Privacy policy
Last updated: 2026-05-16
At Asociación TRINDIA (hereinafter "Legatio") we handle your personal data with the care it deserves. This document explains what data we collect, why, on what legal basis, who we share it with, and what rights you have over it.
Data controller
- Entity: Asociación TRINDIA
- Tax ID (CIF): G70944053
- Address: C/ Vencejo 3, bajo derecha, 29007 Málaga, España
- Contact email: info@legatio.app
What data we collect
- Waitlist form: name, email, language, country, date of birth (optional), browsing data (UTMs, device, referrer).
- If you become a customer: phone, billing information, content you provide to the service (audio, text, photos).
- When you browse the site: essential cookies always; analytics and marketing cookies only if you accept. See Cookie policy.
Why we use it
- To manage your waitlist registration and send you the educational email flow you accepted when confirming your email.
- To provide the Legatio service if you become a customer: manage your account, maintain your conversations with the bot, generate your book and deliver it to the heirs you designate.
- To meet our legal obligations (invoicing, accounting, handling user rights).
- To measure website and campaign performance, only with your consent.
Legal basis
- Consent for the waitlist, educational emails and analytics/marketing cookies.
- Performance of a contract when you become a customer.
- Legal obligation for invoicing and tax data retention.
How long we keep your data
- Waitlist data: until you unsubscribe or 24 months pass without activity from your side.
- Customer data: throughout the contractual relationship and the applicable legal periods (6 years tax, 5 years civil under Spanish law).
- Cookies: as detailed in the Cookie policy.
Who we share your data with
We do not sell your data. We share with the following processors, all with signed Data Processing Agreements (DPA) and, where applicable, with international transfer safeguards (Standard Contractual Clauses approved by the European Commission):
| Provider | Purpose | Country |
|---|---|---|
| GoHighLevel (HighLevel Inc.) | CRM, gestión de leads y automatización de emails | EE. UU. |
| Stripe Payments Europe Ltd. | Procesamiento de pagos | Irlanda |
| Mailgun (Sinch Email) | Entrega de emails transaccionales y nurturing (vía GHL) | EE. UU. |
| Cloudflare R2 | Almacenamiento de audios, libros y backups | EE. UU. |
| Anthropic PBC | Modelo de lenguaje del bot conversacional | EE. UU. |
| OpenAI L.L.C. | Transcripción de audios (Whisper) | EE. UU. |
| Hetzner Online GmbH | Hosting de servidores | Alemania |
| Holded (PingPing Technologies) | Emisión de facturas | España |
| Meta Platforms Ireland Ltd. | Tracking de conversiones publicitarias (si consientes cookies) | Irlanda |
| Google Ireland Ltd. | Analítica web (si consientes cookies) + tipografías | Irlanda |
| Dondominio (Soluciones Corporativas IP) | Registro de dominio y buzones de correo | España |
International transfers
Some providers are based outside the European Economic Area (mainly the U.S.). In those cases we apply the Standard Contractual Clauses approved by the European Commission (Decision 2021/914) as the appropriate safeguard.
Your rights
You have the right to:
- Access the personal data we hold about you.
- Rectify inaccurate data.
- Erase your data ("right to be forgotten").
- Object to the processing.
- Restrict the processing.
- Port your data to another controller.
- Withdraw your consent at any time, without affecting the lawfulness of processing prior to withdrawal.
- Complain to the Spanish Data Protection Agency (aepd.es) if you believe your rights have not been respected.
To exercise any of these rights, write to us at info@legatio.app, indicating the right you wish to exercise and, if you prefer, attaching a copy of an ID document to verify your identity.
Changes to this policy
If we modify this policy, we will update the "Last updated" date in the header. Substantial changes will be communicated by email to those on our list.