Privacy Policy
Last update: May 3, 2023
PART I: Privacy Information
The Subject of the Privacy Policy
This document is the fulfillment of our obligations under the provisions on the protection of personal data, in particular the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.
From this document, you will learn how and on what terms we process your personal data when you contact us or use our Services.
Additional information of the processing of your personal data when you decide to purchase our license will be provided during the process of purchase. This information can be also found here.
Data Controller
The Controller of your personal data is us, CRAVY APP S.L, address: Carrer dels Almogavers, 165, Barcelona, Spain, VAT ESB67435305.
In all matters regarding our services, but also the processing of your personal data you can contact us at magicbeans@reboot.studio.
Where do we obtain your personal data from?
The personal information we collect through our site comes directly from you. This happens when:
- You are browsing our website.
- You send us questions, a request for an offer.
- You purchase a license.
- You create an account on our website.
- You use our Application.
What personal data are processed by us?
When you visit our Website we may process basic data about your activity on our Website, such as IP address. When you decide to contact us we may process the personal data that is provided by you, such as name, surname, telephone number, e-mail address.
If we decide to enable users to create personal accounts on our Website we will process your personal data necessary to register your account, such as name, surname, contact details.
When you use our Application we may collect basic user data about how you use our Application provided that you have agreed to provide us this data.
Do you store financial data from Notion?
When you connect your Notion account to our services, we obtain access to certain information from Notion, such as your name, email address, and other account-related data. We use this information solely to provide our services to you and to improve our offerings.
We do not store any financial information or other information contained in your Notion databases when connecting your Notion account. Our services only use the Notion API for reading purposes.
For what purpose do we process your data?
We process your personal data to provide electronic services related to providing you with content on our Website, registering your account on our Website, enabling you to purchase a license, as well as for analytical and statistical purposes.
We process your data in order to answer your inquiry or present you an offer of our Services.
We may also process your data in the scope necessary to establish, pursue or defend claims.
We collect basic usage data in order to monitor and improve the product- provided that you agreed to provide us with such data. The data helps us to decide which parts of the application are best developed and which are not, what should be our pricing or subscription plans, or in order to inform users or other persons on our Application's development. Please note that if we provide such an information it is always provided in aggregate and in an anonymized manner. We never share the data of an identifiable user.
We also process your data in case of an error in our Application in order to develop our product and avoid such errors in the future. In such a case we collect your log data such as your device Internet Protocol (“IP”) address, device name, operating system version, the configuration of the app when using our Service, the time and date of your use of the Service, and other statistics.
On what legal basis do we process your data?
The legal basis for the processing of your personal data is:
- in case of providing electronic Services on our Website - the legal basis for processing is the necessity of processing to perform the contract (Article 6(1)(b) of the GDPR);
- in case of answering your inquiry- the legal basis for processing is our legitimate interest consisting in informing about our activity (Article 6(1)(f) of the GDPR) or in order to take steps at your request prior to entering into a contract (Article 6(1)(b) of the GDPR);
- for analytical, statistical or marketing purposes -the legal basis for processing is our legitimate interest consisting in developing our services and informing about our activity (Article 6(1)(f) of the GDPR);
- in order to possibly establish and pursue claims or defend against them and to ensure the security of your data - the legal basis for processing is our legitimate interest (Article 6(1)(f) of the GDPR) consisting in the protection of our rights.
- for the purpose of developing our product if you decide to consent to collection of usage data - the legal basis for processing is your consent (Article 6(1)(a) of the GDPR).
How long do we process your data?
We will process your personal data for as long as it is necessary to achieve the purposes described in this Policy, in particular to fulfill our contractual and statutory obligations, and in the event when the basis of processing is your consent- until you withdraw your consent to the processing of your data, which will not affect the legality of the earlier processing.
Who is the recipient of your personal data?
The recipient of your personal data, i.e. an external entity that will be entitled to participate in the processing of your data, will be our trusted subcontractors - IT service providers of data hosting and business mail services and companies whose statistical, analytical and marketing tools we use.
Lemon Squeezy
In order to enable payments for our licenses we use services of leemonsqueezy.com which is rendered by Lemons Squeezy, LLC, a Utah limited liability company, 222 Main Street Suite 500, Salt Lake City, UT 84101. Please note that for the process of payment you are redirected to the external website of lemonsqueezy.com, on which the external privacy policy of this entity applies. Please however note that Lemons Squeezy, LLC is located in the United States, outside the European Economic Area.
Vercel
We also use vercel.com for the purpose of the website traffic monitoring. This is the tool delivered by Vercel Inc., 340 South Lemon Avenue, Suite 4133, Walnut, CA 91789, United States. Please note that Vercel is located in the United States, which means that your data may be processed on the server located in the United States- outside European Economic Area.
The nature of providing the data
Providing your data is voluntary, although some of the categories of data may be marked as mandatory. Failure to provide mandatory data may result in inability to properly use our Services. Your personal data is provided by you or it is collected via cookies or other similar technologies when you connect to our website (e.g. IP number).
Other relevant information
As indicated above, your data may be processed outside the European Economic Area - some of our subcontractors may process your data on their servers in the United States. In these cases, these subcontractors may process your personal data outside the European Economic Area, but this is done on the basis of the so-called standard contractual clauses, provisions of the contract concluded between us and our partners, which guarantee an adequate degree of secure processing of your personal data or on the basis of other relevant tools which ensure the proper level of data protection.
Security
We value your trust in providing us your Personal Information, thus we are striving to use commercially acceptable means of protecting it. But remember that no method of transmission over the internet, or method of electronic storage is 100% secure and reliable, and we cannot guarantee its absolute security.
Children's Privacy
Our Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us so that we will be able to do necessary actions.
What rights do you have in connection with the processing of personal data?
Below we present your rights related to the protection of personal data and the fact of processing your data. The rights granted to you in a specific situation depend on the purpose and on what basis we process your personal data.
Right of access to data
You have the right to obtain information regarding the personal data we hold about you. By submitting a request for access to your data, you will receive information about the processing of personal data, including in particular about the purposes and legal grounds for processing, the scope of data held, entities to which personal data is disclosed and the planned date of its removal.
Right to rectification
You have the right to immediately rectify and/or complete the personal data stored about you. It is our responsibility to ensure that our mutual communication is based on true, complete and up-to-date data.
Right to restriction of processing
You have the right to ask us to limit the processing of your personal data if you dispute the accuracy of the data stored about you, if the processing is carried out without a legal basis or if you have objected to its processing.
Right to delete
You have the right to request the deletion of your personal data stored by us, unless maintaining the data is necessary to ensure freedom of speech, freedom of access to information, fulfillment of an obligation under the law, due to public interest, in order to report or defend against claims or in to exercise rights under the law.
Right to information
If you have declared the right to rectification, deletion or limitation of data processing, we will notify all recipients of your personal data about the method of rectification, deletion or imposition of restrictions on the processing of this data, unless it is impossible to carry out or involves disproportionate effort.
Right to data portability
You have the right to obtain a copy of the data provided to us, which will be sent to you or a third party in a structured, standard, machine-readable format. If you request that this data be sent to another data controller, this will be done, provided that it is technically possible. This right applies only to the situation when we process your data on the basis of your consent or in connection with the performance of the contract.
Right to object
If your personal data is processed on the basis of our legitimate interest, you have the right to object at any time to further processing. We will consider your application in accordance with the rules resulting from the regulations.
Right to withdraw consent
If your data is processed on the basis of consent, you have the right to withdraw it at any time, with future effect. This will not affect the legality of the data processed so far. Right to lodge a complaint with a supervisory authority If the processing of your personal data violates data protection regulations or if your data protection rights have been violated in any other way, you can submit a complaint to the supervisory authority. The supervisory authority competent in Spain is the Spanish Data Protection Agency in Madrid. Before you exercise your right to complain, we encourage you to contact us first so that we can clarify any concerns you may have.
Consideration of the application
If you send us an application for the exercise of a given right, a response to the application will be provided within one month of its receipt. If it is necessary to extend this period, we will inform you of the reasons for such extension. The response to your request will be provided to the e-mail address from which you will send the request, and in the case of requests sent by letter, by regular mail to the address you indicate, unless the content of the letter indicates the desire to receive feedback to the e-mail address (in in this case, please provide an e-mail address).
Links to other sites
Where we provide links to websites of other entities, this Privacy Policy does not apply and does not describe how this entity processes your personal data. We encourage you to acquaint yourself with the relevant privacy policies of these entities located on their websites.
PART II: Information on cookies
What are cookies and similar technologies?
A cookie is a text file saved by a web server on your computer or mobile device. Its content can only be downloaded and read by the server that created the file. Cookies are unique to the browser or mobile application you are using. The content of a cookie often consists of identifiers, website names, and sequences of numbers and letters.
Essential cookies
What are essential cookies and can I decline them? These cookies are necessary for the website to function and cannot be disabled without affecting the use of this website. These cookies are usually only placed in response to specific actions taken by the user on the website. We use these cookies because we believe it is in our legitimate interest and in order to allow this website to function properly.
Why do we use essential cookies?
We usually use these files to perform a specific function of the website, e.g. remembering the user's acceptance of the content of the Privacy Policy.
What data is collected and used by essential cookies?
Necessary cookies do not collect or use personal information.
How long do we keep this data?
Essential Cookies are usually Session Cookies that only store data for the duration of the user&aspo;s visit to the site, but if the cookie supports remembering your acceptance of the Privacy Policy, the data is kept longer to remember you on subsequent visits.
Other cookies
We also use advertising and analytical cookies to increase the effectiveness of marketing activities and the attractiveness of our website. The table below shows which files we use, how long they are saved and why we use them.
| Type of Cookie | Name | Expiration Time | Purpose |
|---|---|---|---|
| Functionality | nextauth.message | 30 days | Used for logging into our Platform |
How can I change cookie settings?
You can find out more about how to manage cookies in individual browsers here:
PART III: FINAL PROVISIONS
The Privacy and Cookies Policy is subject to periodic verification and update, if necessary. Below you can see the modifications introduced so far, if such changes have been made.