Legal

Privacy Policy

Last updated: 5 August 2026

At Ventosum we treat your data with the same care we'd want for our own. This page explains, plainly, what information we collect, why we use it and what control you have over it.

1. Who is responsible for your data

The data controller responsible for your personal data is:

• Controller: David Andueza Ferro
• Project: Ventosum (ventosum.es)
• Location: Navarre, Spain
• Privacy contact: privacidad@ventosum.es

2. What data we process and why

Waiting list

If you sign up to be notified when Ventosum launches, we store your email address. We use it only to let you know when the service is available. We don't sell it to third parties for commercial purposes or send you other companies' advertising.

Your account and use of the service

When you create an account and connect your Google Ads account, we process:

• The identifier of the Google account you sign in with.
• The access credentials (tokens) Google provides so we can act on your behalf, which we store encrypted.
• The data from your Google Ads account needed for the service: campaigns, ads, budgets and performance metrics (impressions, clicks, spend, results by day and by country).

We use this data for one purpose only: to provide the service — that is, to create, publish, display and manage your ads and show you their performance in your dashboard.

Support and communications

If you contact us, we keep the content of your message and your email address so we can help you and keep a record of the conversation.

3. Use of data obtained from Google APIs

To connect your Google Ads account, Ventosum accesses data through Google APIs, with your express prior authorisation.

Ventosum's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Specifically:

• We only use Google data to provide and improve the features you see in Ventosum.
• We do not transfer that data to third parties except where strictly necessary to provide the service, to comply with the law, or with your consent.
• We do not use Google data for our own or third-party advertising.
• No human reads your Google data, unless you authorise it, it is necessary for security or to comply with the law, or the data is aggregated and anonymised.

You can revoke Ventosum's access to your Google account at any time from your Google account settings or from your dashboard in Ventosum.

4. Legal basis for processing your data

• Your consent: when you join the waiting list and when you connect your Google account.
• Performance of a contract: to provide the service you requested when creating your account.
• Compliance with legal obligations: for example, tax or invoicing obligations where applicable.

5. How long we keep your data

• Waiting list: until Ventosum launches or until you unsubscribe, whichever comes first.
• Account and Google data: while your account is active. If you close it or revoke access, we delete the Google credentials and associated data, except what we must keep by law.
• Support: for as long as needed to handle your query and any applicable legal periods.

6. Who we share your data with

We don't sell your data. To operate, Ventosum relies on trusted providers that act as data processors and only access what is strictly necessary:

• Google — advertising platform (Google Ads) and email (Google Workspace).
• Render — hosting of the application and the database.
• Hostinger — domain and DNS management.

Some of these providers may process data outside the European Economic Area. In those cases, the transfer is carried out with the appropriate safeguards required by the GDPR (such as the European Commission's standard contractual clauses or adequacy decisions).

7. How we protect your data

We apply reasonable technical and organisational measures to protect your information. Among others, Google access credentials are stored encrypted with AES-256-GCM, and all communication with the website travels encrypted over HTTPS.

8. Cookies

Ventosum uses only necessary technical cookies to keep your session securely signed in. We don't use advertising or third-party tracking cookies. If we add analytics in the future, we'll update this policy and let you know.

9. Your rights

You can exercise your rights of access, rectification, erasure, restriction, portability and objection at any time, as well as withdraw your consent where you have given it. To do so, write to us at privacidad@ventosum.es.

If you believe we haven't handled your request properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).

10. Changes to this policy

We may update this policy to reflect changes in the service or in the law. When we do, we'll change the "last updated" date and, if the change is significant, we'll let you know.