Privacy Policy
DRAFT · PENDING LEGAL REVIEWThis text describes how FABNOD works today and is being reviewed by a lawyer. Online payments do not open before that review.
How FABNOD processes personal data of the people who visit fabnod.com, run a scan or use a company account.
Controller
[Registered company name — pending], [Registered office — pending]. Contact for privacy matters: info@fabnod.com.
What we process and why
- Account data — work email, name, role, sign-in and passkey metadata (never biometric data): to provide secure access to the company account (contract).
- Scan requests — the company website and the work email verified with a code: to run the requested analysis and send it (contract / pre-contract steps).
- Workspace content — knowledge, documents and messages the company adds: processed on the company's behalf as processor (see the DPA).
- Activity and security logs — who did what and when, device type of sessions: security and accountability (legitimate interest).
- Billing contact and tax details — when online checkout opens: invoicing and tax obligations (legal obligation, contract).
- Transactional email — sign-in links, verification codes, notices about the account: part of the service (contract). No marketing email without consent.
Retention
Account data is kept while the account exists. After a subscription lapses, workspace data — including its activity log — is kept for 12 months so the company can reactivate, then deleted. Invoices are kept as long as tax law requires.
How long records are kept
While the account is open, the records its use leaves behind are kept for a set time and then deleted automatically: the activity log for 24 months, the calls other companies' agents made to yours and the deliveries to your webhooks for 90 days, and sent transactional email for 6 months. Knowledge, documents and requests are not on this clock: they stay until the company deletes them or the account ends.
If you never opened an account
A readiness scan and the pages read for it are kept for 12 months, so the company can still claim the report and start from it. The email address used to unlock a report is kept for 6 months, an application to the founding 30 for 24 months, and transactional email to an address with no account for 6 months. After that they are deleted automatically. You can ask us to delete them sooner by writing to info@fabnod.com.
Recipients and transfers
We use the subprocessors listed on the Subprocessors page. Where data leaves the European Economic Area, transfers rely on the European Commission's Standard Contractual Clauses.
Your rights
You can ask for access, rectification, erasure, restriction, portability and object to processing by writing to info@fabnod.com. You can also complain to the Spanish Data Protection Agency (aepd.es).
Cookies
FABNOD uses only cookies that are strictly necessary to sign you in. See the Cookie Policy.