The latest update: 7 of October 2026
in Ovnar We take privacy seriously: it is part of what we do. This policy explains what personal data we process, why, for how long and what rights you have, in accordance with the Regulation (EU) 2016/679 (RGPDThe Organic Law 3/2018 (LOPDGDDand the law 34/2002 (LSSI).
1. Responsible for treatment
| The title | OVNARThe Cloud |
|---|---|
| NIF / CIF | Not to compose |
| by Domicilio | Extremation |
| Email of Contact | hola@ovnar.cloud |
| The website | https://ovnar.cloud |
2. What data we process
- Data of account: Name, email, password (crypted with a single sense algorithm; no one can read it), account type, company and web if you indicate them.
- Security data of the account: secret of the two-factor authentication (digit), recovery codes (digits), devices and sessions (IP address, browser, dates) and activity record.
- Data of the service: domains you add and the results of your analysis, tasks, incidents, inventory, documents, suppliers, messages with our team and, in the personal panel, the information you decide to save (lists, reminders, account maps, emergency contacts, test folder).
- Data of Forms: What you send us from Contact or Free Analysis (name, company, email, phone, domain, message).
- Data of consent: version and date of acceptance of the terms and commercial communications, and date of withdrawal if there is.
- Data of invoicing: If you contract a plan, the data required to invoice. The card data is processed directly. StripeWe do not store them.
Tools that process images, codes QRPhotos and passwords work. in your navigatorThese files are not sent to our servers unless you expressly save them. Filtered passwords checking uses the k-anonymous method: only the passwords are sent 5 First characters of a encrypted summary, never the password.
3. Why we use them and on what legal basis
| The purpose | The legal basis |
|---|---|
| Create and manage your account and provide the Service (analysis, surveillance, notifications, reports, personal panel) | Execution of the contract (art. 6.1by b RGPD) |
| Protect your account and the Service: detect suspicious accesses, prevent fraud and abuses, security warnings | Legitimate interest in security (art. 6.1f) and the execution of the contract |
| send you commercial communications and advertising Ovnar by email (news, tools, services, offers, advice) | consent Lending the account (art. 6.1The A RGPD and art. 21 LSSIwhich you can withdraw at any time. |
| Reply to your requests and provide support | Consent / Pre-contractual measures |
| Facturation, accounting and tax obligations | The legal obligation (art. 6.1and c) |
| Integrated internal statistics to improve the Service | Legitimate interest; aggregated data are used |
We do not make automated decisions with legal effects on you or create profiles for third-party advertising purposes. Security notes are calculated on your domains and technical controls, not on your person.
4. Commercial communications
Commercial communications from Ovnar are optional and disabled when you create an account. You can enable or disable them under “My details → Email communications”, through the unsubscribe link in each message or by writing to hola@ovnar.cloud. Unsubscribing does not affect essential security, account or service messages. We retain the date of your choice so that we can respect it.
5. How long we keep them
- Account and service data: as long as you have the account. When deleted, they are deleted unless indicated below.
- of Sessions: 90 of days. Registration of activity: 180 of days. Posts already sent from the shipping tail: 90 of days.
- Requests that do not end in contracting: until 2 of years.
- Data of invoicing: the period required by the fiscal and commercial regulations (up to 6 of years).
- Proof of consent and departure: as long as it may be necessary to address claims (up to 3 years after the fall.
After these deadlines, the data is blocked for the legally required time and then deleted.
6. With whom we share them
We do not sell or transfer your data. We only communicate them when the law requires it or to suppliers that provide services to us with a contract that obliges them to protect them:
- Web hosting, database and mail: Hostinger (Hostinger International Ltd, the European Union.
- and payments: Stripe (Stripe Payments Europe Ltd., Ireland), only if you contract a payment plan.
- Security consultation services which we use for analysis, to which we only send the necessary technical data: Have I Been Pwned (confirmed domain, to check corporate email filters, if activated), Shodan InternetDB (public IP addresses of your servers), services RDAP and DNS Name of Domain (Domain Name)
Some of these suppliers may process data outside the European Economic Area. In that case they do so with adequate guarantees (decision of suitability, such as the EU-EU Data Privacy Framework. US, or European Commission type contractual clauses).
7. Your rights
You can exercise the rights of access, rectification, deletion, opposition, limitation of treatment and portabilityand withdraw your consent at any time without affecting the legitimacy of the previous treatment. Many of them can be exercised by yourself from “My Data” (download your data, correct them, cancel communications or delete your account). You can also write to us hola@ovnar.cloud indicating the right you want to exercise; we will answer you within a maximum period of one month.
If you consider that we have not correctly addressed your rights, you can submit a complaint to the Spanish Data Protection Agency (by www.aepd.es).
8. Security
We apply appropriate technical and organizational measures: encrypted connection (HTTPSPasswords with robust hash, two-factor authentication secret encryption, two-factor authentication for administrators, strict browser security policies, access control, activity record, attempt limits and backup copies. If a security gap occurs that affects your data, we will notify the authority and, where appropriate, you within the legal deadlines.
9. The Minor
The service is aimed at older people. 18 of years. We do not consciously collect data from minors. In the personal panel you can use designed guides to protect minors from your family, but the accounts should be on the name of an adult.
10. Changes
We can update this policy. We will publish the current version here and, if the changes are relevant, we will notify you by email or on the panel.