Privacy Policy

1. Data Controller

The data controller for your personal data is Oraré, based in Barcelona, Spain. You can reach us at hola@orareapp.com.

2. Data We Collect

• Contact information you voluntarily provide (email, phone) when you reach out.
• Anonymous browsing data (pages visited, browser type).
• Payment data processed exclusively by Stripe (we do not store card data).

3. Legal Basis for Processing

We process your data based on: (a) your consent, (b) performance of a service contract, and (c) compliance with legal obligations (tax law, Ley 49/2002).

4. Data Recipients

We share data with: Stripe (payment processor, US, under Standard Contractual Clauses), Supabase (infrastructure, EU), and Vercel (hosting, global, under Standard Contractual Clauses). We do not sell your data to third parties.

5. Data Retention

We retain your data for the duration of the service and, subsequently, for legally mandated periods (4 years for tax data under Spanish General Tax Law).

6. Your Rights

You have the right to access, rectify, erase, port, restrict, or object to the processing of your data. You can exercise these rights by emailing hola@orareapp.com.

You may also file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. Cookies

This website only uses technical cookies necessary for its operation. We do not use tracking or advertising cookies. Google Fonts are loaded from external servers.

8. Security

We implement technical and organizational measures to protect your data, including encryption in transit (TLS), role-based access control, and regular audits.