Privacy Policy
Last updated: 22 August 2026
This policy explains what personal data Laspi Pro ("we") collects, why, and your rights under the EU General Data Protection Regulation (GDPR).
Who we are (data controller)
The data controller is GradeBuilder S.L. (CIF B75608927), C. Coronel Ivorra Ruiz 7, 1, 30720 Santiago de la Ribera, Murcia, Spain. Contact: org@laspi.pro, +34 622 448 805.
What we collect
Account data (your name and email via Google sign-in), the content you provide (voice notes, text, documents), usage and device data, and payment data handled by our payment provider. We never collect your social-media passwords.
How we use it
To create your content, run and improve the service, process payments, send service messages and periodic reminders you can opt out of at any time, and meet legal obligations.
Legal bases
Performance of our contract with you, your consent (e.g. notifications and non-essential cookies), our legitimate interests in running and improving the service, and legal compliance.
Connected accounts
You can connect your LinkedIn account (as well as a Telegram channel or a WordPress site) so that Laspi Pro publishes on your behalf. Nothing is connected by default: connecting is always your explicit action. When you connect LinkedIn we receive your name, your member identifier, your email address and an access token; we never receive or ask for your LinkedIn password. We need this to show you which account is connected and to publish the posts you ask us to publish. The token is stored encrypted and is valid for 60 days, after which LinkedIn requires you to reconnect. «Disconnect» deletes the token from our side immediately; you can also remove Laspi Pro at any time in your LinkedIn settings under Data privacy → Permitted services.
What we send to a platform when you publish
By connecting an account you instruct us to publish on your behalf. With every publication we send that network only: the post text, the attached image or video, the publication time and the identifier of your account, channel or site. Nothing else, and nothing at all goes to a network you have not connected. From that moment the platform processes the data as an INDEPENDENT CONTROLLER under its own terms and policy: today LinkedIn Ireland Unlimited Company, Telegram FZ-LLC, Bluesky Social PBC and your own WordPress; when publishing to Meta (Facebook, Instagram) and Google Business Profile arrives, the same applies to Meta Platforms Ireland Limited and Google Ireland Limited, and this list is updated before the first post. Published content is public and leaves our control: disconnecting stops future publishing, and an already-published post is deleted on the platform itself. Legal basis: performance of our contract with you (Art. 6(1)(b) GDPR); connecting is optional and revoked with one button. We never pass your data to platforms for advertising, profiling or audience matching.
Sharing & processors
We share data only with processors that help us run the service, under data-processing agreements: Google (sign-in), Stripe (payments), Railway (hosting and database), Cloudflare R2 (media storage), fal.ai (voice transcription and image/video generation), our large-language-model providers (currently OpenAI, DeepSeek and Moonshot AI) for text generation, ElevenLabs (video voice-over), LanguageTool (grammar checking of finished texts), and — only with your consent — Google Analytics. We do not sell your data.
International transfers
Where data is processed outside the EEA, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.
Retention
We keep your data while your account is active and as needed for legal and accounting purposes, then delete or anonymise it.
Your rights
You can access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time — contact org@laspi.pro. You may also complain to your local data-protection authority.