SITEPULSE · 2026-10-09-v1
Privacy
Prepared document. Operator details and legal review are still pending. This is not a certificate of legal compliance.
Who processes your data
For accounts, support, security and billing, the controller is Ezequiel Ortiz, Isaac Albeniz. Privacy contact: administrator@sitepulse.es.
For a customer-created form, that customer controls their visitors' data. SitePulse processes it on their instructions. The customer must identify themselves and explain purposes, lawful basis and rights alongside their form; SitePulse's general policy does not replace that notice.
Data, purposes and lawful bases
- Account and service: email, optional name, workspace, role, hashed password, monitors and configuration; for the contract or requested registration (GDPR 6(1)(b)).
- Security: IP, sessions, browser, technical logs and reports. Fraud prevention and service protection based on legitimate interests subject to balancing (6(1)(f)); not repurposed for advertising.
- Notifications: Telegram chat ID, destination email, webhook URL and message data. The provider you select receives what is necessary to deliver the notification. Avoid sensitive information.
- Payments: reference, account email, plan, provider and reconciliation records; contractual and applicable tax duties. Card and PayPal credentials are entered with the provider, not SitePulse.
- External advertising: only when enabled and valid consent has been obtained through the relevant integration. No email marketing campaigns or analytics are installed by default.
Transparency information is based on articles 12–14 of the GDPR and the Spanish LOPDGDD.
Providers and transfers
- Hosting provider
- Pendiente de completar / Not yet provided
- Country / region where data is stored
- España
- International transfers: mechanism and safeguards, or why not applicable
- Pendiente de completar / Not yet provided
Notification data is transmitted to the Telegram, email or webhook destination you choose. Stripe and PayPal are used when you choose their checkout; AdSense loading remains blocked until the CMP is integrated. Transfers outside the EEA require a valid mechanism and safeguards, not merely a clause or checkbox (GDPR chapter V).
Retention
Accounts and forms remain while the workspace is active or until deletion according to customer instructions and applicable obligations. Technical-history retention is plan-based: Free 3 days, Personal 30 days, Business 180 days. Sessions expire after 30 days; cookie choices last 180 days. Checkout-opening and contractual acknowledgement records are reviewed and removed when no longer needed; they are not invoices or confirmed payments.
Database backups rotate after 30 days and project/configuration copies after 60 days. Restoration must reapply requested deletions. Fiscal documents follow their legal retention duties, which do not justify indefinite form-data storage.
Your rights
You may request access, rectification, erasure, objection, restriction and portability at the stated email, and withdraw consent without affecting earlier lawful processing. Identity verification is proportionate and responses are normally provided within one month; justified extensions will be notified. You can complain to the Spanish AEPD. No advertising-based decisions with legal effects are made.