Privacy policy

Last updated: June 2026

Data controller

Olcas Apps, tax ID [NIF], [DIRECCIÓN FISCAL], Spain — vendi@olcas.app.

What data we process

• Merchant accounts: name, email and password hash; subscription and payment references (Stripe).
• Buyers: name and email provided when placing an order in a store.
• Technical logs (IP, user agent) for security purposes.

Purposes and legal basis

We process data to provide the service (contract), send transactional emails such as verification and password reset (contract), prevent abuse (legitimate interest) and comply with tax obligations (legal obligation).

Processors

Stripe (payments), Resend (transactional email) and Cloudflare (DNS, anti-bot, image storage) act as processors under their own data processing agreements. Data is hosted in the EU where possible.

Retention and deletion

You can delete your account at any time from the dashboard: personal data is anonymized immediately. Order and billing records are kept anonymized for the legally required period.

Your rights

You may exercise access, rectification, erasure, portability, restriction and objection rights by writing to vendi@olcas.app. You may also lodge a complaint with the Spanish supervisory authority (AEPD).