Privacy Policy
Last updated: 15 June 2026
This Privacy Policy explains how Quosel collects, uses, and protects personal data when you use our service for building, sharing, and publishing websites (the "Service"). We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish data protection law.
1. Data controller
The controller of your personal data is Daniel Jiménez Rivera, based in Spain. For any privacy request you can contact us at hello@quosel.com.
2. Data we collect
- Account data — your name and email address, including when you sign in with Google.
- Billing data — subscription and payment information. Payments are handled by Stripe; we do not store your full card number.
- Content data — the business information, text, and images you add, and the sites you create and publish.
- Usage and analytics data — how you interact with the Service, collected via PostHog.
- Diagnostic data — error and performance information collected via Sentry to keep the Service reliable.
- Communications — emails we send you (delivered via Resend) and messages you send us.
- Cookies and local storage — used for sign-in/sessions, your theme preference, and analytics (see section 7).
3. How and why we use your data
We use personal data on the following legal bases under Article 6 GDPR:
- To provide the Service — creating your account, generating and hosting sites, and publishing (performance of a contract).
- To process payments — managing subscriptions and billing (performance of a contract).
- To improve and secure the Service — analytics, diagnostics, and fraud/abuse prevention (legitimate interests).
- To communicate with you — service messages and support (contract / legitimate interests); marketing only with your consent.
- To meet legal obligations — such as accounting and tax requirements (legal obligation).
- Non-essential cookies and analytics — where required, on the basis of your consent.
4. Service providers and sub-processors
We share personal data with trusted providers who process it on our behalf to operate the Service:
| Provider | Purpose |
|---|---|
| Sign-in (OAuth) | |
| Stripe | Payment processing and subscriptions |
| PostHog | Product analytics |
| Sentry | Error and performance monitoring |
| Resend | Transactional email delivery |
| Cloudflare | Hosting, content delivery, and security |
| Railway | Application hosting and infrastructure |
We do not sell your personal data.
5. International transfers
Some of our providers are located outside the European Economic Area. Where data is transferred internationally, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or an adequacy decision.
6. Data retention
We keep personal data for as long as your account is active and as needed to provide the Service. After you close your account we delete or anonymise your data within a reasonable period, unless we must retain it to comply with legal obligations (for example, billing records) or to resolve disputes.
7. Cookies
We use strictly necessary cookies and local storage for authentication and to remember preferences such as your theme. We also use analytics cookies (PostHog) to understand and improve how the Service is used. Where required by law, we ask for your consent before setting non-essential cookies.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data;
- restrict or object to certain processing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting prior processing.
To exercise any of these rights, email hello@quosel.com. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es).
9. Security
We take reasonable technical and organisational measures to protect personal data, including encryption in transit. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children
The Service is not directed to children under 18, and we do not knowingly collect their personal data.
11. Changes to this policy
We may update this Privacy Policy from time to time. We will update the "Last updated" date above and, for material changes, take reasonable steps to notify you.
12. Contact
For any privacy question or request, email hello@quosel.com.