Privacy Policy

Data controller: Nicolás López Solanes, with Tax ID (NIF) 55505847Q. Contact for any data matters: sxlanes@gmail.com.

It depends on how you use the website. If you only browse, we do not collect any personal data.

• If you generate your Learning Agreement: your name, email address, home and host universities, degree programme, and the courses you wish to recognise. When paying, Stripe processes the payment directly — we never see or store your payment card details.
• If you share your Learning Agreement: your name and email address (both optional), home and host universities, degree programme, course equivalences, and, if provided, the link to the PDF.
• If you ask to be notified about a deadline: your email address and the university you select.
• If you create an account: your email address, password (encrypted, never visible in plain text), and, if you choose to fill them in, your name, university, and degree programme.
• Technical data: our hosting provider logs IP addresses and request headers to serve the website and protect it from abuse. We also use aggregated, cookieless audience measurement, which does not allow individual identification or cross-site tracking.

We do not use tracking or advertising cookies, nor do we sell or transfer data to third parties for commercial purposes.

• Performance of a contract (Art. 6(1)(b) GDPR) to generate your Learning Agreement once paid: your academic details are sent to our AI course recognition system and course catalogue, and the resulting document is delivered to you by email.
• Consent (Art. 6(1)(a) GDPR) to publish a shared Learning Agreement and to send you deadline notifications. You provide consent by ticking the box, and you may withdraw it at any time without affecting prior lawful processing.
• Legitimate interest (Art. 6(1)(f) GDPR) to maintain website operations, measure usage in aggregate form, and prevent abuse.

Deadline notifications use double opt-in: you will not receive any emails until you confirm from your own inbox, and every email includes an unsubscribe link.

• Learning Agreement requests and equivalences: for as long as your account remains active or for the retention period required by tax legislation for associated invoices.
• Deadline notifications: for as long as you remain subscribed. Upon unsubscribing, they are deleted.
• Shared Learning Agreements: for as long as the resource remains published. You may request its removal by contacting us.
• Technical logs: for the retention period determined by the hosting provider.

Only essential service providers necessary for operating the website, acting as data processors:

• Vercel — website hosting, content delivery, and aggregated cookieless analytics.
• Supabase — database storing requests, equivalences, and deadline notification subscriptions.
• Stripe — payment processor for Learning Agreement purchases. We never receive or store your payment card data.
• TuAgreement — our partner in AI course recognition technology that calculates course equivalences.

You may exercise your rights of access, rectification, erasure, restriction of processing, data portability, and objection. Contact sxlanes@gmail.com and we will respond.

If you consider that our processing does not comply with applicable regulations, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

If we modify any aspect of this policy, we will update the date shown above. If a change significantly affects your rights or data usage —for example, a new purpose for your email—, we will notify you before applying it.