Privacy

Data controller and contact

Javier Santos Romero · 27323997C
Calle Sierra de Aracena 10, 21200 Aracena, Huelva, España
contacto@useyard.dev

This policy covers the website, account, purchases, support and license API. Optional AI and cloud integrations have their own providers and policies; review the documentation before connecting them. Project contents are not requested by this website for license management.

Data, purposes and legal basis

• Account: email, account name, verified sign-in, session and authentication records. We use these to create and manage your account and provide requested sign-in links, on the basis of contract performance or steps you request before a contract (GDPR Article 6(1)(b)).
• Purchases: order, amount, billing and tax details, payment and invoice references, accepted contract version and delivery consent. Contract performance covers purchase and licensing; legal obligations cover invoicing, tax and accounting records (Articles 6(1)(b) and 6(1)(c)). Stripe receives payment details directly; we do not store card numbers.
• Licenses: encrypted license keys and activation tokens, a SHA-256 hash of the installation identifier, device display name, activation status and connection times. These enforce the purchased seat and device limits and let you manage your activations (Article 6(1)(b)). We do not request your Mac serial number.
• Support and withdrawal: contact details, order reference, postal address when provided, messages, receipt time and correspondence. We use these to handle your request, meet consumer obligations and, where necessary, establish or defend legal claims (Articles 6(1)(b), 6(1)(c) and 6(1)(f)).
• Security: IP address, browser user agent, session metadata, server access records and request limits may be processed to prevent fraud, unauthorized access and abuse. This is our legitimate interest in protecting customers and the service (Article 6(1)(f)); you may object based on your circumstances.

Providing account and billing data is necessary to sign in, buy and issue an invoice. Without the necessary data we cannot provide those functions. We do not use this data for advertising or newsletters, sell personal data, or make automated decisions producing legal or similarly significant effects. License limits and payment verification are technical contract checks; contact support to ask for human review of a problem.

Recipients, processors and international transfers

• Website and data hosting: Laravel Cloud · European Union.
• Transactional email: Amazon Web Services (AWS) · European Union.
• Payments and invoicing: Stripe, including Stripe Payments Europe, Ltd. for the relevant European payment services. Stripe may act as an independent controller for its regulatory, fraud prevention and payment purposes. Its privacy notice explains its entities, recipients and safeguards. Stripe Privacy.
• Public authorities, tax authorities, professional advisers and courts may receive information where legally required or necessary to comply with obligations or defend claims.

Hosting and email are planned in the European Union. The precise AWS services, regions, processing agreements and any access or transfers outside the EEA, including Stripe transfers, must be verified before sales open. EU hosting alone does not rule out international transfers. Applicable adequacy decisions or standard contractual clauses and supplementary measures must be identified where needed. You can request information or a copy of the applicable safeguards from the controller.

AWS Privacy · AWS Data protection

Retention

Account and activation data is needed while your account or perpetual license is in use. We retain contract, billing and claim evidence for applicable statutory periods after the relevant relationship or obligation ends, restricting use where required. Spanish commercial accounting records generally require six years; specific tax and OSS records may require longer periods. Erasure does not require destruction of records that must legally be retained.

Operational deletion periods for inactive accounts, support, withdrawal notices, security logs and backups will be confirmed before sales open. Request the applicable period or deletion through the privacy contact.

Sign-in links expire after fifteen minutes; their stored token hashes are removed on use and expired records are scheduled for deletion. Essential browser cookies follow the durations listed in the cookie policy.

Your rights

Contact the controller to request access, rectification, erasure, restriction, portability or to object where applicable. You may withdraw any optional consent at any time without affecting prior lawful processing. We normally respond within one month of receipt; complex or numerous requests may require an extension of up to two additional months, explaining the reason within the first month. We may request proportionate proof of identity only when necessary. You may complain to the Spanish Data Protection Agency or your competent supervisory authority. AEPD.

Cookies and changes

The website uses essential session and form-protection cookies. It loads no advertising or analytics trackers. Stripe is opened only when you continue to payment or billing. The cookie policy identifies the website cookies and explains the external checkout. Material policy changes will be published with an updated version and communicated when required.