1. Data controller
The controller of your personal data is [OWNER — to be completed with the legal name, tax ID and registered address of the owner] (hereinafter, “PiCode”). Data protection contact: privacy@getpicode.app.
2. Purposes of processing
- Managing registration and your user account, including authentication via email or federated providers (Google, GitHub).
- Sending transactional emails required for account security: email verification and password resets.
- Providing the PiCode editor settings synchronization service linked to your account.
- Managing subscriptions and payments for paid plans, including the corresponding invoicing.
- Handling data rights requests and support communications.
3. Legal basis
Processing is carried out under the following legal bases:
- Performance of a contract (art. 6.1.b GDPR): account management, service provision and synchronization.
- Compliance with legal obligations (art. 6.1.c GDPR): invoicing and retention of accounting records.
- Legitimate interest (art. 6.1.f GDPR): platform security and abuse prevention.
4. Data processed
- Identification and access data: email address, user identifier and password (stored only in encrypted form by the authentication provider).
- Service usage data: settings synchronized from the PiCode editor.
- Billing data: contracted plan, subscription status and billing period. Payment data is processed directly by Stripe; PiCode does not store card numbers.
5. Processors and data transfers
The following providers act as data processors or independent controllers:
- Google Cloud / Firebase — authentication, database and infrastructure. Google LLC participates in the EU-US Data Privacy Framework.
- Vercel, Inc. — hosting and deployment of the web application.
- Stripe, Inc. — payment processing for subscriptions.
6. Data retention
Account data is retained while your account is active. After account deletion, only the data necessary to comply with legal obligations (mainly accounting and tax) will be retained for the periods established by applicable law, and blocked in all other cases.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time by writing to privacy@getpicode.app. You also have the right to withdraw the consent you have given and to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Applicable law
This policy is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), and Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).