Your Personal Data

California Privacy Policy

This privacy policy applies to residents of California and is provided in accordance with the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

Information We Collect

When you use our website and services, we collect information which may include your name, email address, and profile information associated with your account. When you arrive from one of our ads, we record which ad it was (from the labels in the link) with the organisation you create when you open your account, so that we can optimise our traffic sources, press releases or campaigns. We keep this in our own records only and do not share it with any advertising platform. We do not use cookies for this and we share it with no one. We use only the first-party cookies listed in our Cookie Policy, which keep the website working, and no advertising or tracking cookies.

We Do Not Sell or Share Your Information

RINDOGATAN LLC does not sell your personal information. We do not share your personal information with third parties for cross-context behavioral advertising purposes. We use your data only for the purposes described in this policy.

Purposes of the Processing

We are not fond of polluting our systems with your personal information, so we only collect it for very specific purposes:

• If you open an account on PrivacyCloud you will need an email address to both access the platform (thus avoiding bots and spammers) and remember the information you choose to store in it, or the subscription you take out. This can be provided through the "Magic Link" or "Login with Google" options. We also use your address to send you the messages about your account, your free trial and your subscription, including a reminder before a yearly subscription renews.
• Online payments are processed by Stripe. It is them who keep your card details, etc. but we will not get ahead of ourselves with the role that each party plays… The payment notices Stripe sends us reach your account through our TODO.LAW website, which passes them on to the PrivacyCloud application.
• We use Sealmetrics, an analytics service that sets no cookies, to count visits to our pages. Your browser loads its script from Sealmetrics' servers; we use the results only as aggregated figures. On privacycloud.com, the pages also count their own visits: each page sends our PrivacyCloud application its address, the campaign labels of the link that brought you there, and whether you arrived from another site, and we keep only a daily total per page. This sets no cookie, stores nothing in your browser, and keeps no IP address or other identifier.
• If you send a request to exercise your data protection rights through a privacy request form that one of our customers publishes with PrivacyCloud, we handle it only on that customer's behalf, as its processor. The customer decides what happens to your request and answers it, and the customer's own privacy notice applies, not this one. To exercise your rights over that request, contact the customer.
• If your administrator switches on the AI features, the details of the record being drafted are sent to our AI provider, which produces the draft with an open-weight model it runs on its own infrastructure and, with the setting we use, keeps neither the request nor the result. If your organisation adds its own API inference key, your own provider is used instead, under your own agreement with it.
• If you send us a message through "Get help", we keep it with your email address and send it to our support address, so that we can answer you.

Lawful Bases for Processing

We process your personal data under the following lawful bases as defined by the GDPR:

• Legitimate Interest: We rely on this basis to record which of our ads brought you to us. We also rely on legitimate interest to run a statistical analysis of traffic to our various pages. That analysis sets no cookies, and we use it only as aggregated figures.
• Contractual Necessity: We rely on this basis when you join our platform (providing your email address) or take out a subscription to PrivacyCloud, and when you ask us for help through "Get help".

Data Retention

We keep your account data while your account is open; what happens to it afterwards is set out in our Terms of Service and the data processing agreement. Purchase and subscription records are kept for the life of the subscription plus the period tax law requires.

Data Processors and Transfers to Third Parties

We use Stripe to manage payments on PrivacyCloud. They are both our data processor (insofar as they collect money on our behalf) and an independent data controller (as it relates to their own compliance with applicable laws) (location: United States and other countries; safeguard: Data Privacy Framework and standard contractual clauses).

The PrivacyCloud website (privacycloud.com) and the PrivacyCloud application (app.privacycloud.com), with its privacy program and its AI governance program, rely on these providers. Each entry gives where the provider processes the data and the safeguard for transfers outside the EU and the UK:

• Vercel is our hosting platform: for the PrivacyCloud application in Frankfurt (EU); this website is served from Vercel's network (safeguard: Data Privacy Framework and standard contractual clauses)
• Neon is our cloud database: in Frankfurt (EU) for the PrivacyCloud application (safeguard: Data Privacy Framework and standard contractual clauses)
• Resend is the email service that sends our sign-in links, account, trial and subscription messages, the notices of the rights-request forms and the messages sent through "Get help" (location: United States; safeguard: Data Privacy Framework and standard contractual clauses)
• Google LLC: if you choose "Login with Google", Google receives your sign-in as an independent controller, under its own privacy policy; it is not our processor
• Sealmetrics counts visits to our pages without cookies, as described above (location: Ireland and France, EU; the data does not leave the EU, as the provider states)
• Groq LLC is our AI provider: when AI features are switched on, it produces the drafts from the details of the record being drafted; with the setting we use, it keeps neither the request nor the result (location: United States; safeguard: standard contractual clauses, as the provider's documents state)
• Google Workspace (Gmail) is the e-mail service of our support and privacy addresses: it receives the messages you send us and our replies to them (location: United States and other countries; safeguard: standard contractual clauses or the transfer solution Google publishes)

Your California Privacy Rights

As a California resident, you have the following rights:

• Right to Know: You may request disclosure of the categories and specific pieces of personal information we have collected about you.
• Right to Delete: You may request deletion of your personal information, subject to certain exceptions.
• Right to Correct: You may request correction of inaccurate personal information.
• Right to Opt-Out: While we do not sell or share your information, you have the right to opt-out of such practices.
• Right to Non-Discrimination: We will not discriminate against you for exercising any of your privacy rights.

Exercise Your Rights

UK Privacy Policy

This privacy policy applies to residents of the United Kingdom and is provided in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Data Controller

RINDOGATAN LLC, a company formed in Wyoming (United States), with its registered office at 2120 Carey Avenue, Cheyenne, WY 82001, USA, is the controller of the personal data we collect through this website. We have not appointed a representative in the United Kingdom for now. You can contact us at privacy@rindogatan.com.

Information We Collect

When you use our website and services, we collect information which may include your name, email address, and profile information associated with your account. When you arrive from one of our ads, we record which ad it was (from the labels in the link) with the organisation you create when you open your account, so that we can optimise our traffic sources, press releases or campaigns. We keep this in our own records only and do not share it with any advertising platform. We do not use cookies for this and we share it with no one. We use only the first-party cookies listed in our Cookie Policy, which keep the website working, and no advertising or tracking cookies.

Purposes of the Processing

We are not fond of polluting our systems with your personal information, so we only collect it for very specific purposes:

• If you open an account on PrivacyCloud you will need an email address to both access the platform (thus avoiding bots and spammers) and remember the information you choose to store in it, or the subscription you take out. This can be provided through the "Magic Link" or "Login with Google" options. We also use your address to send you the messages about your account, your free trial and your subscription, including a reminder before a yearly subscription renews.
• Online payments are processed by Stripe. It is them who keep your card details, etc. but we will not get ahead of ourselves with the role that each party plays… The payment notices Stripe sends us reach your account through our TODO.LAW website, which passes them on to the PrivacyCloud application.
• We use Sealmetrics, an analytics service that sets no cookies, to count visits to our pages. Your browser loads its script from Sealmetrics' servers; we use the results only as aggregated figures. On privacycloud.com, the pages also count their own visits: each page sends our PrivacyCloud application its address, the campaign labels of the link that brought you there, and whether you arrived from another site, and we keep only a daily total per page. This sets no cookie, stores nothing in your browser, and keeps no IP address or other identifier.
• If you send a request to exercise your data protection rights through a privacy request form that one of our customers publishes with PrivacyCloud, we handle it only on that customer's behalf, as its processor. The customer decides what happens to your request and answers it, and the customer's own privacy notice applies, not this one. To exercise your rights over that request, contact the customer.
• If your administrator switches on the AI features, the details of the record being drafted are sent to our AI provider, which produces the draft with an open-weight model it runs on its own infrastructure and, with the setting we use, keeps neither the request nor the result. If your organisation adds its own API inference key, your own provider is used instead, under your own agreement with it.
• If you send us a message through "Get help", we keep it with your email address and send it to our support address, so that we can answer you.

Lawful Bases for Processing

We process your personal data under the following lawful bases as defined by the UK GDPR:

• Legitimate Interest: We rely on this basis to record which of our ads brought you to us. We also rely on legitimate interest to run a statistical analysis of traffic to our various pages. That analysis sets no cookies, and we use it only as aggregated figures.
• Contractual Necessity: We rely on this basis when you join our platform (providing your email address) or take out a subscription to PrivacyCloud, and when you ask us for help through "Get help".

Data Retention

We keep your account data while your account is open; what happens to it afterwards is set out in our Terms of Service and the data processing agreement. Purchase and subscription records are kept for the life of the subscription plus the period tax law requires.

Data Processors and Transfers to Third Parties

We use Stripe to manage payments on PrivacyCloud. They are both our data processor (insofar as they collect money on our behalf) and an independent data controller (as it relates to their own compliance with applicable laws) (location: United States and other countries; safeguard: Data Privacy Framework and standard contractual clauses).

The PrivacyCloud website (privacycloud.com) and the PrivacyCloud application (app.privacycloud.com), with its privacy program and its AI governance program, rely on these providers. Each entry gives where the provider processes the data and the safeguard for transfers outside the EU and the UK:

• Vercel is our hosting platform: for the PrivacyCloud application in Frankfurt (EU); this website is served from Vercel's network (safeguard: Data Privacy Framework and standard contractual clauses)
• Neon is our cloud database: in Frankfurt (EU) for the PrivacyCloud application (safeguard: Data Privacy Framework and standard contractual clauses)
• Resend is the email service that sends our sign-in links, account, trial and subscription messages, the notices of the rights-request forms and the messages sent through "Get help" (location: United States; safeguard: Data Privacy Framework and standard contractual clauses)
• Google LLC: if you choose "Login with Google", Google receives your sign-in as an independent controller, under its own privacy policy; it is not our processor
• Sealmetrics counts visits to our pages without cookies, as described above (location: Ireland and France, EU; the data does not leave the EU, as the provider states)
• Groq LLC is our AI provider: when AI features are switched on, it produces the drafts from the details of the record being drafted; with the setting we use, it keeps neither the request nor the result (location: United States; safeguard: standard contractual clauses, as the provider's documents state)
• Google Workspace (Gmail) is the e-mail service of our support and privacy addresses: it receives the messages you send us and our replies to them (location: United States and other countries; safeguard: standard contractual clauses or the transfer solution Google publishes)

International Transfers

The data of the PrivacyCloud application is stored in European Union data centres, and its server functions also run there. This website is served from Vercel's network, and the payment notices pass through our TODO.LAW website in the United States. Each provider's location and safeguard is given with it above. Even so, some data may be processed in, or be accessible from, the United States: RINDOGATAN LLC, our US company, provides and runs part of the services from the United States (for example support, security and billing), and several of our providers (hosting, database, e-mail, payments, Google sign-in and, if AI is switched on, the AI provider) are US companies or subsidiaries of US companies, subject to US laws that may allow US authorities to request access to data. Those transfers rely on the UK Extension to the EU-US Data Privacy Framework where the recipient is certified to it and otherwise on the International Data Transfer Agreement (IDTA) or the UK Addendum to the EU standard contractual clauses. You may ask us for a copy of those safeguards. If you are a customer of PrivacyCloud, your contract and its data processing agreement prevail over this policy on the matters they cover.

Your UK Data Protection Rights

Under the UK GDPR, you have the following rights:

• Right of Access: You may request a copy of the personal data we hold about you.
• Right to Rectification: You may request correction of inaccurate or incomplete personal data.
• Right to Erasure: You may request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing: You may request that we limit the processing of your personal data.
• Right to Data Portability: You may request to receive your personal data in a structured, commonly used format.
• Right to Object: You may object to processing based on legitimate interests or for direct marketing purposes.

Supervisory Authority

You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated. Visit ico.org.uk for more information.

Exercise Your Rights

EU Privacy Policy

This privacy policy applies to residents of the European Economic Area (EEA) and is provided in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

Data Controller

RINDOGATAN LLC, a company formed in Wyoming (United States), with its registered office at 2120 Carey Avenue, Cheyenne, WY 82001, USA, is the controller of the personal data we collect through this website. Its representative in the Union for the purposes of Article 27 GDPR is RINDOGATAN SL (C/ Ponzano 51, 28003 Madrid, Spain; CIF B87868618). You can contact us at privacy@rindogatan.com.

Information We Collect

When you use our website and services, we collect information which may include your name, email address, and profile information associated with your account. When you arrive from one of our ads, we record which ad it was (from the labels in the link) with the organisation you create when you open your account, so that we can optimise our traffic sources, press releases or campaigns. We keep this in our own records only and do not share it with any advertising platform. We do not use cookies for this and we share it with no one. We use only the first-party cookies listed in our Cookie Policy, which keep the website working, and no advertising or tracking cookies.

Purposes of the Processing

We are not fond of polluting our systems with your personal information, so we only collect it for very specific purposes:

• If you open an account on PrivacyCloud you will need an email address to both access the platform (thus avoiding bots and spammers) and remember the information you choose to store in it, or the subscription you take out. This can be provided through the "Magic Link" or "Login with Google" options. We also use your address to send you the messages about your account, your free trial and your subscription, including a reminder before a yearly subscription renews.
• Online payments are processed by Stripe. It is them who keep your card details, etc. but we will not get ahead of ourselves with the role that each party plays… The payment notices Stripe sends us reach your account through our TODO.LAW website, which passes them on to the PrivacyCloud application.
• We use Sealmetrics, an analytics service that sets no cookies, to count visits to our pages. Your browser loads its script from Sealmetrics' servers; we use the results only as aggregated figures. On privacycloud.com, the pages also count their own visits: each page sends our PrivacyCloud application its address, the campaign labels of the link that brought you there, and whether you arrived from another site, and we keep only a daily total per page. This sets no cookie, stores nothing in your browser, and keeps no IP address or other identifier.
• If you send a request to exercise your data protection rights through a privacy request form that one of our customers publishes with PrivacyCloud, we handle it only on that customer's behalf, as its processor. The customer decides what happens to your request and answers it, and the customer's own privacy notice applies, not this one. To exercise your rights over that request, contact the customer.
• If your administrator switches on the AI features, the details of the record being drafted are sent to our AI provider, which produces the draft with an open-weight model it runs on its own infrastructure and, with the setting we use, keeps neither the request nor the result. If your organisation adds its own API inference key, your own provider is used instead, under your own agreement with it.
• If you send us a message through "Get help", we keep it with your email address and send it to our support address, so that we can answer you.

Lawful Bases for Processing

We process your personal data under the following lawful bases as defined by the GDPR:

• Legitimate Interest: We rely on this basis to record which of our ads brought you to us. We also rely on legitimate interest to run a statistical analysis of traffic to our various pages. That analysis sets no cookies, and we use it only as aggregated figures.
• Contractual Necessity: We rely on this basis when you join our platform (providing your email address) or take out a subscription to PrivacyCloud, and when you ask us for help through "Get help".

Data Retention

We keep your account data while your account is open; what happens to it afterwards is set out in our Terms of Service and the data processing agreement. Purchase and subscription records are kept for the life of the subscription plus the period tax law requires.

Data Processors and Transfers to Third Parties

We use Stripe to manage payments on PrivacyCloud. They are both our data processor (insofar as they collect money on our behalf) and an independent data controller (as it relates to their own compliance with applicable laws) (location: United States and other countries; safeguard: Data Privacy Framework and standard contractual clauses).

The PrivacyCloud website (privacycloud.com) and the PrivacyCloud application (app.privacycloud.com), with its privacy program and its AI governance program, rely on these providers. Each entry gives where the provider processes the data and the safeguard for transfers outside the EU and the UK:

• Vercel is our hosting platform: for the PrivacyCloud application in Frankfurt (EU); this website is served from Vercel's network (safeguard: Data Privacy Framework and standard contractual clauses)
• Neon is our cloud database: in Frankfurt (EU) for the PrivacyCloud application (safeguard: Data Privacy Framework and standard contractual clauses)
• Resend is the email service that sends our sign-in links, account, trial and subscription messages, the notices of the rights-request forms and the messages sent through "Get help" (location: United States; safeguard: Data Privacy Framework and standard contractual clauses)
• Google LLC: if you choose "Login with Google", Google receives your sign-in as an independent controller, under its own privacy policy; it is not our processor
• Sealmetrics counts visits to our pages without cookies, as described above (location: Ireland and France, EU; the data does not leave the EU, as the provider states)
• Groq LLC is our AI provider: when AI features are switched on, it produces the drafts from the details of the record being drafted; with the setting we use, it keeps neither the request nor the result (location: United States; safeguard: standard contractual clauses, as the provider's documents state)
• Google Workspace (Gmail) is the e-mail service of our support and privacy addresses: it receives the messages you send us and our replies to them (location: United States and other countries; safeguard: standard contractual clauses or the transfer solution Google publishes)

International Transfers

The data of the PrivacyCloud application is stored in European Union data centres, and its server functions also run there. This website is served from Vercel's network, and the payment notices pass through our TODO.LAW website in the United States. Each provider's location and safeguard is given with it above. Even so, some data may be processed in, or be accessible from, the United States: RINDOGATAN LLC, our US company, provides and runs part of the services from the United States (for example support, security and billing), and several of our providers (hosting, database, e-mail, payments, Google sign-in and, if AI is switched on, the AI provider) are US companies or subsidiaries of US companies, subject to US laws that may allow US authorities to request access to data. Those transfers rely on the EU-US Data Privacy Framework where the recipient is certified to it and otherwise on the standard contractual clauses approved by the European Commission. You may ask us for a copy of those safeguards. RINDOGATAN SL (CIF B87868618) is RINDOGATAN LLC's representative in the Union for the purposes of Article 27 GDPR; you may contact it at privacy@rindogatan.com. If you are a customer of PrivacyCloud, your contract and its data processing agreement prevail over this policy on the matters they cover.

Your EU Data Protection Rights

Under the GDPR, you have the following rights:

• Right of Access (Art. 15): You may request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): You may request correction of inaccurate or incomplete personal data.
• Right to Erasure (Art. 17): You may request deletion of your personal data, subject to certain legal exceptions.
• Right to Restrict Processing (Art. 18): You may request that we limit the processing of your personal data.
• Right to Data Portability (Art. 20): You may request to receive your personal data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21): You may object to processing based on legitimate interests or for direct marketing purposes.
• Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.

Supervisory Authority

You have the right to lodge a complaint with the Agencia Española de Protección de Datos (AEPD) or your local supervisory authority if you believe your data protection rights have been violated. Visit aepd.es for more information.

Exercise Your Rights

Cookie Policy

We do not use tracking cookies.

We use our own first-party cookies so that the website works as you would expect. Nothing more.

Your choice of light or dark mode is kept in your browser's storage (pc-theme), not in a cookie, until you clear it. On privacycloud.com, prices are shown in euros or dollars according to the country your connection comes from; no cookie is set and nothing is stored for this.