Skip to content
Easy and Fast Web

Unvalidated template: not yet a legal text in force

This document is a draft. The details marked as [PENDING: …] belong to the owner or depend on decisions that have not yet been taken. Before opening the service to the public they must be completed and the text reviewed by a professional. As it stands, it does not guarantee compliance with any regulation.

This is a translation. The Spanish version is the binding one: in case of discrepancy, the Spanish version prevails.

Privacy policy

1. Data controller

  • Controller: Canteen Vending, SL
  • Tax ID: B22653182
  • Registered address: Avda. Blasco Ibáñez, 89 bajo, 46920 Mislata (Valencia)
  • Privacy contact: info@easyandfastweb.com
  • Data protection officer: [PENDING: state whether there is one and their contact details]

2. Which data is processed

  • Account: sign-in email, password (only its cryptographic hash is stored, never in plain text), chosen language and session data.
  • Business questionnaire: what the customer writes about their business, including the commercial contact details they decide to provide. The sign-in email and the commercial email on the website are different data.
  • Logo and photos you upload: if you upload your logo or photos (up to 5) in the questionnaire, they are stored in a private folder on the server, re-encoded and WITHOUT their metadata (GPS location, camera model and the date of the photo are removed), and are only used for your business website. By uploading them you confirm that you have the right to use them and, if people appear in them, their permission; the date and who confirmed it are recorded. To fit them into the website they may be sent to Recraft (to enlarge them, extend their edges or replace a product's background), without any other data of yours. They are deleted 30 days after their last use if they are not in any draft or in a paid or published website (while that website exists they are kept so it can be modified), after 90 days if the draft they are in is left untouched, and immediately if you delete your account.
  • Generated versions: the answers, the generated content and their dates.
  • Orders and payments: amounts, statuses and identifiers from the payment provider (Stripe). Card details are processed by Stripe, not by this site.
  • Support: tickets, messages and attached files.
  • Technical and security logs: events needed to explain balances, purchases and status changes, and to limit abuse.
  • Visit statistics: visits to the public pages are counted on the server in aggregate (how many per day, language, page and source: the search engine or social network the visitor came from, or the campaign in the link), without cookies, without storing the IP address and without any visitor identifier. When an account is created, that same aggregated source and the section of the site through which the visitor arrived are stored with it; never the full address of the referring page.
  • Sign-ups by a sales representative: if an Easy and Fast Web sales representative signs you up, they enter on your behalf your email address, your phone number if you give it to them, your business details and those of the website owner, using the information you provide to them. We record which representative made the sign-up and each sale. If you choose the sales representative who is helping you when you sign up, we share your email address and the date of your sign-up with them so they can confirm it; if they do, they manage your account just as if they had signed you up.

3. Purposes and legal basis

[PENDING: purposes and legal bases of each processing activity, reviewed by a professional]

4. Processors and providers

To provide the service, the following providers are used. They process data on behalf of the controller and only for the purposes stated:

  • Server: Hostinger. The application, the database and the customers' published websites are on a server rented from Hostinger.
  • Email: Hostinger. Account, purchase and notice emails are sent from a mailbox hosted on its email service.
  • Attachments: ticket attachments are stored on that same server, in a private folder; no separate storage provider is used.
  • Payments: Stripe. The checkout screen is theirs: the payment method details and the tax details (country and VAT number) used to calculate the tax are processed there. This site receives from Stripe the payment result, the amounts and their identifiers.
  • AI generation: the text of the website proposals and of the blog posts is written by an Anthropic model accessed through Vercel AI Gateway; the images are generated by Recraft; and an evaluation model (Jev, by typesafe-ai, also through Vercel AI Gateway) checks the quality of each proposal. For this they are sent the answers to the business questionnaire and the content generated from them. If you upload a logo or photos, they are sent to Recraft only when they need adapting (the image, without your name or any other data).

[PENDING: country of each provider and, if any, international data transfers and their safeguards]

5. Retention

Previews stop showing when they expire, but the physical deletion of their data is configured separately. [PENDING: retention periods for each category of data]

6. Shared previews

Each preview has a link that anyone who has it can open, without signing in. Search engines are asked not to index it, but that does not make it private: do not include in the questionnaire any data you do not want to show.

7. Your rights

You can request access, rectification, erasure, objection, restriction of processing and portability of your data by writing to info@easyandfastweb.com, and lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Last revision: [PENDING: date of the professional review]