# Privacy Policy

> How TallerIA collects, uses and protects your personal data, your GDPR rights and how to exercise them.

This policy explains how TallerIA processes the personal data of the platform's users. Last updated: 2025-01-01.

This English text is a courtesy translation. The Spanish version is the legally binding one; in case of any discrepancy, the Spanish text prevails.

## 1. Data controller

The controller of your personal data is Joan Amat Serrano Parés (TallerIA), with registered address at Disseminado Xalet Parés N55, Cassà de la Selva, España, tax ID 41666043W. For any data protection matter you can contact us at [info@talleria.online](mailto:info@talleria.online).

## 2. Data we collect

- **Account data:** name, email, phone number, encrypted password.
- **Usage data:** actions in the platform, activity logs, device, browser, IP address.
- **Billing data:** subscribed plan and payment history. Card and bank details are handled directly by Paddle and are not stored by us.
- **Workshop data:** name, address, staff, vehicles, customers, work orders, quotes and invoices entered by the user.

## 3. Purposes and legal basis

- Providing the SaaS service — performance of a contract.
- Managing payments and subscriptions — performance of a contract.
- Service-related communications — legitimate interest.
- Product improvement — legitimate interest.
- Compliance with tax obligations — legal obligation.

## 4. Payments processed by Paddle

Payments are processed by Paddle.com Market Limited, acting as Merchant of Record, which handles payment processing, invoicing and tax compliance on behalf of TallerIA. Payment details (card number, bank data) are processed directly by Paddle and are not stored on our servers. See the [Paddle privacy policy](https://www.paddle.com/legal/privacy) for more information.

## 5. International data transfers

- **Database and authentication infrastructure:** hosted in the European Union.
- **AI providers:** some AI features involve transfers to the United States under standard contractual clauses approved by the European Commission.
- **Paddle:** payment processing with equivalent safeguards under international transfer frameworks.

## 6. Data retention

- **Account data:** for the duration of the contract plus 5 years for tax obligations.
- **Activity logs:** 12 months.
- **Billing data:** 10 years (Spanish tax requirement).
- **After account deletion:** anonymised within 30 days, except data subject to a legal retention obligation.

## 7. Your rights (GDPR)

As a data subject you have the right to access, rectification, erasure (right to be forgotten), objection to processing, data portability, restriction of processing and to withdraw your consent at any time. You can exercise these rights by writing to [info@talleria.online](mailto:info@talleria.online). You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at [www.aepd.es](https://www.aepd.es).

## 8. Security

- Encryption in transit via HTTPS/TLS.
- Encryption at rest in the database.
- Two-factor authentication (2FA) available for accounts.
- Data access restricted by roles and row level security (RLS) policies.

## 9. Cookies

We currently use only technical cookies that are necessary to keep the user session and for the platform to work correctly. We do not use marketing or third-party tracking cookies without your consent. This section will be updated if analytics or marketing cookies are introduced in the future.

## 10. Changes to this policy

We may update this policy from time to time. We will notify any relevant change by email at least 15 days in advance. The last update date appears at the top of this document.

## Enlaces

- [Workshop management software for auto repair shops](https://talleria.online/en)
- [Contact the TallerIA team](https://talleria.online/en/contacto)
- [About TallerIA](https://talleria.online/en/sobre-nosotros)
- [Versión en español](https://talleria.online/)

---

Fuente: https://talleria.online/en/privacy-policy — TallerIA