Privacy Policy

1. Data Controller

The data controller for your personal data is:

• Name: Ana Solanes Cañada
• ID: 02634551Q
• Address: Calle de Vergara 14, 28013 Madrid, Spain
• Website: tuagreement.es
• Contact email: tuagreement@gmail.com

2. Data We Collect

We collect only the data necessary to provide you with the Learning Agreement generation service:

• Personal data: name, email address.
• Academic data: home university, host university, subjects to validate, degree, additional instructions, and preferred language.
• Payment data: processed entirely by Stripe. We do not store card numbers or banking data on our servers.
• Technical data: support chat usage data (Tawk.to) and data stored in the browser's localStorage during the form process.

3. Legal Basis for Processing

We process your data based on:

• Performance of a contract (Art. 6.1.b GDPR): processing is necessary to provide the service you have contracted (generating your Learning Agreement).
• Consent (Art. 6.1.a GDPR): by submitting your request and making payment, you consent to the processing of your academic data for document generation.
• Legitimate interest (Art. 6.1.f GDPR): to improve our service and prevent fraud.

4. Purpose of Processing

We use your data to:

• Generate your Learning Agreement through AI analysis.
• Find equivalent subjects at your host university.
• Send you the results by email.
• Process your payment.
• Provide technical support through the chat.

5. Third Parties with Access to Data

To provide the service, we share data with the following providers, all of which have GDPR-compliant privacy policies or adequate safeguards:

6. International Transfers

Some of our providers (Stripe, Google, Supabase, Resend, Tawk.to) may process data outside the European Economic Area. In all cases, adequate safeguards are in place, such as standard contractual clauses approved by the European Commission or certification under the EU-US Data Privacy Framework.

7. Data Retention Period

• Request data and results: retained while you have an active account or for a maximum of 2 years from the last request.
• Billing data: retained for the legally required period (5 years under Spanish tax law).
• Support data (chat): retained for 1 year.

You may request early deletion of your data at any time (see section 8).

8. Your Rights

Under the GDPR, you have the right to:

• Access: know what data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request deletion of your data ("right to be forgotten").
• Portability: receive your data in a structured, machine-readable format.
• Objection: object to the processing of your data in certain circumstances.
• Restriction: request restriction of processing.

To exercise any of these rights, write to us at: tuagreement@gmail.com

We will respond within a maximum of 30 days. If you believe we have not adequately addressed your rights, you may lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

9. Cookies

We use cookies and similar technologies on our website. For detailed information, see our Cookie Policy.

10. Security

We apply technical and organizational measures to protect your data, including:

• Encrypted communications via HTTPS/TLS.
• Restricted access policies (Row Level Security on database).
• Payments managed entirely by Stripe (PCI DSS Level 1 certified).
• We do not store passwords or card data on our servers.

11. Changes

We may update this policy to reflect changes in our practices or legislation. We will publish the updated version on this page with the new update date. We recommend reviewing it periodically.

12. Contact

For any questions related to the privacy of your data:

• Email: tuagreement@gmail.com
• Website: tuagreement.es