Privacy policy

This privacy policy explains how we process the personal data of people who visit the CLAQON website, write to us or enter into a contract with us. It follows Article 13 of the General Data Protection Regulation (GDPR) and Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights (LOPDGDD), in layers: first a summary and then the details.

An important starting point: CLAQON is installed on your machine or on a server in your name. The data you process with the software stays there and does not reach us, except in the cases explained in the section Data in your CLAQON installation.

Summary

Who the controller is

• Controller: Cristian David Valencia Calvo.
• Tax ID (NIF): 44246815J.
• Address: Raíces Serranas, 21640 Zalamea la Real (Huelva), España.
• Email for data protection matters: soporte@claqon.com.
• Data protection officer: none has been appointed at present. If one is appointed, their contact details will appear here.

What data we process and why

Each processing activity states the data, the purpose, the legal basis and how long we keep the data.

Browsing the website

• What your browser stores. The website stores your theme preference in your browser, if you change it, and your privacy choice. That data does not leave your device. Cookies from other companies only exist if you accept analytics with cookies or advertising. The details, with the list of what is active, are in the cookie policy.
• Technical hosting logs. Like any website, the server that hosts it receives your IP address, the date and time, the page you request and your browser type. It needs them to serve you the page and to protect it against abuse.
  • Legal basis: our legitimate interest in the website working and being secure.
  • Retention period: the one applied by the hosting provider, which will be shown in the list of processors.
• Third-party resources. The typefaces, icons, images and videos are served from this same domain. The website does not load fonts, players or social media buttons from other companies; only the measurement scripts described below, when they are active.

Website measurement

The tools active at any given time, with their owner, where they process data, how long they keep it and their cookies, are listed in the cookie policy. If none is active, nothing is measured.

• Anonymous measurement without cookies.
  • Data: the pages you visit and where you come from; the links and buttons you press, with the area of the page; the frequently asked questions you open and how much you read; the pre-registration steps and what you choose in them (delivery, plan, modules, services and the indicative amount as a range); your device and browser type and your country, inferred from your IP address. Never what you type in the forms.
  • Purpose: to know which content is useful, where people get stuck and what they are interested in, so as to improve the website and the offer. Only in aggregate statistics.
  • Legal basis: our legitimate interest (Article 6(1)(f) GDPR). You can object at any time from “Privacy preferences”, in the footer of every page.
  • Retention period: data that makes it possible to tell visits apart is kept for 25 months at most. Aggregate statistics do not identify anyone.
• Analytics with cookies and heatmaps. Only if you accept it.
  • Data: a random identifier stored in a cookie, the pages you view, clicks and scrolling, the session recording with forms masked, your device type and approximate location.
  • Purpose: to see journeys across several visits and detect usability problems. It is not used for advertising or to identify you.
  • Legal basis: your consent, which you can withdraw at any time from the same panel.
  • Retention period: that of each tool, stated in the cookie policy. Some of them process data in the United States under the EU-U.S. Data Privacy Framework.

Pre-registration (early access)

• Required data: how you want to run CLAQON, how many channels you will run, full name, work email, country and whether you would be invoiced as a business or professional.
• Optional data: the modules and services you are interested in, how many videos you publish, in which languages and networks, how you prefer to pay, company or project, phone or WhatsApp, when you would like to start, topic, website or channel, your current spend by band, your message and your indicative answers about price.
• Data added by the form: the language and the page you are writing from, the summary of your configuration with the indicative estimate, the campaign parameters if the link you arrived through includes them, and the referring website if you came from another site.
• How it reaches us: when you send it, an email with your configuration is prepared, and you send it yourself from your email program, or from Gmail or Outlook if you choose those buttons (in that case, the message is prepared in your account with that service). If the website uses a form provider, the submission goes through it, and it appears in the list of processors.
• Purpose: to assess whether CLAQON fits your case, to reply to you and, if there is a place, to make you a proposal. The answers about price are only used in aggregate to set it; they are not an offer.
• Legal basis: the pre-contractual steps you ask us to take by sending the application, and your consent, which you give by ticking the box on the form.
• Retention period: while we assess your pre-registration and for as long as the early access programme lasts. If we do not reach an agreement, we delete the data 12 months after our last contact. That margin allows us to let you know if a place opens up without asking you for your data again.

Contact

• Data: full name, work email, company (optional), subject and message, plus the language, the page and the source of the visit.
• Purpose: to reply to your message.
• Legal basis: your consent. If you ask us about entering into a contract, also the pre-contractual steps you request.
• Retention period: the time needed to deal with your request and up to 12 months after the last message, in case the conversation continues.

Partners

• Data: full name, work email, company, country, type of partnership and, if you provide them, number of clients, website and message.
• Purpose: to assess the partnership you propose (implementer, reseller, agency or affiliate) and to reply to you.
• Legal basis: the pre-contractual steps you request and your consent.
• Retention period: if there is no agreement, 12 months from the last contact. If there is one, for as long as the relationship lasts and for the subsequent statutory periods.

Monthly log

• Data: your email address.
• Purpose: to send you one note a month about what we built, what we measured and what failed.
• Legal basis: your consent, which you give with a separate, unticked box, as required by Article 21 of the LSSI-CE for commercial communications by email.
• Retention period: until you unsubscribe, using the link included in every issue or by writing to us.

Interviews and demonstrations

If you agree to an interview or a demonstration, we take notes to understand how you work today.

• How: the notes are stored under a code, without your name. The link between name and code is stored separately and deleted if you ask us to. We do not record the conversation without your consent.
• Purpose: only to validate who CLAQON is useful for and how to set its price. We do not share one person’s notes with another.
• Legal basis: your consent.
• Retention period: the link between your name and the code is deleted 12 months after the interview, or earlier if you ask us to. From then on, the notes can no longer identify you.

Customers and pilots

• Data: the details of the customer’s contact people, billing details and whatever you write to us through support.
• Purpose: to prepare the proposal, sign and perform the contract, invoice and provide support.
• Legal basis: the contract and legal obligations, especially tax and commercial law obligations.
• Retention period: for as long as the contract lasts and, afterwards, for the periods required by tax and commercial regulations and the limitation periods for claims arising from the contract.

Support

If you ask us for help, we process what you send us: emails, screenshots and the panel’s diagnostic reports, which do not include keys. If we need to access your installation to help you, we only do so under a data processing agreement.

Software licences

This processing only takes place if your installation uses a licence issued by the owner. In that case, your installation checks its licence on start-up and then approximately every 6 hours, or every minute if its licence requires periodic authorisation, as with installations made with a sealed installer. With each check it sends a short report with a closed list of data:

• the installation’s random identifier and its credential for connecting to the licence server;
• the CLAQON version and the operating system (Windows, Linux, macOS or other);
• the trade name you give your installation, your company name and, if you provide one, a contact email;
• whether production is active and how many accounts or channels it has;
• the date of the last backup and of the last update;
• how it was installed and, if a sealed installer was used, the seal identifier, the identifier of whoever issued it and the installation date.

The licence server also records the IP address from which your installation connects (it keeps the last 10) and any connection incidents.

The report never includes the content of your channels, your keys or credentials, the texts of your videos or data about your audience.

• Purpose: to verify and renew the licence, detect cloned copies, notify you of updates and provide you with support.
• Legal basis: the performance of the licence agreement, to verify and renew the licence and provide you with support (Article 6(1)(b) GDPR), and our legitimate interest in detecting cloned copies and protecting the software (Article 6(1)(f)).
• Retention period: while the licence is valid and for up to 12 months afterwards, to resolve incidents and possible claims. IP addresses are replaced by new ones: only the last 10 are kept.

In this processing we act as controller. When, on the other hand, we process data from your installation on your behalf, for example during remote support, we act as a data processor.

Data in your CLAQON installation

CLAQON runs on your machine or on a server in your name. What you process with it stays there: your accounts and connections, your keys, your scripts and videos, your metrics and any data about your audience. It does not reach us and we do not use it to improve the product.

• Your connections are yours. Your installation connects directly to the services you configure (YouTube, Meta, X, AI, voice or image providers), with your own keys and apps. Each service processes that data under its own terms.
• You are the controller. For the personal data you process with CLAQON, the controller is you, not us. If you connect YouTube or other platforms, your installation needs its own privacy policy; we are preparing templates for this.
• Two exceptions. We receive data from your installation only when you ask us for support that involves accessing it, always as a data processor and under contract, and through the licence telemetry described above, where it exists.

Recipients and processors

We do not sell or disclose your data to third parties. We only communicate it to public authorities when a law requires it, for example to the tax authorities in connection with invoicing.

These providers process data on our behalf. The last column shows the agreement or terms under which they do so and, where data leaves the European Economic Area, the safeguard that allows it:

While the forms work by email, submitting them opens your email program with the message ready. You send that message yourself, through your email provider, which processes it under its own terms.

International transfers

If any provider on the list processes data outside the European Economic Area, we will state this on the list together with the safeguard that permits it: an adequacy decision, such as the EU-U.S. Data Privacy Framework, or other appropriate safeguards. We will not make transfers without one of them. You can ask us for a copy of those safeguards at soporte@claqon.com.

How long we keep data

We keep each item of data only for as long as necessary for the purpose for which we collected it, with the periods set out in each section above. We then delete or anonymise it. If a law requires us to keep it for longer, we keep it blocked, solely to comply with that obligation: for example, invoices and accounting records, for the periods set by tax and commercial regulations (generally four to six years).

Your rights and how to exercise them

You can exercise the rights granted to you by Articles 15 to 22 of the GDPR:

• Access: to find out whether we process your data and to obtain a copy.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to ask us to delete it.
• Objection: to object to processing, for example processing based on legitimate interest.
• Restriction: to ask us to stop using it while a complaint is being resolved.
• Portability: to receive the data you gave us in a structured, commonly used format.
• Withdraw your consent at any time, without affecting processing carried out before.

To exercise them, write to soporte@claqon.com stating which right you wish to exercise and which data it concerns. If we have reasonable doubts about your identity, we will ask you for the minimum needed to verify it. Exercising your rights is free of charge and we will reply within the time limits set by the GDPR. To stop receiving the log, simply use the unsubscribe link in each issue.

If you believe we have not handled your rights properly, you can lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos) or with the supervisory authority in your country.

Automated decisions

We do not make decisions based solely on automated processing, nor do we build profiles from your data, within the meaning of Article 22 of the GDPR. We undertake that a person will review every application. Website measurement only produces aggregate statistics: it is not used to evaluate you or to decide anything about you.

Do you have to give us your data?

The fields marked as required on each form are necessary for us to reply to you: without them we cannot deal with your request. The rest are optional. If you sign a contract, billing details are necessary because the law requires them.

Minors

This website and CLAQON are aimed at professionals and businesses. We do not knowingly collect data from children under 14, the age from which a minor can give consent on their own in Spain under Article 7 of the LOPDGDD. If we discover that a child under that age has written to us without the authorisation of the person holding parental authority or guardianship, we will delete their data.

Security

We apply technical and organisational measures proportionate to the risk. The website is served over HTTPS with strict security headers, which only allow resources to be loaded from the domain itself and from the services declared in this policy and in the cookie policy. Access to applications and emails is limited to those who need them to reply to you. If you discover a security flaw, follow our vulnerability disclosure policy.

Privacy notice for people in Mexico

If you write to us from Mexico, this section is our comprehensive privacy notice, in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties published in the Official Gazette of the Federation (Diario Oficial de la Federación) on 20 March 2025 (LFPDPPP). It supplements what is explained in the rest of the page.

1. Identity and address of the controller. Cristian David Valencia Calvo, with address at Raíces Serranas, 21640 Zalamea la Real (Huelva), España. Email: soporte@claqon.com.
2. Data we process. Identification and contact data (name and email), professional data (company, country, channels and platforms, interest and indicative budget), the technical browsing data described above and, if you are a customer, billing data. We do not ask for sensitive personal data; please do not send it to us.
3. Purposes.
   • Necessary for the relationship you ask us for: replying to your request or message, assessing whether CLAQON fits, preparing and performing the contract, managing the licence and providing you with support.
   • Requiring your consent, which you can refuse without affecting the purposes above: sending you the monthly log, using your indicative answers about price, in aggregate, to set it and, if you accept it, the website’s analytics with cookies.
   • Measuring the use of the website anonymously and in aggregate, which you can object to from “Privacy preferences”.
4. How to limit the use or disclosure of your data. You can leave the log box unticked, unsubscribe from any issue or write to us at soporte@claqon.com so that we stop using your data for a specific purpose.
5. ARCO rights and revocation of consent. You can access your data, rectify it, cancel it or object to its processing, and revoke your consent. Send your request to soporte@claqon.com with your name, a means of replying to you, the right you wish to exercise, the data it refers to and whatever is needed to prove your identity. We will reply through the same means within the time limits set by the LFPDPPP.
6. Transfers. We do not transfer your data to third parties. The providers on the list of processors process it to provide their service to us, with the safeguards indicated in the section on international transfers.
7. Changes to this notice. We will publish any change on this page, with its effective date. If a change affects a purpose that requires your consent, we will ask you for it again.

If you consider that we have not respected your rights, you can turn to Mexico’s personal data protection authority, currently the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).

Although the owner is established in Spain and applies the GDPR to everyone, we publish this notice so that anyone writing from Mexico has the information in the terms of their own law. Next to each form there is a summary of the basic information with a link to this section.

Changes to this policy

If we change this policy, we will publish the new version on this page with its effective date. If we are going to use your data for a new purpose, we will inform you beforehand, as required by Article 13(3) of the GDPR.