Privacy policy

Data controller

The controller responsible for the personal data collected through talleros.pro and the TallerOS application is Juan José Villoslada Izquierdo, with NIF (Spanish tax ID) 09051761L and registered address at Alcalá de Henares, Madrid (Spain). You can contact us about any data protection matter at hola@talleros.pro.

Dual role: controller and processor

TallerOS acts as data controller with respect to the data of individuals who register as users of the platform (workshop owners and their team): name, email, phone number, and account and subscription data. With respect to the customer, vehicle and case data that each workshop enters into the application, TallerOS acts as data processor, with the workshop being the controller of that data in relation to its own customers.

Purposes and legal basis

We process registered users’ data to: manage account sign-up and access (performance of the subscription contract), process subscription payments (performance of the contract), provide technical support (performance of the contract and legitimate interest), send operational communications about the service (performance of the contract) and, where consent has been given, send commercial or product communications (consent, revocable at any time).

Categories of data processed

Identification and contact data (name, email, phone), account and workshop data (business name, tax ID, address, user role), billing data managed through our payment gateway, and platform usage data (access logs, aggregated usage statistics).

Recipients and data processors

To provide the service, we share data with technology providers that act as data processors under contract and with the guarantees required by the GDPR:

• Supabase — database hosting and authentication
• Stripe — subscription payment processing
• Resend — email communications
• Twilio — SMS and notifications
• Google (Maps, Analytics) — geolocation and usage analytics
• Anthropic — AI-based processing of imported PDF documents
• Vercel — application hosting and infrastructure

We do not disclose data to third parties for purposes other than providing the service, except where legally required.

International transfers

Some of our providers may be located outside the European Economic Area, mainly in the United States. In those cases, the transfer is carried out under the safeguards provided for in the GDPR (standard contractual clauses or other transfer mechanisms recognized by the European Commission).

Retention period

Account data is kept for as long as the subscription remains active and, after cancellation, for the period required to comply with applicable legal obligations (including tax and accounting obligations). You can request an export of your data before cancelling your account.

Rights of data subjects

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and data portability at any time by writing to hola@talleros.pro. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe that the processing of your data does not comply with applicable law.

Security measures

We apply appropriate technical and organizational measures to protect personal data, including encryption in transit and at rest, role-based access control, and isolation of each workshop’s data through row-level security (RLS) policies.

Minors

Use of the platform is intended for industry professionals and is not directed at minors. We do not knowingly collect data from minors.

Changes to this policy

We may update this privacy policy to reflect regulatory or service changes. We will notify relevant changes through the Site itself or by email.