Privacy policy
Last updated: 8 November 2026
1. Who is responsible
The controller is Joan Perez Alvarado, owner of Fuentia (https://fuentia.app). For any privacy matter, write to joan.jpx@gmail.com.
Fuentia is a platform for building AI assistants that answer from each customer's own documents.
2. What data we process and why
| Data | Purpose | Legal basis |
|---|---|---|
| Account name, email and password (we store only an argon2id hash, never the password) | Create and manage your account, sign you in, and send service emails: verification, password recovery and approval | Performance of the contract |
| Your Google, GitHub or Microsoft account identifier and email, if you sign in with them | Sign in without a password | Performance of the contract |
| Documents, products and settings you upload | Provide the service: index them and use them to answer | Performance of the contract |
| Chat questions and answers (panel, API or widget on your website) | Provide the service and show you the history. For your website's visitors, you are the controller and we are your processor | Performance of the contract |
| Your email, only if you tick "Send me Fuentia news" (we store the time and IP of the consent) | Send you Fuentia news | Consent, which you can withdraw at any time |
| IP address and time of each sign-in or sign-up attempt | Security: limit sign-in attempts, sign-ups and abuse | Legitimate interest |
| Session cookie "rs_session" | Keep you signed in | Strictly necessary |
| Google Analytics cookies ("_ga" and "_ga_…", up to 2 years) with a random browser identifier, the pages you visit, your device type and approximate country | Learn how many people visit the website and the panel, and which pages they use | Consent: only if you click "Accept" in the cookie notice |
We use no advertising cookies. Analytics cookies are only set if you accept them, and you can change your choice at any time with the "Cookies" link in the footer; if you reject them, we delete them. We do not sell data. We do not use your documents or conversations to train AI models.
3. Who we share it with
Only with the providers we need to run the service:
| Provider | Purpose | Where |
|---|---|---|
| IONOS SE | Servers that run Fuentia and store the data and backups | Germany (European Union) |
| Groq, Inc. | Generating the assistant's answers: receives the question and the relevant document excerpts | United States |
| Resend (Plus Five Five, Inc.) | Sending service emails | Sent from Ireland (EU); company based in the United States |
| Google, GitHub, Microsoft | Only if you choose to sign in with them | Per each provider |
| Google Ireland Ltd. (Google Analytics) | Measuring visits, only if you accept | Ireland (EU); Google LLC may process it in the United States |
Transfers to the United States rely on the European Commission's standard contractual clauses, or on the EU-U.S. Data Privacy Framework where the provider participates. Embeddings (the numeric representation of your documents used for search) are computed on our own servers and never leave them.
4. How long we keep it
- While your account is active. Deleting a notebook or a document deletes its data and files.
- Accounts we never approved, or rejected, are deleted 30 days after creation, unless you agreed to receive news, in which case we keep your contact details until you withdraw that consent.
- Backups: 14 days.
- Sign-in attempt records: 1 day.
- Google Analytics data: 2 months (Google's default).
5. Your rights
You can request access, rectification, erasure, objection, restriction and portability of your data by writing to joan.jpx@gmail.com. To stop receiving news, turn it off in "Your account" or write to us. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (www.aepd.es).
6. Security
- Encryption in transit (HTTPS).
- Isolation between accounts in the database (Row-Level Security).
- Passwords hashed with argon2id.
- Key-only access to the servers.
- Daily backups.