1. Who is responsible
The controller of your data is [Nombre y NIF del titular] ("AUTONOMA"), reachable at hello@web.byautonoma.com. This policy explains what data we collect on byautonoma.com, demos.byautonoma.com and api.byautonoma.com, why, and what rights you have.
2. What data we collect and why
Email and name (optional) when you sign up to request a sample site, join the newsletter, a waitlist or a notification. We use them to give you access to your sample site, send you the welcome email and, if you agreed, write to you about AUTONOMA. Legal basis: your consent, which you can withdraw from any email.
Account and usage data when you have a plan: plan, sample sites requested, sold sites hosted, messages generated and who replied. We use them to provide the service and bill you. Legal basis: performance of the contract.
Billing data (name or company name, tax ID, address) when you pay. We use them to issue invoices and meet tax obligations. Legal basis: legal obligation.
Technical data: IP address, browser and timestamp of each request to the server. We use them to limit the number of searches and signups per hour, detect abuse and fix errors. Legal basis: our legitimate interest in keeping the service available. Kept for at most 90 days.
The source of your visit (the address you came from, including an affiliate's link if there was one), to attribute affiliate commissions. Legal basis: our legitimate interest in paying affiliates correctly.
3. Business data shown on sample sites
To build a sample site we use the public information on the business's Google listing: name, address, phone, hours, photos, rating and reviews, exactly as anyone sees them on Google Maps. Reviews may include the public name of whoever wrote them. Legal basis: the legitimate interest of the business and of AUTONOMA in showing what its site would look like, using data the business itself has published. Sample sites are temporary. If you own a business or wrote a review and want that information removed, write to us and we'll remove it.
4. Who we share data with
We don't sell data. We use providers who process it on our behalf under contract: hosting and content delivery (Cloudflare and the server AUTONOMA runs on, in the European Union), transactional email delivery, the payment processor that charges the plans (which handles your payment details directly; we never see your card), and Google, from which we request public business data. Some of these providers are in the United States and process data under standard contractual clauses or the EU-U.S. Data Privacy Framework. The site's fonts are loaded from Google Fonts, which receives your IP address when they are downloaded.
5. How long we keep data
Email and name: as long as you want our emails or have an account; if you unsubscribe, we delete them within 30 days unless the law requires us to keep them. Account and usage data: while you have a plan and 12 months after, in case of a claim. Invoices: as long as tax law requires. Technical data: 90 days. Sample sites: temporary; removed when no longer useful or at the business's request.
6. Your rights
You can ask us to access, correct, delete, restrict or object to the processing of your data, and to port it, by writing to hello@web.byautonoma.com from the email you registered. We reply within one month at most. If you believe we're getting it wrong, you can complain to the Spanish Data Protection Agency (aepd.es) or your local authority.
7. Security
All traffic is encrypted (HTTPS). Access to your account uses a key held only by your browser, which you can regenerate. We limit requests per hour to prevent abuse. In the public search we never show anyone's email or phone number.
8. Minors
AUTONOMA is a service for people 18 and over. If we detect a minor's data, we delete it.
9. Changes
If we change this policy, we publish the new version here with its date and, if the change is significant, we email you.
Other documents