Legal
Privacy Policy
Last updated: August 13, 2026
1. Data controller
2. Data we collect
We collect the personal data needed to provide, secure, and improve Polp.
- Registration and resource data: name, work email, company name, account information, and requested editable resources.
- Usage data: queries, uploaded documents, connected sources, and interactions with the platform.
- Technical data: IP address, browser type, device information, and technical logs.
3. Purposes of processing
- Provide AI search, retrieval, and source-backed answers.
- Manage accounts, organizations, users, permissions, and service communications.
- Deliver requested editable resources, maintain a temporary recovery link, and record the download.
- Send resources and product news only when the separate optional consent box is selected.
- Improve the product, diagnose issues, and maintain platform security.
- Comply with applicable legal obligations.
4. Legal basis
- Contract performance or requested steps: to provide the service and deliver the requested resource.
- Consent: for optional marketing communications and non-essential cookies. It may be withdrawn without losing resource access.
- Legitimate interest: to improve the service, prevent fraud, and protect the platform.
- Legal obligation: to comply with applicable requirements.
5. Recipients and transfers
We may share data with providers that help us operate the service, including hosting, infrastructure, payment processing, analytics, and AI service providers.
When providers process data outside the European Economic Area, we rely on GDPR safeguards such as standard contractual clauses and applicable adequacy frameworks.
6. Retention
- Account data: while the account is active and for applicable legal retention periods.
- Documents: until they are deleted, the source is disconnected, or the account is cancelled.
- Billing data: for the period required by tax and accounting obligations.
- Resource requests: for necessary commercial follow-up or until you request deletion; download links expire after 7 days.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, portability, and restriction by contacting info@polp.net.
You may also lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.
8. Changes
We may update this policy. Material changes will be communicated through the platform or by email when appropriate.