GDPR · LOPDGDD
Privacy Policy.
Last updated: May 15, 2026
At Soogus, we believe that personal data is a sovereign extension of the individual. This Privacy Policy describes in a precise and comprehensive manner how we process your data, in full conformity with the Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 (LOPDGDD).
1. Data Controller
Identity: Soogus S.L.
NIF / Tax ID: B88776655
Address: Calle Colón, 1, 46004 Valencia, Spain
Privacy Officer Contact (DPD/DPO): legal@soogus.com
2. Personal Data We Process
We process only the data strictly necessary to provide the service:
| Category | Data | Source |
|---|---|---|
| Identification | Full name, email address, profile picture | Authentication provider (Google/Apple) |
| Professional Profile | Specialization, biography, avatar URL | Provided by the user |
| Content | Manuscripts, comments, interactions | Generated by the user |
| Platform Usage | Readings, bookmarks, followers, engagement metrics | Activity on the platform |
| Monetization | Stripe account identifier (no card details) | Payment platform (Stripe) |
| Technical | IP address, browser type, session timestamps | Automatic when using the service |
We do not process special categories of data (health data, ideology, religion, sexual orientation) under Article 9 GDPR.
3. Purposes of Processing and Legal Basis
a) Execution of the service contract (Art. 6.1.b GDPR)
Management of the user account, publication of manuscripts, access control, and comment and interaction services. This legal basis does not require specific consent since it is necessary to provide the requested service.
b) Legitimate interest of the controller (Art. 6.1.f GDPR)
Security of the platform and prevention of fraud, moderation of illegal content, and service improvement through aggregated and anonymized usage metrics.
c) Express consent (Art. 6.1.a GDPR)
Marketing communications, editorial newsletters, and the use of anonymized data to improve the platform's artificial intelligence models (Soogus Intelligence). You can withdraw this consent at any time from your settings.
d) Compliance with legal obligation (Art. 6.1.c GDPR)
Preservation of accounting records for the minimum legal period (4 years under Spanish tax legislation), and response to requirements from competent authorities.
4. Retention Periods
Data will be kept for the following periods:
- Active Account Data: For the duration of the contractual relationship and up to 30 additional days after voluntary cancellation to facilitate account recovery.
- Published Content: Kept according to the decision of the author. Can be deleted via deletion request.
- Accounting and Billing Data: 6 years in accordance with Article 30 of the Code of Commerce.
- Security Logs: Maximum of 12 months, in compliance with Law 34/2002 (LSSI-CE) and cybersecurity regulations.
- Consent Data: Kept until consent is withdrawn or up to 3 additional years for proof of compliance.
5. Your Rights (ARSULIPO)
Under the GDPR and LOPDGDD, you can exercise the following rights at any time by sending a request to legal@soogus.com with a copy of your identity document:
You have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) —www.aepd.es— if you consider that the processing of your data violates current regulations.
6. International Data Transfers
Soogus uses Google Cloud / Firebase infrastructure, whose servers may be located outside the European Economic Area (EEA), including the United States. These transfers are covered by:
- Standard Contractual Clauses (SCC) approved by the European Commission (Implementing Decision 2021/914).
- EU-U.S. Data Privacy Framework in force since July 2023.
Likewise, payments are managed through Stripe, Inc., which operates under the same framework of guarantees. Under no circumstances is personal data sold to third parties.
7. Cookies and Tracking Technologies
Soogus uses strictly necessary technical cookies for the operation of the service (Firebase authentication) which do not require consent, and optional cookies (analytics, preferences) that are only activated with your express consent. Check our Cookie Policy for complete information.
8. Artificial Intelligence and Transparency
In compliance with Regulation (EU) 2024/1689 (AI Act), Article 50, all content significantly generated or assisted by artificial intelligence models on the platform is identified with the label "Generated by Soogus Intelligence"and carries machine-readable metadata (C2PA/IPTC standard) for automated verification. Your personal data is never used to train external AI models without your express and specific consent.
Soogus · GDPR & LOPDGDD Compliant · DPA Reference DPA-2026-VAL-9923