Privacy Policy
Last updated: September 22, 2026
1. Data controller
Javier Abad, sole trader (autónomo), tax ID 545563340r, registered address at c/ Uria nº8 2ºa, 33202, Oviedo, Spain. Contact for privacy matters: contact@weeklyfeedback.com. There is no designated Data Protection Officer; requests are handled directly by the data controller.
2. What data we process
From whoever creates the account: email and password (managed by Supabase Auth). About the team: team name, company context, and for each member: name and contact (email, phone, or Telegram chat_id). About weekly replies: the text (or transcription, if sent as a voice note) of what each person answers. About billing: payment details are processed directly by Stripe — this service never stores card numbers.
3. Purpose
To provide the contracted service: generate the weekly report, deliver it to the team lead, and manage the account and subscription.
4. Legal basis
Performance of the service contract (GDPR art. 6.1.b). For team members' replies, whoever creates the account is responsible for having a legitimate basis to process that data with respect to their own team.
5. Who we share data with
The following providers process data as processors, each only with the data they need for their function: Supabase (database, authentication and file storage, servers in the European Union), Stripe (payment processing), Resend (transactional email delivery), Telegram (messaging channel for those who choose it), and Groq (AI report generation from reply text — US-based provider; the transfer relies on the European Commission's standard contractual clauses). We do not sell or share data with third parties for advertising purposes.
6. Retention
Data is kept while the account is active, plus the additional period required by tax or commercial regulations after cancellation. You can request earlier deletion by writing to the privacy contact.
7. Your rights
Anyone can exercise their rights of access, rectification, erasure, objection, restriction and portability by writing to contact@weeklyfeedback.com. You may also file a complaint with the Spanish Data Protection Agency (aepd.es) if you believe your rights haven't been addressed.
8. Minors
The service is aimed at businesses and is not intended for minors.
9. Changes to this policy
This policy may be updated to reflect changes to the service or applicable regulations; the last-updated date appears at the top of the document.