Privacy
Privacy policy
Last updated: October 14, 2026
This is a translation. In the event of any discrepancy, the Spanish version prevails. View the Spanish version
1. Controller
Oriol Martí Collell, NIF (Spanish tax ID) 45859350H, c/ Sant Valentí, 2, 4-2, 08221, Terrassa (Barcelona), España. Email: oriolmarti2610@gmail.com.
2. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email, password (encrypted by the authentication provider) or Google identifier if you sign in with Google | Create and manage your account | Performance of the contract (Art. 6.1.b GDPR) |
| API key (we only store its encrypted hash), plan, subscription status and number of daily requests | Provide the Service and apply quotas | Performance of the contract |
| Billing data (name, country, payment data managed by Stripe) | Charge the subscription and issue invoices | Performance of the contract and legal tax obligations (Art. 6.1.c) |
| Technical error logs, which may include the product queried | Security and incident resolution | Legitimate interest (Art. 6.1.f) |
| Browsing data via Google Analytics | Understand how the website is used in order to improve it | Consent (Art. 6.1.a), only if you accept cookies |
| What you write to us by email | Handle your enquiry | Legitimate interest or performance of the contract |
We do not make automated decisions with legal effects on you, nor do we create profiles.
3. Third-party data in reviews
The reviews returned by the Service are public on AliExpress and include the buyer’s name, already masked by AliExpress (for example, “J***n”), and their country. We process them to provide the Service on the basis of legitimate interest and only store them in a temporary cache for a maximum of 2 days. If you appear in a review and wish to object to this processing, write to us.
4. How long we keep it
- Account data: for as long as the account exists. After termination, it is blocked and kept only for the legal periods (for example, 6 years for accounting and tax documentation) and then deleted.
- Request counters: 3 days.
- Technical logs: 14 days.
- Review cache: 2 days at most.
- Google Analytics: according to the retention period configured in Google Analytics, 14 months at most.
5. Providers and international transfers
To provide the Service we use the following providers, which process data on our behalf (data processors):
- Amazon Web Services EMEA SARL (Luxembourg): hosting, database, authentication and email sending. Data is stored in the Ireland (EU) region.
- Stripe Payments Europe, Ltd. (Ireland): payments and billing.
- Google Ireland Ltd.: Google Analytics (only with your consent), sign-in with Google (if you use it) and the website’s typefaces (Google Fonts, which receives your IP address).
Some of these providers may transfer data to the United States. Those transfers are covered by the EU-US Data Privacy Framework or by the European Commission’s standard contractual clauses.
We do not sell your data or disclose it to third parties unless legally required.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to oriolmarti2610@gmail.com. Withdrawing consent does not affect the lawfulness of processing carried out before.
If you believe we have not handled your data properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).
7. Security
We apply appropriate technical and organisational measures: encrypted connections (HTTPS), encryption of stored data, restricted access and storage of API keys only as an encrypted hash.