Privacy Policy

Who we are

The data controller for Laspi ('Laspi', 'we', 'us') is GradeBuilder S.L. (CIF B75608927), San Javier, Murcia, Spain — org@laspi.pro, +34 622 448 805. This policy covers the Laspi website, the Laspi web app and the Laspi Android app.

Data we collect

We collect only what we need to create your content and run the service:

• Account & identity — your name, email address and profile picture, received from Google when you sign in with Google, plus your chosen interface and content languages.
• Your business profile — the business name, description, industry, audience, tone and links you enter during onboarding.
• Content you provide — photos and images you upload, voice recordings you dictate, and any text notes you write.
• Content we generate for you — the captions, images and short videos Laspi produces from your materials.
• Device & notifications — your device push token (so we can tell you when content is ready), app version, device model and operating system, and basic diagnostic logs.
• Usage data — actions you take in the app and generation records (which AI model was used, length, and cost) needed to operate and bill the service.
• Payment data — your plan, subscription status and a customer/subscription identifier from our payment provider, Stripe. Card details are entered on and handled by Stripe; we never see or store full card numbers.

Connected accounts (LinkedIn, Telegram, WordPress)

You can connect an account so that Laspi publishes on your behalf. Nothing is connected by default, and connecting is always your explicit action.

• What we receive when you connect LinkedIn — your name, your LinkedIn member identifier, your email address, and an access token. We never receive or ask for your LinkedIn password.
• Why — to show you which account is connected and to publish the posts you ask us to publish, from your profile.
• How long — the access token is stored encrypted and is valid for 60 days, after which LinkedIn requires you to reconnect. We delete the token immediately when you press «Disconnect».
• How to revoke — press «Disconnect» in Laspi, and additionally, at any time, remove Laspi in your LinkedIn settings under Data privacy → Permitted services.

What we do NOT do

We never collect your social-media account passwords. We do not sell your personal data, and we do not use it for cross-context behavioural advertising.

Device permissions

The Android app asks for these permissions, and uses them only for the stated purpose. You can decline or revoke any of them in your system settings:

• Microphone — only while you actively record a voice note to describe what's new this week.
• Photos / media — only to let you pick the photos you want to upload for your content.
• Notifications — to let you know when your weekly content is ready and to send the reminders you opt into.

How we use your data

• To create your weekly content plan, captions, images and videos.
• To provide, secure, maintain and improve the service.
• To process payments and manage your subscription.
• To send service messages and the reminders/notifications you opt into.
• To provide support and to comply with our legal and accounting obligations.

Legal bases (GDPR)

We rely on: performance of our contract with you; your consent (e.g. notifications and non-essential cookies); our legitimate interests in running, securing and improving the service; and compliance with legal obligations.

How we share data

We share data only with service providers (sub-processors) that process it on our behalf under data-processing agreements:

• Hosting & database — Railway.
• File storage & delivery — Cloudflare R2.
• Sign-in & push — Google (Google Sign-In; Firebase Cloud Messaging for Android notifications).
• Payments — Stripe.
• AI processing (to transcribe your voice and generate text, images, video and voice-over) — fal.ai, xAI, ElevenLabs and large-language-model providers including Anthropic, Moonshot AI and DeepSeek.
• Website analytics — Google Analytics, loaded only if you accept analytics cookies.

International transfers

Some of these providers process data outside the European Economic Area (for example, in the United States). Where they do, we rely on appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep it

We keep your data while your account is active and for as long as needed for legal, tax and accounting purposes, after which we delete or anonymise it. Backups expire on a rolling schedule.

How to delete your data

You can delete your account and its data at any time:

• In the Android app: Profile → Delete account.
• On the web: Profile → Delete account.
• Or email us at org@laspi.pro and we'll do it for you.

Deletion — what happens

Deleting your account permanently removes your profile, your business projects, the photos and voice notes you uploaded, and the content we generated for you, and cancels any active subscription — subject only to limited legal/accounting retention and backups that expire on a rolling basis.

Security

We protect your data with encryption in transit (HTTPS), access controls, and time-limited signed URLs for media. No method of transmission or storage is 100% secure, but we work to protect your information and to notify you of incidents where required by law.

Children

Laspi is a business tool and is not directed to children under 16. We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we will delete it.

Your rights

You can access, correct, delete, restrict or port your data, object to processing, and withdraw consent at any time — just contact org@laspi.pro. You also have the right to complain to your local data-protection authority (in Spain, the AEPD, www.aepd.es).

Changes to this policy

We may update this policy from time to time. We'll change the 'Last updated' date above and, for material changes, let you know in the app or by email.

Contact

Questions about your privacy? Write to us at org@laspi.pro. GradeBuilder S.L. (CIF B75608927), San Javier, Murcia, Spain — org@laspi.pro, +34 622 448 805.