Privacy Policy
2026-05-24
In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018, this policy informs users about how their personal data is processed on aipostslab.com.
1. Data controller
Owner: Sergio Ricart Alabau Tax ID: 49574711M Country: España Contact email: sergiricartt@gmail.com Website: https://aipostslab.com
2. Data we process
For the service to work we process: • IP address (to enforce the daily usage limit and prevent abuse). • Content you enter in the form (topic, tone, audience, goal). • Technical data: browser, language, device and anonymous performance metrics. No signup is required: we do not collect name, email or other direct identifiers unless you voluntarily email us at sergiricartt@gmail.com.
3. Purposes and legal basis
• Providing the post-generation service: performance of the contract / use of the service (art. 6.1.b GDPR). • Abuse prevention and IP rate limiting: legitimate interest (art. 6.1.f GDPR). • Personalized or non-personalized advertising (Google AdSense): user's prior consent (art. 6.1.a GDPR). • Responding to email enquiries: data subject's consent.
4. Data retention
• The form content is not stored: it is sent to the AI provider, the response is generated and then discarded. • Your IP is kept in Upstash Redis for up to 24 hours solely to enforce the daily limit. • Emails you send us are kept for as long as the conversation requires or until you ask us to delete them.
5. Recipients and processors
We rely on the following processors who may access strictly necessary data: • Vercel Inc. (hosting and delivery). • Anthropic PBC and/or providers reachable via Vercel AI Gateway (AI generation). • Upstash Inc. (temporary IP storage for rate limiting). • Google Ireland Ltd. (Google AdSense, only if you accept advertising cookies). We do not sell or share data with third parties for commercial purposes.
6. International transfers
Some of these providers are located outside the EEA (mainly in the USA). Transfers are made under the European Commission's Standard Contractual Clauses and, where applicable, the EU-US Data Privacy Framework.
7. Your rights
You may exercise your rights of access, rectification, erasure, objection, restriction and portability at any time by emailing sergiricartt@gmail.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (https://www.aepd.es) or your local supervisory authority.
8. Security
We apply reasonable technical and organizational measures (HTTPS in transit, access control, least privilege) to protect data against unauthorized access, loss or alteration.
9. Changes
We may update this policy to reflect legal or service changes. The "last updated" date above shows the current version.