Privacy

Controller

TUDE CONSULTORES INFORMÁTICOS, S.L. (Tax ID B71466502), Avda. Zaragoza, 67 · 31500 Tudela (Navarre), Spain. For any question about your data: info@secuenza.com.

This policy explains what data we process when you visit www.secuenza.com, when you use the Secuenza program and when you buy Pro. We do not process the contacts you write to with Secuenza: they are on your PC (see “The emails you send with Secuenza”).

What data we process and why

When you browse the website. The server keeps a technical log of each request (date, page requested, result and response time) to detect errors and abuse. That log does not include your IP address. We also count visits: how many times each page is viewed each day, in which language, and from which website or campaign people arrive (the “utm” parameters of a link). These counts use no cookies and do not store your IP, your browser or anything that could identify you. To stop automated submissions, the forms count the attempts coming from each IP address for 10 minutes, only in the server’s memory; this is not written down anywhere.

Waiting list. If you sign up, we keep your email address, the language of the page and, if available, where you came from. We use them for one thing only: to let you know when Secuenza can be downloaded. First we send you an email to confirm the address is yours; if you don’t confirm within 48 hours, we delete it.

Contact. If you write to us through the form or at info@secuenza.com, we keep your name, your email address, your company if you give it and your message, in order to reply.

Program registration. When you register Secuenza we keep your email address, name, company, country, language, the version of the terms you accept and, only if you tick it, that you wish to receive our communications. For each PC where you install it we keep an installation identifier, a fingerprint of the computer (a digest that reveals nothing about it), the Windows and Secuenza versions, the language, the country and the date of the last connection. We use them to give you the licence, to make the tracking of your emails and the updates work, and to tell you about anything affecting your account.

Telemetry. Once a day, the program sends us usage figures without personal data: how many contacts, lists, campaigns, emails and mailboxes you have, and how many sends, opens, clicks, unsubscribes and bounced emails there have been. Never addresses, names or the content of your emails. We use it to improve Secuenza and detect abuse.

Diagnostics. Only if you send them from Help: a file with the program’s settings and its latest log entries, with email addresses masked, plus any comment you write. We use it to solve your problem.

Buying Pro. For invoicing we need the company name, the tax ID (or the VAT number, which we check in the European Commission’s VIES system), the address and the email address. Payment is handled by Stripe: Secuenza never sees or stores your card details. We keep the purchase, the subscription status and, for each payment, the date, amount, result and the link to the invoice issued by Stripe.

My account. To sign in without a password we send you a link that is valid for 15 minutes and can be used once; we only keep a fingerprint of it that cannot be used to rebuild it. Once you sign in, a cookie keeps your session open for two hours.

The emails you send with Secuenza

Your contacts and your emails are on your PC, not on our servers, and your mailbox passwords stay there, encrypted with Windows protection.

For opens, clicks, unsubscribes and “view in browser” to work, our tracking service (secuenza.eu) records each open, click or unsubscribe with a code that does not include the recipient’s address, until your program collects it, and for 90 days at most. In doing so we act as a processor on your behalf, under the data processing agreement.

If you have received an email sent with Secuenza and wish to exercise your rights, contact whoever sent it: their details are at the bottom of the email. To stop receiving them, just use the unsubscribe link, which always works.

Legal basis

• Registration, licence, purchase, My account and diagnostics: performance of the contract you accept (Article 6(1)(b) GDPR).
• Invoicing: compliance with legal obligations (Article 6(1)(c)).
• Waiting list and marketing communications: your consent (Article 6(1)(a)), which you can withdraw at any time.
• Contact: your consent when writing to us (Article 6(1)(a)) or, if you are already a customer, the contract.
• Technical log, form protection, telemetry and visit statistics: our legitimate interest in the website and the program working, being secure and improving (Article 6(1)(f)).

How long we keep it

• Waiting list: until you leave it or, at most, three months after the launch announcement. Unconfirmed, 48 hours.
• Contact messages: one year.
• Account and installations: for as long as you have the account. If you ask us to delete it, we do so, except for what the law requires us to keep.
• Purchases and payments: for as long as commercial and tax law requires (six years).
• Telemetry: 13 months.
• Diagnostics: 30 days.
• My account links: one day after they expire.
• Tracking events: until your program collects them, and 90 days at most.
• Unsubscribes, for abuse control: the email’s code, the date and whether the reason was “I don’t remember signing up” (they don’t say who unsubscribed), 90 days.
• Server technical log: 14 days.
• Visit statistics: 25 months (they are counts that identify nobody).

Who else may see it

Nobody outside Tude, unless required by law. The following help us, on our behalf and under a data processing agreement:

• MonsterASP.NET (Prague, Czech Republic): hosting of the website, the program’s services, the database and the info@secuenza.com mailbox, in the European Union.
• Stripe Payments Europe, Ltd. (Ireland): payments, subscriptions and invoices. Stripe may process data in the United States with the safeguards required by the GDPR (the EU-US Data Privacy Framework and standard contractual clauses).
• European Commission: the VIES system receives the VAT number to check that it is valid.
• Cloudflare, only if the contact form shows the Cloudflare Turnstile check: it receives the technical data from your browser that it needs to tell a person from a robot.

Your rights

You can request access, rectification, erasure, objection, restriction of processing and portability by writing to info@secuenza.com from your account’s email address. To leave the waiting list, simply use the link included in each of our emails. If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) or with the supervisory authority in your country.

Security

The website and the program’s services only work over an encrypted connection (HTTPS). Confirmation, unsubscribe and sign-in links are not stored: only their cryptographic fingerprint. The program signs every request it makes to us, and tracking links are signed so that nobody can forge them. Access to the database is restricted and administration requires two-factor authentication.

Changes

If we change this policy, we will say so here with its date. If the change affects what we do with your data, we will let you know beforehand.

Language

This text is a translation. In the event of any discrepancy, the Spanish version prevails.