Legal

Privacy Policy

Last updated: March 2025

1. Data controller

2. What data we collect

We only collect data necessary to provide the service:

• Account data: email address and name, provided when you register.
• Usage data: number of files processed, rules created, active connections and in-app activity.
• Payment data: handled entirely by LemonSqueezy. Findest never stores card details.
• OAuth data: access tokens for Gmail, Google Drive, Dropbox and OneDrive, required for the service to function. We never store passwords.
• Document content: text extracted from your PDFs is processed by Google Gemini to classify them. We do not store your document content on our servers.

3. How we use your data

• Provide the automatic document filing service.
• Manage your account and subscription plan.
• Send you service-related communications (changes, incidents, updates).
• Comply with applicable legal obligations.

We do not use your data for advertising or share it with third parties for commercial purposes.

4. Legal basis for processing

• Contract performance — to provide the service you have signed up for (Art. 6.1.b GDPR).
• Legitimate interest — for service security and fraud prevention (Art. 6.1.f GDPR).
• Legal compliance — when required by applicable regulations (Art. 6.1.c GDPR).

5. Sub-processors and third parties

We use the following sub-processors to provide the service:

Provider	Function	Location
Airtable	User and records database	EE.UU. (SCCs)
Google Gemini (Google LLC)	AI document classification	EE.UU. (SCCs)
Google Pub/Sub	Real-time Gmail notifications	EE.UU. (SCCs)
Make.com	Workflow automation	UE
Nango	OAuth authorization management	EE.UU. (SCCs)
LemonSqueezy	Payment processing	EE.UU. (SCCs)
Hostinger	Web hosting	UE

International transfers are covered by Standard Contractual Clauses (SCCs) approved by the European Commission.

6. Retention period

• Account data: while the account is active and for 3 years after cancellation.
• Billing data: 5 years under Spanish tax law.
• Activity logs: 12 months.

7. Your rights

Under the GDPR and the LOPDGDD, you have the right to:

• Access — request what data we hold about you.
• Rectification — correct inaccurate data.
• Erasure — request deletion of your data (right to be forgotten).
• Portability — receive your data in a structured format.
• Objection and restriction — object to certain processing or limit its scope.

To exercise any of these rights, write to [EMAIL DE CONTACTO]. You also have the right to lodge a complaint with the Spanish Data Protection Authority (AEPD).

8. Security

We apply technical and organisational measures to protect your data: OAuth 2.0 authentication, TLS-encrypted communications, restricted team access to data, and regular security reviews. PDF documents are never stored on our servers — they go directly from your Gmail to your cloud.

9. Minors

Findest is not directed at children under 14. If you are under 14, you may not register without the express consent of your legal guardian. If you are between 14 and 18, we recommend you have parental supervision.

10. Contact

For any questions about this policy, write to [EMAIL DE CONTACTO]. We commit to responding within a maximum of 30 days.