your data for

• Providing the service: running analyses, saving your markets and keeping your session.
• Managing your subscription: applying your plan's limits, processing payments and issuing invoices.
• Sending you operational messages: transactional emails such as the periodic tracking report for your business (only if you turn it on) or important notices about your account.
• Answering your support queries through the support email.
• Keeping the platform secure: preventing abuse, fraud and unauthorised access.

We do not sell your data and we do not use it for third-party advertising. We will not send you marketing without your prior consent.

4. Legal basis

• Performance of a contract (art. 6.1.b GDPR): most of the processing is necessary to provide the service you have subscribed to or requested.
• Consent (art. 6.1.a GDPR): for optional features such as email tracking of your business. You can withdraw it at any time.
• Legitimate interest (art. 6.1.f GDPR): platform security and abuse prevention.
• Legal obligation (art. 6.1.c GDPR): keeping billing data for the periods required by tax law.

5. How long we keep it

• Account and usage data: while your account is active. If you delete it, we erase your data within 30 days at most, except what we must keep by legal obligation.
• Billing data: for the periods required by tax and commercial law (generally 6 years).
• Technical security logs: 12 months at most.

6. Who we share data with

We do not transfer your data to third parties, other than the providers we need to operate the service (data processors), with whom we have contracts under art. 28 GDPR:

Some of these providers may process data outside the European Economic Area. In those cases, the transfer relies on the European Commission's Standard Contractual Clauses or on the EU-US Data Privacy Framework.

7. Your rights

You can exercise your rights at any time:

• Access — find out what data of yours we process.
• Rectification — correct inaccurate data.
• Erasure — delete your data (the “right to be forgotten”).
• Objection and restriction — object to processing or ask us to restrict it.
• Portability — receive your data in a structured, commonly used format.
• Withdraw consent — without affecting the lawfulness of processing before withdrawal.

To exercise them, write to us at soporte@analizamelo.com from your account email. We will reply within one month at most. If you believe we have not handled your rights properly, you can lodge a complaint with the Agencia Española de Protección de Datos (aepd.es).

8. Cookies and local storage

Analízamelo uses only strictly necessary technical cookies and local storage:

• Authentication session cookies (Supabase), to keep you securely signed in.
• A cookie holding the language you choose on the site, so we can show you the platform in that language on later visits.
• Browser local storage for interface preferences (for example, which notifications you have read). This information never leaves your device.

We do not use advertising or third-party tracking cookies. That is why you will not see a cookie banner: it is not required for technical cookies.

9. Security

We apply appropriate technical and organisational measures: encryption in transit (HTTPS/TLS) across the platform, encryption at rest in the database, row-level access control (RLS) so each user can only reach their own data, and least-privilege internal access.

10. Minors

Analízamelo is a service aimed at professionals and companies. It is not intended for people under 18 and we do not knowingly collect data from minors. If you believe a minor has given us data, contact us and we will delete it.

11. Changes to this policy

We may update this policy to reflect legal or service changes. If the change is significant, we will tell you by email or through a prominent notice on the platform before it takes effect. The date of the latest revision always appears at the top of this page.