Privacy Policy
At Entregarte we take your privacy seriously. This policy explains what personal data we process, why, on what legal basis, and what rights you have. It covers the website, the app, and the public file-upload pages.
1. Data controller
The controller is Vidasoft (the "Service", "we", "Entregarte"), at Calle Enmedio, 9 y 11, Paseo Ducal, 9º piso, 12001 Castellón de la Plana, España. Phone: +34 644 72 46 99. For any data protection matter, write to [email protected].
2. What data we process
- Account data: name, email, password (stored hashed), and your organization details.
- Uploaded files (AAFF) and their content: the files you or your clients upload for validation, with their metadata (name, size, date, uploader IP address) and validation results.
- Usage and technical data: activity logs, IP address, browser type, and in-app events.
- Billing data: your plan and payment history. Payments are processed by Stripe; we never store your full card details.
- Communications: the messages you send us through the contact form or by email.
3. Purposes and legal bases
- Providing and maintaining the service (managing your account, campaigns, and validations): performance of the contract (GDPR art. 6(1)(b)).
- Validating files with rules and AI models: performance of the contract.
- Billing, accounting, and fraud prevention: legal obligation (art. 6(1)(c)) and legitimate interest (art. 6(1)(f)).
- Answering your enquiries from the contact form: your consent or our legitimate interest in replying.
- Platform security (logs, antivirus, abuse control): legitimate interest.
- Marketing-site analytics: your consent (art. 6(1)(a)), managed through the cookie banner.
4. Source of the data
You provide account data directly. Files and metadata may come from a printer's clients when they upload material through a campaign. In that case the printer (our customer) is the controller and we are the processor; see the Data Processing Addendum.
5. Processors and subprocessors
To run the service we rely on providers that process data on our behalf, under contract and with appropriate safeguards:
- Stripe - payment processing.
- An EU hosting provider - service infrastructure.
- Sentry - technical error logging.
- Cloudflare - bot protection (Turnstile) on the sign-up, password reset, and contact forms.
- Anthropic and/or OpenAI - AI design validation of uploaded files.
6. International transfers
Some providers (for example, AI or payment providers) may process data outside the European Economic Area. Where they do, we ensure appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission or an adequacy decision.
7. Automated decisions
Validations (including AI ones) are a technical aid applied to print files and do not produce legal effects on you or similarly significantly affect you. The final decision on each file is always made by a human at the printing shop.
8. Retention
We keep account data while your account is active. Uploaded files are kept for up to 90 days, and you can delete them earlier from the dashboard. Billing data is kept for the legal periods that apply (tax and commercial law). After an account closes, we block the data for the applicable limitation periods and then delete it.
9. Your rights
You may exercise at any time your rights of access, rectification, erasure, objection, restriction of processing, portability, and to withdraw your consent, by writing to [email protected]. We will respond within the legal time limits. If you have any question about how we handle your data, write to us and we will sort it out with you. You are also entitled to lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es).
10. Security
We apply appropriate technical and organizational measures: encryption in transit (HTTPS), hashed password storage, role-based access control, backups, and antivirus scanning of uploaded files.
11. Minors
The service is intended for businesses and professionals. It is not directed at minors and we do not knowingly collect their data.
12. Cookies
The marketing site uses analytics cookies only if you accept them. The app and the upload pages your clients see carry no analytics. See the Cookie Policy.
13. Changes to this policy
We may update this policy to reflect legal or service changes. We will publish the current version on this page with its last-updated date and, where the change is material, let you know.
14. United States residents
If you live in the United States, your state's law may give you additional rights over your personal data. We extend the same rights to every user regardless of the state they live in.
- Know and access. You can see which categories of data we process and download a copy from Profile > Privacy and data.
- Portability. The download is JSON, a machine-readable format.
- Deletion. You can request deletion of your account from that same screen.
- Correction. You can edit your account details at any time in your profile.
- Non-discrimination. We will not give you a worse service or a different price for exercising any of these rights.
We do not sell or share your personal information as those terms are defined by the California CCPA/CPRA or equivalent state laws. We also do not use it for cross-context behavioural advertising, so there is no "Do Not Sell or Share My Personal Information" mechanism: there is nothing to opt out of.
You can exercise these rights from inside the app or by writing to [email protected]. We will only ask for the information needed to verify your identity, and we will respond within the timeframes set by the applicable law. You may appoint an authorised agent to act on your behalf.
15. Commercial email
The email we send includes our postal address and, where it is not essential to running your account, a link to unsubscribe. We action unsubscribes within ten business days at the latest, as required by the CAN-SPAM Act. Essential notices (billing, security, service changes) continue while you hold an active account.