Privacy Policy
Last updated: June 12, 2026
This translation is provided for convenience. In case of discrepancy, the Spanish version prevails.
1. Data controller
Vuelvo is currently in a commercial validation (pilot) phase. The full identification of the site owner (name, tax ID and registered address) will be published in this notice as soon as the business activity is formally registered, pursuant to art. 10 of the Spanish LSSI-CE. Contact: hola@vuelvo.io.
This policy covers the data Vuelvo processes as controller: site visitors and the businesses using the platform (their user accounts). The end customers of each business (members of its loyalty programs) are processed by Vuelvo as processor on behalf of the business; that information is provided by each business in its own privacy policy, available when joining its program.
2. What data we process and why
| Group | Data | Purpose and legal basis |
|---|---|---|
| Site visitors | Technical connection data (IP, user agent) in server logs | Site security and operation (legitimate interest, art. 6.1.f GDPR) |
| Businesses using the platform | Name, email, password (hashed), business data, panel usage | Provision of the contracted service (contract, art. 6.1.b) |
| Business contacts | Contact details you provide | Handling your request (pre-contractual measures, art. 6.1.b) |
This site does not use third-party analytics or advertising tools.
3. Recipients and processors
We do not sell data. To provide the service we rely on infrastructure providers with data hosted in the European Union: Fly.io (application hosting, Paris region), Neon (database, EU region) and Upstash (cache, EU region). Any international transfer is covered by GDPR safeguards (standard contractual clauses or adequacy decisions).
4. Retention
Account data is kept for the duration of the contractual relationship and, afterwards, blocked for the applicable statutory limitation periods. Technical logs are kept for short, security-oriented periods.
5. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent, by writing to hola@vuelvo.io. If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Changes
The current version of this policy, with its update date, is published on this page.