Privacy Policy

Privacy Policy – Eternalus At Eternalus, we respect your privacy and are committed to protecting your personal data. This Policy explains what information we collect, how we use it, and what rights you have under the General Data Protection Regulation (GDPR) and applicable regulations. 1. Data Controller • Controller: Eternalus.net • Contact email: support@eternalus.net • Location: Spain 2. Personal data we process a) Registration/Login (Auth0) • Data: name and email address. • Purpose: authentication and identity management. • Provider: Auth0. b) Payments (Paddle) • Data processed by us: transaction reference, amount, transaction date, and identification of credits purchased. • What we DO NOT process: card data, bank accounts, or payment credentials (we have no access to them). • Provider: Paddle (processes payment on our behalf). c) Application usage (Personalized document generation) • Data entered by the user to generate the document: • Couple's names for the ceremony (may be stored as a minimal part of the service). • Ceremony date (not stored; temporary use only during generation). • Ceremony location (not stored; temporary use only during generation). • Purpose: create a personalized document with an interpreted star map and images related to the day and location of the wedding through OpenAI's API. • Generated document: not stored permanently. Made available for download for 24 hours and, after that period, irreversibly deleted. d) Cookies and technical data • Essential session cookies for proper application functioning. • Language preference cookie selected by the user. • We do not use advertising or tracking cookies. 3. Purpose and legal basis for processing • Service provision: generate the requested personalized document and enable its download for 24 hours. (Contract execution) • User account management: through Auth0. (Contract execution / Legitimate interest in security) • Payment processing: through Paddle. (Contract execution / Legal obligation) • Compliance with legal obligations: billing, security, fraud prevention. (Legal obligation) • Legitimate interest: ensure the security and proper functioning of the application. The applicable legal basis includes user consent, execution of the service contract, and compliance with legal obligations. 4. Data recipients • Auth0 (login/registration). • Paddle (payment processing). • OpenAI (temporary processing of data necessary to generate the interpreted star map and images). All providers apply adequate data protection measures and, where applicable, perform international transfers under Standard Contractual Clauses (SCCs) approved by the European Commission. 5. Retention periods • Login data (name and email): while you maintain your account active or until you request its deletion, except for legal obligations. • Transaction data: 6 years (legal accounting/tax obligation). • Ceremony data: • Couple's names: kept only as a minimal part of the service, while necessary for provision and support, or until deletion request. • Date and location: not stored; temporary use during document generation. • Generated document (PDF or other format): available for download for 24 hours; after that period, irreversibly deleted and not recoverable. • Cookies: during the session or until the user deletes them. 6. User rights You can exercise your rights of access, rectification, erasure, limitation of processing, portability, and objection at any time by writing to support@eternalus.net. You can also file a complaint with the Spanish Data Protection Agency (AEPD). 7. Data security We apply adequate technical and organizational measures to protect the confidentiality, integrity, and availability of personal data. During the 24-hour download window, the document is hosted in temporary storage with access controls. 8. Cookies Our application uses only essential cookies: • Session: necessary for basic functioning. • Language: to remember your preference. You can configure or delete cookies from your browser settings at any time. 9. Policy Changes We may update this Policy to reflect changes in the application, providers, or applicable regulations. The last updated date appears at the end of the document.