Rendai.io

Privacy Policy & GDPR

Updated: October 2026

This English version is provided for convenience. If there is any discrepancy, the Spanish version prevails.

1. Data controller

  • Controller: Alan José López Morales (trade name: Rendai)
  • Tax ID (NIF): 13313575W
  • Address: Serra de Agullent, 5, 46015 Valencia (España)
  • Privacy contact: alan@rendai.io

2. What data we process

  • Contact forms: name, email and, if you provide them, phone, company, what you need and your message.
  • Manual download: your email, to send it to you.
  • Client portal: email, name and, if you sign in with Google, your profile picture; plus your projects' data, hours, deliverables, sessions and invoices.
  • Analytics (only if you accept): pseudonymised browsing data, such as the pages visited or whether a form is submitted. It does not include your name or email.
  • Voice assistant (only if you accept): if you start a conversation, your voice is processed so we can reply to you.

3. Why we use it and on what legal basis

  • Answering your enquiry and preparing a proposal: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
  • Sending you the manual you request: your consent (Art. 6(1)(a) GDPR).
  • Providing the contracted services and managing the portal: performance of a contract (Art. 6(1)(b) GDPR).
  • Invoicing and tax obligations: compliance with legal obligations (Art. 6(1)(c) GDPR).
  • Analytics and voice assistant: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.

We do not make automated decisions that affect you, nor do we build commercial profiles.

4. How long we keep it

  • Enquiries that do not lead to a contract: up to 12 months from the last contact.
  • Clients: for the duration of the relationship and, afterwards, for the legally required periods (for example, 6 years for accounting and tax records).
  • Portal account: until you ask us to delete it, except for what we must keep by law.
  • Analytics: up to 14 months, according to the Google Analytics settings.

5. Who processes data on our behalf

We do not sell or share your data. To provide the service, we rely on these data processors:

  • Google Ireland Ltd. (Firebase): portal access and database, with data stored in the EU (Madrid).
  • Google Ireland Ltd. (Google Analytics): only if you accept analytics.
  • Hostinger: website hosting (server in France) and email.
  • CallHalla: the website's voice assistant, only if you accept it.
  • Calendly: embedded booking calendar, with its own privacy policy.

Some of these providers may process data outside the European Economic Area. When they do, they apply the safeguards provided for in the GDPR, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.

6. Your rights

You can request access to, rectification or erasure of your data, object to or restrict its processing, request its portability and withdraw your consent at any time by emailing alan@rendai.io. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

7. Cookies, analytics and voice assistant

This website only loads non-essential third-party services if you accept them in the cookie notice:

  • Google Analytics 4 (Google Ireland Ltd.): sets the _ga and _ga_* cookies (maximum duration 2 years) to measure, in aggregate, which pages are visited and whether forms are submitted.
  • CallHalla voice assistant: the voice call button that lets you talk to us from the website.

If you reject, neither is loaded. Your choice is stored in your browser's local storage and you can change it at any time from the "Cookies" link at the bottom of every page. The client portal uses a technical session cookie, needed to keep you signed in, which does not require consent.

8. Security

We apply appropriate technical and organisational measures to protect your data: encrypted connections (HTTPS), restricted access to information and server-side session verification.