Privacy Policy
1. Data controller
The controller of your data is Select Uno, the label under which Endtara operates (hereinafter, «Endtara»). Its identifying details are in the Select Uno legal notice. For any privacy matter, you may write to here@selectuno.com.
2. What data we process
We process different categories of data depending on your relationship with Endtara:
- Account data (customers): name, email address and password (stored encrypted, never in plain text).
- Organization and billing data: organization name, subscribed plan and Stripe customer identifiers. Endtara does not store your card details: they are handled by Stripe.
- Feedback data: the comment and, if provided, the name and email of the person leaving it; page screenshots, voice notes and video clips; and technical browser metadata (device type, window size, browser, operating system, user agent, page URL and IP address).
- Usage data: technical logs necessary to operate and secure the service.
3. Purposes and legal basis
- Providing the service (authentication, collection and management of feedback): performance of the contract.
- Billing and payment: performance of the contract and legal obligation.
- Notifications of new feedback and service alerts: legitimate interest and performance of the contract.
- Security and abuse prevention: legitimate interest.
4. Processors and providers
To run the service we rely on a small set of specialist providers that act as data processors, on our documented instructions and under contract. By category:
- Infrastructure and database hosting, in the EU.
- Storage and delivery of the media you attach to feedback: screenshots, voice notes and video clips.
- Payment processing. We never store your card details.
- Transactional email (account and notification messages).
For the complete, up-to-date list of named sub-processors, with each provider individually identified, see the Data Processing Agreement.
On the public website only, and solely with your consent, we use analytics providers; the specific ones are named in the Cookie Policy.
Some of these providers may process data outside the European Economic Area. In such cases, the transfers are covered by the safeguards provided for under the GDPR (e.g. standard contractual clauses).
5. Retention
We retain the data for as long as the account remains active and, thereafter, for the applicable legal periods. You may request the deletion of your account and its content at any time.
6. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability by writing to here@selectuno.com. If you believe we have not properly handled your request, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply reasonable technical and organizational measures to protect your data, including encryption in transit, access control and server-signed media uploads.
8. Changes to this policy
We may update this policy to reflect changes in the service or in applicable regulations. We will publish the current version here together with its update date.