Privacy policy

1. Data controller

Owner: Irene Villavicencio, trading as Neo Lance.

Tax ID (NIF): [PENDING]

Address: [PENDING], Madrid, Spain.

Contact email: info@neolance.es

2. Data we process

• Account data: name, email address and encrypted password. If you sign in with Google, we receive your public name, email and profile picture from your Google account (openid, email and profile permissions). We do not access your mailbox, contacts or any other Google data.

• Purchase and subscription data: products bought, amounts, dates, Neo+ status and payment-provider customer identifiers. We never store full card details; Stripe handles them directly.

• Content you enter in Neo AI: questionnaire answers and the documents generated and saved in your dashboard.

• Service usage: downloads, favourites, reviews and technical logs (IP address, browser, pages visited) needed for security and operation.

• Contact messages: name, email and the content of your message.

3. Purposes and legal basis

• Creating and managing your account and dashboard access: performance of a contract (art. 6.1.b GDPR).

• Processing payments, delivering resources, managing Neo+ and issuing invoices: contract and legal obligation (art. 6.1.b and 6.1.c).

• Generating documents with Neo AI at your request: performance of a contract.

• Answering contact messages: consent and pre-contractual steps (art. 6.1.a and 6.1.b).

• Sending transactional emails (confirmations, account notices): performance of a contract.

• Sending news or newsletters, only if you expressly opt in: consent, which you can withdraw at any time.

• Security, fraud prevention and service improvement through aggregated statistics: legitimate interest (art. 6.1.f).

4. Processors acting on our behalf

• Lovable / Supabase: website hosting, database, authentication and file storage.

• Stripe Payments Europe: payment and subscription processing.

• Google: Google sign-in, if you choose to use it.

• An email delivery provider for transactional messages.

• Artificial intelligence model providers (through Lovable's AI gateway) to generate Neo AI documents. Content is used only to generate your response.

Some providers may process data outside the European Economic Area. Such transfers rely on adequacy decisions (such as the EU-US Data Privacy Framework) or European Commission standard contractual clauses.

5. Retention

• Account data and Neo AI documents: while your account is active. If you delete it, they are erased except where the law requires us to keep them.

• Billing data: for the period required by tax and commercial law (up to 6 years).

• Contact messages: as long as needed to answer, and at most 12 months.

• Technical logs: up to 12 months.

6. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability, and withdraw consent, by writing to info@neolance.es. We will reply within one month. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Security

We apply appropriate technical and organisational measures: encrypted connections (HTTPS), hashed passwords, per-user access control for data and files, and private, time-limited download links.

8. Minors

The service is intended for professionals aged 18 or over. We do not knowingly collect data from minors.

9. Cookies

We use technical cookies required to keep your session and cart. See the cookie policy for details.

10. Changes

We may update this policy to reflect legal or service changes. The current version will always be published here with its update date, and we will notify you by email of significant changes.