Privacy policy
This is a translation for convenience. If it differs from the Spanish version, the Spanish version prevails.
This policy explains what personal data we process when you visit AI Universe, write to us, sign up for the newsletter, or create a reader account and subscribe to the guides. We wrote it in line with the General Data Protection Regulation (GDPR) and Spain’s Organic Law 3/2018 on data protection (LOPDGDD).
Data controller
- Controller: [Titular pendiente]
- Tax ID (NIF): [NIF pendiente]
- Address: [Domicilio pendiente]
- Email: hola@[dominio-pendiente]
What data we process and why
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Replying to messages you send through the contact form or by email | Name, email address, and message | Your consent (Art. 6(1)(a) GDPR) | As long as needed to help you and, at most, one year afterward |
| Sending you the newsletter | Email address, sign-up and confirmation dates, and an encrypted fingerprint of the IP address you signed up from as proof of consent | Your consent, confirmed through double opt-in (Art. 6(1)(a) GDPR and Art. 21 of Spain’s LSSI e-commerce law) | Until you unsubscribe |
| Managing your reader account: signing in with an emailed code or with Google, remembering your session and language | Email address, language, sign-up and last sign-in dates, open sessions (stored encrypted) and, if you sign in with Google, your Google account ID | Performance of the contract you accept when you create the account (Art. 6(1)(b) GDPR) | As long as you have the account. You can delete it whenever you like; if it has no active subscription and you don’t sign in for 24 months, we delete it |
| Managing the paid subscription and giving you access to the exclusive guides | Your account data, your Stripe customer and subscription IDs, the plan status and dates, and the date you requested immediate access and waived your right of withdrawal | Performance of the contract (Art. 6(1)(b) GDPR) | As long as you have the account. Stripe keeps payments and invoices for as long as tax laws require (in Spain, generally 4 years) |
| Showing ads (Google AdSense), when enabled | Cookie and device identifiers, and browsing data | Your consent, given in the cookie notice | As set out in the cookie policy |
| Site security and abuse prevention | IP address and technical request data, in the server logs | Legitimate interest in protecting the site (Art. 6(1)(f) GDPR) | Up to 30 days |
We don’t make automated decisions about you or build profiles of our own.
Google advertising
When advertising is enabled and you accept it, third-party vendors, including Google, will use cookies to serve ads based on your previous visits to this and other websites. Advertising cookies allow Google and its partners to serve ads to you based on your visits to this site and other sites on the internet.
You can opt out of personalized advertising in Google Ads Settings, and out of other vendors’ personalized advertising at youronlinechoices.com. Google explains how it uses data from sites that use its services on this page.
Who else has access to the data
- Hosting: GamzyCloud (GamzyHost), which hosts the website on servers in the European Union and acts as a data processor.
- Newsletter email: whichever sending provider we hire, acting as a data processor under a signed contract. We’ll name it here before sending the first issue.
- Payments: Stripe Payments Europe, Ltd. (Ireland) charges the subscription, calculates VAT, and issues invoices. To do so, it processes your email address, payment details, and country as a controller for its own legal obligations and as a processor for managing the subscription. We never see your card. It may transfer data to the United States under the safeguards of the EU-U.S. Data Privacy Framework and standard contractual clauses. Its policy: stripe.com/es/privacy.
- Sign-in email: whichever sending provider we hire, acting as a data processor, to send you sign-in codes and account notices.
- Google (Google Ireland Ltd.), if you choose to sign in with Google: we only receive your email address and your account ID; we never post anything on your behalf.
- Google (Google Ireland Ltd.), if you accept advertising. Google may transfer data to the United States under the EU-U.S. Data Privacy Framework.
We don’t sell or share your data with anyone else, unless required by law.
Your rights
You can request access to your data, rectify it, erase it, object to its processing, restrict it, and ask for its portability. You can also withdraw your consent at any time, without affecting any processing carried out before. Email us at hola@[dominio-pendiente] stating which right you want to exercise.
If you have an account, you can go to Your account to download your data as a file and delete the account yourself, instantly. Deleting it cancels the subscription and removes your data from our database; the only things kept are the payments and invoices that Stripe is legally required to retain.
If you believe we haven’t handled your data properly, you can file a complaint with the Spanish Data Protection Agency (AEPD).
Minors
The blog isn’t aimed at children under 14. If you’re under 14, don’t send us any data or subscribe without your parents’ or guardians’ permission.
Changes
If we change this policy, we’ll update the date above and, if the change is significant, we’ll announce it on the website.