Privacy Policy

Last updated: March 29, 2026

1. Data Controller

Pura Cabra ("we", "us", "our") is the data controller responsible for your personal data. You can contact us at:

2. What Data We Collect

We collect and process the following personal data:

2.1 Waitlist Signups

  • Email address — to send you launch updates
  • IP address — for fraud prevention and security
  • Timestamp — when you signed up
  • GDPR consent record — proof that you consented

2.2 Registered Users

  • Email address — for account identification and communication
  • Usage data — questions asked, features used
  • Payment data — processed by Paddle (our payment provider); we do not store credit card numbers

2.3 Legal Queries (Try Page)

  • Question text — to provide AI-powered legal answers
  • IP address — for rate limiting and abuse prevention

3. Legal Basis for Processing (GDPR Article 6)

We process your data based on:

  • Consent (Art. 6(1)(a)) — for waitlist signups and marketing emails. You can withdraw consent at any time.
  • Contract performance (Art. 6(1)(b)) — to provide the service you signed up for.
  • Legitimate interest (Art. 6(1)(f)) — for security, fraud prevention, and service improvement.

4. How We Use Your Data

  • To send you waitlist updates and launch notifications
  • To provide AI-powered legal information services
  • To manage your account and subscription
  • To improve our service and user experience
  • To prevent fraud and ensure security

We never sell your personal data to third parties.

5. Data Sharing

We may share your data with:

  • Paddle — payment processing (as data processor)
  • AI providers — to process legal queries (anonymized where possible)
  • Hosting providers — infrastructure (as data processors)

All third-party processors are bound by data processing agreements compliant with GDPR.

6. Your Rights Under GDPR

You have the following rights regarding your personal data:

  • Right of access (Art. 15) — request a copy of your data
  • Right to rectification (Art. 16) — correct inaccurate data
  • Right to erasure (Art. 17) — request deletion of your data ("right to be forgotten")
  • Right to restrict processing (Art. 18) — limit how we use your data
  • Right to data portability (Art. 20) — receive your data in a structured format
  • Right to object (Art. 21) — object to processing based on legitimate interest
  • Right to withdraw consent (Art. 7(3)) — withdraw consent at any time

To exercise any of these rights, contact us at info@puracabra.com.

7. Unsubscribe & Data Deletion

You can unsubscribe from our waitlist at any time by:

  • Clicking the "Unsubscribe" link in any email we send you
  • Contacting us at info@puracabra.com

To permanently delete all your data, you can use our data deletion API or contact us directly. We will process deletion requests within 30 days as required by GDPR.

8. Data Retention

  • Waitlist data — retained until you unsubscribe or request deletion
  • Account data — retained while your account is active, plus 30 days after deletion
  • Legal queries — retained for 12 months for service improvement, then anonymized

9. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

  • TLS encryption for all data in transit
  • Encrypted database storage
  • Access controls and authentication
  • Regular security reviews

10. Cookies

We use essential cookies for session management and authentication. We do not use tracking or advertising cookies. Essential cookies are necessary for the service to function and do not require consent under GDPR.

11. International Transfers

Your data may be processed outside the EEA. Where this occurs, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission.

12. Supervisory Authority

You have the right to lodge a complaint with your local data protection supervisory authority. In Spain, this is the Agencia Española de Protección de Datos (AEPD) at www.aepd.es.

13. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes via email or a notice on our website.

14. Contact

For any privacy-related questions or requests, contact us at:

info@puracabra.com