Data Controller

The data controller for your personal data is identified in our Legal Notice .

1. What data do we collect?

Data you provide

We collect information necessary for service delivery:

• Purchase and Fiscal Data: Name, email, address, and Tax ID/VAT (for freelancers and companies, required for tax compliance).
• Artist Data: Links to public profiles and artist names (for the DigIN service).
• Communications: Messages sent to support.

Automatic data

Anonymous browsing data for site operation. See our Cookie Policy for details.

2. Purpose of processing

We use your data exclusively for:

• Contract execution: Delivering software or activating your account.
• Legal compliance: Issuing invoices and filing taxes (VAT/Income Tax).
• Support: Answering your technical questions.
• Waitlist Management: To notify you when your Beta access slot is available.

3. Legal Basis for Processing (GDPR Art. 6)

We process your personal data under the following legal bases:

• Purchase and billing data: Contract performance (Art. 6.1.b) and legal tax obligation (Art. 6.1.c).
• Artist data and DigIN profile: Contract performance (Art. 6.1.b) — necessary to deliver the contracted service.
• Support communications: Legitimate interest (Art. 6.1.f) — handling service-related inquiries.
• Waitlist data: Consent (Art. 6.1.a) — voluntarily provided when requesting access.
• Technical data and cookies: Legitimate interest (Art. 6.1.f) — security and site operation.

Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Data Sharing

We do not sell your data. It is only shared with providers necessary for the service:

• Shopify Payments (Shopify International Ltd., Ireland): Secure payment processing. PCI-DSS compliant.
• Holded Technologies, S.L. (Spain): ERP software for invoicing. External tax advisor for accounting and tax filings.
• Vercel Inc. (USA/EU CDN): Website hosting. Resend (USA): Transactional email delivery. Under confidentiality agreements.
• GitLab B.V. (Netherlands): Framework repository delivery and hosting (Framework product purchasers only).

5. Security

We apply technical security measures (HTTPS, encryption) to protect your information. We do not store complete credit card data — they are managed entirely by the payment gateway.

6. Data Retention

Your personal data is retained for the duration of the contractual relationship. Billing data is retained for 7 years due to legal tax obligations (Spanish tax requirement).

7. Your Rights (GDPR)

Under GDPR, you have the right to: access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20), and objection (Art. 21). If processing is based on your consent, you may withdraw it at any time (Art. 7.3).

To exercise these rights, contact us via the details in our Legal Notice. We will respond within one month (Art. 12.3 GDPR).

You also have the right to file a complaint with the AEPD (Spanish Data Protection Agency) at www.aepd.es.

8. Public Source Data (DigIN)

The DigIN platform indexes publicly available artist information from the internet. If you are an artist and wish to claim or remove your indexed profile, please contact us via the Legal Notice.