Privacy policy
This policy explains what personal data we process when you use prufy.io, what we use it for and what rights you have over it. Last updated on August 31, 2026.
Who is responsible
The data controller is Kiyoshi Jose Omaza Saldaña, with tax ID 06017743T and address for notices at C. la Tesilla 6, 39012 Santander, Cantabria, operating under the Prufy brand. For any question about your data you can write to hello@prufy.io.
Contact form
When you write to us we process your name, work email, organization and, if you provide them, your role, reason for contacting us and brief context. We use them to review your request and arrange the right conversation about a transaction or Prufy's Technology Due Diligence service. The legal basis is the application of pre-contractual measures at your request.
Material downloads
When you download a guide or a document we process your name and your email to deliver the material, send it to your inbox as well and contact you afterwards about Prufy's service, as you accept in the form itself. The legal basis is your consent, which you can withdraw at any time.
Calculator and report
The questionnaire answers describe your company, not people. If you unlock the report we process your name and your email to prepare it and get in touch with you, and if you request a meeting your profile travels with the request so you do not have to repeat anything. The legal basis is your consent and the application of pre-contractual measures.
Newsletter
If you subscribe we process your email to send you new articles. The subscription uses double confirmation and every issue includes an unsubscribe link. The legal basis is your consent.
Usage measurement
We measure site usage in aggregate with Vercel Analytics, which uses no cookies and identifies no one. Google Analytics only runs if you accept it in the cookie notice. The details are in the cookie policy.
Who takes part in the processing
We rely on providers acting as data processors. Vercel hosts the site and its aggregate measurement, Formspree receives the forms, Resend sends transactional email and MailerLite manages the newsletter. Google Ireland provides analytics only if you accept it. We do not sell your data or share it with third parties for their own purposes.
International transfers
Some of these providers are established in the United States. Transfers rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.
How long we keep your data
We keep your data for as long as the relationship that justifies it lasts and, afterwards, for the time needed to meet legal responsibilities. If you opt out of a communication, we stop sending it and keep only the record of your decision.
Your rights
You can access your data, rectify it, erase it, object to the processing, restrict it, request its portability and withdraw your consent at any time by writing to hello@prufy.io. You can also lodge a complaint with the Spanish supervisory authority at aepd.es.
Security
We apply technical and organizational measures proportionate to the data we process, with access limited to those who need it and providers also chosen for their guarantees.
Changes to this policy
If this policy changes, we will publish the current version here with its update date. Relevant changes will be communicated visibly.