Trust, Privacy & Security
Last updated: 9 August 2026
Plain answers to the questions people ask before trusting a service with their business: who we are, where data lives, what our AI sees, and how to leave with everything deleted.
The legal entity behind Laspi Pro
Laspi Pro is built and operated by GradeBuilder S.L., a Spanish limited company, CIF B75608927, registered at C. Coronel Ivorra Ruiz 7, 1, 30720 San Javier, Murcia, Spain. For anything in this document, write to org@laspi.pro — a founder reads it.
How your voice notes are processed
You record a voice note; it travels over HTTPS and is transcribed by our AI processor. The words become your content and your business memory. Once a note has been structured, the original audio file is deleted — only the transcript stays in your account, and you can delete it (or any single fact) at any time.
Where your data is stored — and how it is deleted
Your account and content live in a PostgreSQL database hosted on Railway; photos and generated images and videos live in Cloudflare R2 object storage, served through short-lived signed links. Deleting your account permanently removes your profile, projects, uploads and generated content and cancels any subscription — subject only to the limited legal and accounting retention Spanish and EU law requires.
The AI infrastructure we use
Generation runs on a small, named set of processors under data-processing agreements: fal.ai (voice transcription, image and video generation), xAI (image and video models), ElevenLabs (voice-over) and large-language-model providers — currently Anthropic, OpenAI, DeepSeek and Moonshot AI — for text. Hosting is Railway, media storage is Cloudflare R2, payments are Stripe (we never see card numbers), transactional email is Brevo. Each provider receives only what its specific step needs, and we do not sell your data.
GDPR
Laspi Pro is operated from the EU and works under the GDPR. You can access, correct, delete, restrict or port your data, object to processing and withdraw consent at any time via org@laspi.pro. Where a provider processes data outside the EEA we rely on safeguards such as the EU Standard Contractual Clauses. You can always complain to your data-protection authority — in Spain, the AEPD (www.aepd.es).
Is your data used to train AI?
We do not train foundation models on your content, and your content never teaches other customers’ accounts. Your voice notes and kept posts train exactly one thing: your own writing profile and your own business memory. Cross-business learning uses only aggregated, anonymised patterns — never your texts, never your facts — and only from accounts that gave consent.
What “ENISA-certified” means
ENISA here is Empresa Nacional de Innovación S.M.E., S.A. — the Spanish state innovation company. Under Spain’s Startup Law (Ley 28/2022) it certifies companies as innovative startups after examining the technology and the team; GradeBuilder S.L. holds that certification. It is a statement that our engineering is our own, not a wrapper — and it is unrelated to the EU cybersecurity agency that shares the acronym.
Backups
The database is backed up automatically by our hosting provider on an encrypted, rolling schedule. Backups exist to survive failures, not to keep deleted data: when you delete something, it disappears from the live system immediately and from backups as they expire on that rolling schedule.
Who on our team can see your data
Laspi Pro is run by a small team. Production access is limited to the people who operate the service, is used only to run it and to help you when you ask us to look at something, and happens under confidentiality obligations. There is no broad staff access and no outsourced support with database access.
How to delete your account
In the app: Profile → Delete account. Without logging in: the step-by-step page at laspi.pro/delete works via a confirmation code sent to your email. Deletion removes your profile, projects, uploads and generated content and cancels any active subscription; a short legal-retention tail and expiring backups are the only exceptions.