Legal

Privacy Policy & Cookies

Your privacy matters to us. This policy explains how SpeakSite, operated by Vertice Labs, S.L., collects, uses, and protects your personal data in compliance with the GDPR and Spanish LOPD-GDD.

Last updated: February 2026

Data Controller

Who We Are

The entity responsible for processing your personal data is:

Vertice Labs, S.L.

  • Tax ID (CIF): B25958091
  • Address: León, Spain
  • Phone: +34 643 415 221
  • Email: support@speaksite.app
  • Website: speaksite.app

Data Collection

What Data We Collect

We collect and process different types of personal data depending on how you interact with SpeakSite. Below is a detailed overview of the categories of data we may collect.

Account Information

  • Name and surname
  • Email address
  • Password (encrypted)
  • Profile preferences

Billing Data

  • Billing name and address
  • Tax identification number
  • Payment method (via Stripe)
  • Transaction history

Usage & Technical Data

  • IP address and browser type
  • Pages visited and session duration
  • Device and operating system
  • AI query logs and interactions

Legal Basis

Why & How We Use Your Data

We process your personal data based on the following legal grounds under GDPR Article 6:

  • Contract performance: To provide our AI website builder service, manage your account, and process payments.
  • Consent: For marketing communications, non-essential cookies, and analytics tracking.
  • Legitimate interest: To improve our service, prevent fraud, and ensure platform security.
  • Legal obligation: To comply with tax, accounting, and regulatory requirements under Spanish and EU law.

Your Rights

Your Data Protection Rights

Under the GDPR and Spanish LOPD-GDD, you have the following rights regarding your personal data. You can exercise any of these rights by contacting us at support@speaksite.app.

Right of Access

Request a copy of all personal data we hold about you, including how it is processed and with whom it is shared.

Right to Rectification

Request correction of inaccurate personal data or completion of incomplete data we hold about you.

Right to Erasure

Request deletion of your personal data when it is no longer necessary for the purposes for which it was collected.

Right to Restriction

Request that we limit the processing of your personal data under certain circumstances, such as when accuracy is contested.

Right to Data Portability

Receive your personal data in a structured, machine-readable format and transfer it to another controller without hindrance.

Right to Object

Object to processing based on legitimate interests or for direct marketing purposes at any time, free of charge.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es if you believe your rights have not been adequately addressed.

Data Management

Data Retention & Third Parties

How Long We Keep Your Data

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

  • Account data: Duration of your account plus 30 days after deletion request
  • Billing records: 5 years as required by Spanish tax law (Ley General Tributaria)
  • Usage logs: 12 months for analytics and improvement purposes
  • Cookie data: Varies by cookie type (see Cookie Policy below)

Third-Party Service Providers

We share data with trusted third parties who help us operate our service. All processors comply with GDPR:

Stripe

Payment processing. Card data is handled exclusively by Stripe and never stored on our servers.

Google Analytics / GTM

Website analytics and tag management. Only activated with your consent via our cookie banner.

OpenAI / Anthropic

AI processing for website generation and editing features. Queries are processed without retaining personal data.

Cloud Infrastructure

Hosting and infrastructure services located within the European Economic Area (EEA) to ensure GDPR compliance.

Security

Data Security & International Transfers

Security Measures

We implement robust technical and organizational measures to protect your personal data:

  • SSL/TLS encryption for all data in transit
  • Encrypted password storage using industry-standard hashing
  • Regular security audits and vulnerability assessments
  • Access control with role-based permissions
  • Regular data backups with encryption at rest

International Transfers

Some of our third-party service providers (such as AI processing and payment services) may process data outside the EEA. In these cases, we ensure adequate protection through EU Standard Contractual Clauses (SCCs) or equivalent safeguards approved by the European Commission.

Updates

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:

  • Update the "Last updated" date at the top of this page
  • Notify you via email or in-app notification for significant changes
  • Request renewed consent where required by law

We encourage you to review this page periodically to stay informed about how we protect your data.

Contact Us

Questions About Your Privacy?

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, don't hesitate to reach out.

Email support@speaksite.app Terms of Service

Vertice Labs, S.L. · CIF: B25958091 · León, Spain · +34 643 415 221