Skip to content
Get started
Menu
Language
enes

Privacy policy

Last updated: 16 October 2026

This policy explains what personal data we process when you use Placton or visit this website, why we use it, on what legal basis, who we share it with and what rights you have. We comply with the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”) and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights.

1. Data controller

  • Company: SELSPY AGENCY S. COOP.
  • Tax ID (NIF): F75988824
  • Registered address: Paseo la Fuente 9, 4.º A, 30007 Murcia (Spain)
  • Contact: contact@placton.tech

2. What data we process

  • Account data: first name, last name, email address and password (stored with irreversible encryption), or your Google account identifier if you sign in with Google.
  • Workspace data: brand name, website, competitors, prompts, language and country, members and invitations, and the tracking results.
  • Billing data: plan, subscription status, amounts and Stripe customer and subscription identifiers. Your card details are handled directly by Stripe: we never see or store them.
  • Messages: what you send us through the contact form or by email (name, email, topic and message).
  • Technical data: IP address, browser type and access logs needed for the security and operation of the service.

3. Why we use it and on what legal basis

  • To create and manage your account, provide the service and support you. Legal basis: performance of the contract.
  • To charge subscriptions and issue invoices. Legal basis: performance of the contract and compliance with tax and accounting obligations.
  • To send you emails about the service, such as access, invitations, trial reminders, payments, weekly insights and important changes. Legal basis: performance of the contract.
  • To reply to the messages you send us. Legal basis: your consent when you write to us.
  • To protect the service against abuse and fraud, and to improve it with aggregated data. Legal basis: legitimate interest.
  • To send you product news, only if you agree. Legal basis: consent, which you can withdraw at any time.

We do not make automated decisions with legal effects on you and we do not build profiles for advertising.

4. AI providers and prompts

To provide the service we send the prompts in your workspace to artificial intelligence providers: OpenAI (ChatGPT), Anthropic (Claude), Google, through DataForSEO (Google AI Overviews) or the Gemini API, Perplexity and xAI (Grok). We also use AI models to analyse the answers and to prepare each week's insights.

Prompts are questions about your industry, your products or your brand and never include personal data: we do not send your name, your email or any other account details. Please do not write personal data in them either.

5. Who we share data with

Only with the providers that help us run the service. They act as data processors and we have signed the agreements the GDPR requires with them:

  • Hosting of the application and database on servers located in the European Union.
  • Stripe, to process payments and manage subscriptions and invoices.
  • Resend, to send the service emails.
  • OpenAI, Anthropic, Google (through DataForSEO or the Gemini API), Perplexity and xAI, which process prompts as explained in the previous section. Some of these requests are routed through OpenRouter, which forwards them to the provider.
  • Brand logos: our servers download the public icon of each brand's website to show it in the app and on this site. Your browser does not contact any third party for this.

If you choose to sign in with Google, Google provides us with your name and email to identify you. We do not sell your data or share it with third parties for advertising. We will only disclose it to authorities when the law requires us to.

6. International transfers

Some of these providers are based in the United States or may access data from there. In those cases the transfer relies on the EU-US Data Privacy Framework, when the provider is certified, or on the standard contractual clauses approved by the European Commission.

7. How long we keep it

  • Account and workspace data: for as long as you have an account. When you delete it, we erase it within 30 days at most, except for backups, which are overwritten in their normal cycle.
  • Billing data: for as long as tax and commercial law requires, generally up to six years.
  • Contact messages: for as long as needed to help you and for two years at most.
  • Technical logs: up to twelve months.

8. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, by writing to contact@placton.tech from your account email. You can change or delete much of your data yourself from the dashboard.

If you think we have not handled your data properly, you can file a complaint with the Spanish Data Protection Agency (aepd.es).

9. Cookies

We only use technical cookies needed for the service to work, such as the one that keeps you signed in and the one that remembers your language. We do not use advertising or third-party tracking cookies. If we ever do, we will ask for your consent first.

10. Security

We apply reasonable technical and organisational measures to protect your data: encrypted connections (HTTPS), encrypted passwords, restricted access and backups. If a security breach affected your data, we would let you know and report it to the supervisory authority where required.

11. Minors

Placton is aimed at professionals and businesses and is not intended for anyone under 18.

12. Changes to this policy

If we make significant changes to this policy, we will let you know by email or in the dashboard before they apply.