priveltoPrivacy
Last reviewed: 17 October 2026
This notice covers website visits and email enquiries. Documents opened in the desktop app are processed on your computer, rather than uploaded to this website.
Website owner and data controller
- Name or legal name
- Pablo Gallego Falcón
- Tax identification
- 35320739F
- Postal address
- Conchidos 8 - 36152 Pontevedra, Spain
- Contact
- pablo@privelto.com
Website requests and security
The server receives your IP address, request time, URL, response status and technical browser information; it may also receive a referring address. These data deliver the page or download, detect abuse and produce internal traffic statistics. The legal basis is legitimate interest in operating and protecting the service and understanding its basic use, under GDPR Article 6(1)(f). Reports mask IP addresses and omit query strings, but the original access logs are not anonymous. There is no advertising profiling or automated decision producing legal effects.
Email enquiries
If you email pablo@privelto.com, the controller processes your address, name if supplied and message to respond and manage the enquiry. This relies on legitimate interest in answering correspondence; legal duties apply when a request concerns data-protection rights. Providing contact information is voluntary, but a reply may be impossible without it. Send only necessary information and use fictional or redacted examples, especially for student, health or other sensitive information.
Retention
Access logs rotate daily or when they reach the configured size limit. The server keeps the current log and 30 rotated files; this is a rotation limit, not a guarantee of exactly 30 calendar days. The web-server diagnostic log is also limited by size. Relevant incident evidence may be isolated for the time necessary to investigate or meet legal obligations.
Email is kept while handling the enquiry and afterwards only where needed for applicable legal obligations or establishing, exercising or defending claims. The criterion is the purpose of the correspondence and the applicable limitation period, rather than indefinite reuse for marketing.
Recipients, hosting and transfers
The website and project email use self-managed services on Oracle Cloud infrastructure in Frankfurt, Germany. Access is limited to the controller, authorised technical administration, infrastructure providers where necessary and public authorities when legally required. Data are not sold to advertisers.
Oracle is a global infrastructure provider, so an EEA hosting region does not rule out access from other countries. Its applicable data-processing terms and international-transfer safeguards are available through the references below; request a copy or information about safeguards from pablo@privelto.com.
Your rights
Contact pablo@privelto.com to request access, rectification, erasure, restriction, portability where applicable or to object to processing based on legitimate interest. You may withdraw consent if a future optional processing activity relies on it. Requests are normally answered within one month; any permitted extension will be explained. Identity information will be requested only when reasonably necessary. You may complain to the Spanish Data Protection Agency (AEPD) or your competent supervisory authority.
Desktop app and outside services
This website cannot access documents opened in Privelto. The person or organisation using the app remains responsible for the lawful handling of those documents and the outputs. Local logs, models and preferences remain subject to the security and retention choices on that computer.
Downloading models or runtime files in the app connects to the providers listed in its manifest, including Hugging Face and GitHub. They receive the connection data needed for that download, not the documents being processed. Offline model import is available. Following external source or provider links also establishes a separate connection to that provider.