Privacy policy

At Startkeel we process your personal data transparently and in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

• Controller: [NOMBRE Y APELLIDOS DEL TITULAR] (owner of startkeel.com)
• NIF: [NIF]
• Contact: legal@startkeel.com

2. What data we process and why

• Email address (when you subscribe or ask to receive results or updates): to send you the requested information and communications about the tool.
• Financial model data you enter in the wizard (your business figures): to generate your model. This data is stored linked to your purchase so the model can be recalculated and edited.
• Payment data: payment is processed by Stripe; we do not store your card details. We keep the email and payment status.
• Technical usage data, aggregated and anonymous (cookieless analytics), to improve the site.

3. Legal basis

• Your consent (art. 6.1.a GDPR) for the subscription and sending of communications.
• Performance of a contract (art. 6.1.b) to process your purchase and provide the service.
• Legitimate interest (art. 6.1.f) for site security and improvement via anonymous analytics.
• Legal obligation (art. 6.1.c) to comply with tax and accounting obligations.

4. Retention

We keep each type of data only as long as it serves its purpose:

• Purchased model (your inputs and email): while you may still need access to what you bought. Deleted on request.
• Opt-in email (free tools): until you unsubscribe or ask us to delete it.
• Support messages: up to 3 years.
• Anti-abuse records (recovery rate limiting): stored hashed, deleted after 24 hours.
• Anonymous benchmark data: kept indefinitely — it contains no email or identifier.

Limit to erasure: if you bought the model, the record of the purchase (invoice and transaction, held by Stripe) is kept for the periods required by Spanish accounting and tax law, even after you ask us to erase everything else. Legal basis: Art. 17(3)(b) GDPR (legal obligation). Note that erasing your model also means you lose access to it.

5. Recipients (processors)

We use providers that process data on our behalf, with appropriate safeguards:

• Stripe — payment processing.
• Supabase — database where data is stored.
• Vercel — site hosting.

Some providers may process data outside the European Economic Area; in that case appropriate safeguards exist (standard contractual clauses or adequacy frameworks). We do not sell or share your data with third parties for commercial purposes.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to legal@startkeel.com. You may also withdraw your consent at any time and file a complaint with the Spanish Data Protection Agency (aepd.es).

7. Security

We apply reasonable technical and organizational measures to protect your data. In the event of a security breach affecting your data, we will act in accordance with the regulations (including, where applicable, notifying the supervisory authority).