ONZE13 STUDIO app privacy policy

1. Who is responsible

OnZe13 Tech S.L. (ONZE13), tax ID B23985013, Carrer de la Portadora 51, 08800 Vilanova i la Geltrú (Barcelona), Spain. For any privacy question, write to studio@onze13.com.

Only people invited by ONZE13 or by a website owner can use the app (there is no open sign-up). If you use the app on behalf of your company, your company is our client and we process data to provide the service to it.

2. What data we process

• Account: your email, your password (stored encrypted; we never see it), your role (owner, editor or collaborator) and the websites you can access.
• What you do in the app: the changes you propose or apply to your website, their history and the photos you upload to publish.
• Conversation with the assistant: the messages you type or dictate and its replies (we keep the last 30 per person and website so the conversation continues where you left it).
• Requests to ONZE13: the text, photos or screenshots, the voice notes you record and their automatic transcription.
• Notifications: a device identifier to send you alerts (for example, when a change is live or a request is done).
• Technical usage data: a log of each request to the assistant (date, website, number of messages and cost) to monitor usage and prevent abuse, and technical server logs.
• Your website's visits: if your website uses Google Analytics, the app shows you aggregate figures (visitors, pages, countries). They identify no one.

The app has no ads, does not sell data, does not track you across other apps or websites and uses no third-party analytics inside the app.

3. Microphone, voice, photos and camera

• Microphone and speech recognition: only active when you tap the dictate or record button. Dictation turns your voice into text using Apple's speech recognition, subject to Apple's privacy policy. Voice notes are stored as audio so the ONZE13 team can listen to them.
• Photos and camera: we only access the photos you pick or take, to publish them on your website or send them to the ONZE13 team. Request photos and voice notes are kept in private storage that only that website's people and the ONZE13 team can access.

4. Why we use it

• To provide the service: show and apply changes to your website, publish it and keep the history so changes can be undone.
• To understand what you ask the assistant and prepare the proposed change.
• To handle your requests to the ONZE13 team and let you know when they are done.
• To send necessary emails (invitation, password change, security alerts).
• To keep the app secure, set usage limits and control its costs.

The legal basis is the performance of the contract with your company (Art. 6(1)(b) GDPR) and, for security and abuse prevention, our legitimate interest (Art. 6(1)(f)).

5. Who we share it with

Only with the providers we need for the app to work, acting on behalf of ONZE13 with GDPR safeguards:

• Supabase: database, accounts, file storage and server functions (Paris data centre, EU).
• Anthropic: the AI model (Claude) that processes your messages to the assistant and your website content to propose changes. Anthropic does not use this data to train its models. It may process it outside the EU under standard contractual clauses.
• Cloudflare and GitHub: building and hosting your published website.
• Expo and Apple: delivering notifications to your iPhone. Apple also provides the speech recognition used for dictation.
• Resend: sending platform emails.
• Google: reading your website's Google Analytics statistics, if it has them.

6. How long we keep it

• While your account is active.
• You can delete your account at any time from the app (Account › Delete my account). Your access, devices and assistant conversation are deleted.
• The website's change history and requests to ONZE13 belong to your company's website: they are kept without your authorship so the work done is not lost. If you want their content deleted too, write to us.
• When you sign out, your device stops receiving alerts.

7. Your rights

You can request access, rectification, erasure, restriction, portability of your data or object to its processing by writing to studio@onze13.com. We will reply within one month.

If you believe we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).

8. Security

Communications are encrypted (HTTPS). Each person can only see and edit the websites they have access to, enforced in the database itself. Request photos and voice notes are in private storage and opened through temporary links.

9. Children

The app is a professional tool for businesses and is not directed at children under 16.

10. Changes to this policy

If we change anything important, we will publish it here and let you know in the app or by email.