Privacy policy

Data controller

Estudio Fenix Software S.L. (tax ID B93836096), with registered address at Carrer de Nil Fabra, 30, Gràcia, 08012 Barcelona. Contact for any privacy matter: [email protected].

What data we process and why

• Customer and user accounts (name, email, company, encrypted password): to create and manage the account, give access to the dashboard and provide the subscribed service. Legal basis: performance of the contract.
• Billing (company and payment details): to charge the subscription and meet tax and accounting obligations. Card details are processed directly by Stripe; we never see or store them. Legal basis: the contract and legal obligations.
• Service communications (email confirmation, password recovery, account and billing notices). Legal basis: the contract.
• Enquiries you send us by email: to reply to you. Legal basis: your consent and our legitimate interest in assisting you.
• Security (IP addresses, technical logs, anti-spam checks): to protect the service against abuse and unauthorised access. Legal basis: our legitimate interest.

Event and speaker data

The data our customers manage with AVCueSync (running orders, speakers with their name and email, presentation material, logs of what is launched in each room) is the responsibility of each customer, who decides how it is used. AVCueSync processes it on the customer's behalf, as a data processor, only to provide the service and as set out in the Terms of service.

If you are a speaker and wish to exercise your rights over that data, please contact the event organiser; if you write to us, we will pass your request on.

Who else may process the data

We do not sell or share personal data. To provide the service we rely on providers that process it on our behalf, under data processing agreements:

• Hosting of the service and cloud file storage.
• Stripe (payments and billing).
• Delivery of service emails (for example, Resend or the configured mail server).
• Cloudflare Turnstile (anti-spam check on forms), when enabled.
• Google, only if you choose to sign in with your Google account.
• OpenRouter and the AI models used, only with the content you send when using the AI features.

Whenever possible, data is hosted in the European Economic Area. When a provider processes data outside it, the transfer is covered by the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

How long we keep it

For as long as the account is active. When it is cancelled, the organisation's data and files are deleted within a reasonable period, except what we must keep by law (for example, billing records for the legally required periods).

Your rights

You may request access, rectification, erasure, objection, restriction of processing and portability of your data by writing to [email protected]. If you believe your request has not been properly handled, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

Security

Passwords are stored encrypted, connections to the cloud use HTTPS and the keys of external services are stored encrypted. Each organisation can only access its own data.