Privacy Policy

Last updated: 21/10/2026

1. Who is responsible for processing your data?

The entity responsible for processing your personal data is Zexel Software, S.L. (hereinafter, “ZEXEL”), with Tax Identification Number B06910483 and registered address at Calle Ventura Rodríguez 16, 3H, 29009 Málaga, Spain, registered in the Commercial Registry of Valencia, Volume 11016, Folio 19, Sheet V-199217.

This Privacy Policy governs the access to and use of the website (hereinafter, the “Website”) that ZEXEL makes available to internet users (hereinafter, “Users”) interested in the content (hereinafter, the “Content”) and services (hereinafter, the “Services”) offered on it.

Contact email: privacy@zexel.io

2. Recommendations

Please read and follow these recommendations carefully:

– Keep your device protected with up-to-date antivirus software against malware and spyware that may put your browsing and the information stored on your device at risk.
– Read and review this Privacy Policy and all the legal texts that ZEXEL makes available on the Website.

3. What data does ZEXEL collect?

To provide the Services, ZEXEL may process the following data provided by the User:

– First and last name
– Email address
– Mobile phone number
– Postal address
– Tax identification number and tax residence
– Identity document (for verification purposes)
– Image
– Banking and financial data
– Social media profiles

4. For what purposes and on what legal basis do we process your personal data?

– Management of contracts with creators and companies: performance of a contract (Art. 6.1.b GDPR).
– Processing payments and invoicing: performance of a contract (Art. 6.1.b GDPR) and compliance with a legal obligation (Art. 6.1.c GDPR).
– Communication with creators and companies: performance of a contract (Art. 6.1.b GDPR).
– Verification of identity and tax details: compliance with a legal obligation (Art. 6.1.c GDPR).
– Management of the commercial relationship: legitimate interest (Art. 6.1.f GDPR).
– Compliance with tax obligations: compliance with a legal obligation (Art. 6.1.c GDPR).
– Performance and satisfaction evaluation: legitimate interest (Art. 6.1.f GDPR).
– Sending updates and notifications: legitimate interest (Art. 6.1.f GDPR) or consent (Art. 6.1.a GDPR).
– Record-keeping and audits: compliance with a legal obligation (Art. 6.1.c GDPR).
– Dispute resolution and claims management: legitimate interest (Art. 6.1.f GDPR).

5. Accuracy of the data provided by Users

The User guarantees that the personal data provided is accurate and undertakes to notify ZEXEL of any changes to it. The User is responsible for the accuracy of the data provided, and ZEXEL reserves the right to exclude from the Services any User who has provided false data, without prejudice to any other legal actions that may apply.

We recommend that Users protect their data with the utmost care, using appropriate security tools.

Any change or update to the data must be communicated to ZEXEL through the contact details provided in this Privacy Policy.

6. How long do we keep your data?

– Data provided through the contact form: kept for as long as necessary to handle and resolve your enquiry and, afterwards, for a maximum of one year to follow up on it.
– Data provided through WhatsApp: kept for as long as necessary to handle and resolve your enquiry or request and, afterwards, for a maximum of one year to follow up on it.
– Data relating to commercial and promotional communications: kept until the User asks for it to be deleted or withdraws their consent.
– Data needed to comply with legal obligations (including tax and invoicing data): kept for the period established by applicable legislation.

In all cases, when you unsubscribe, object to receiving promotional information and updates, or withdraw your consent, your data will be blocked for the legally applicable periods in case of claims and then deleted once those periods have ended.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing, data portability, withdrawal of consent and not to be subject to automated individual decisions by writing to privacy@zexel.io or by post to Calle Ventura Rodríguez 16, 3H, 29009 Málaga, Spain. Please state which right you wish to exercise and include a document that allows us to identify you unequivocally.

You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Data security

Protecting Users’ privacy and personal data is very important to ZEXEL. ZEXEL has taken all measures available to it to prevent your data from being misused, and only authorised personnel can access it.

ZEXEL maintains appropriate security measures to protect personal data in accordance with applicable legislation and has put in place all technical means available to it to prevent the loss, misuse, alteration, unauthorised access and theft of the data provided by the User through the Website. Please note, however, that security measures on the internet are not impregnable.

ZEXEL is committed to complying with its duty of secrecy and confidentiality regarding personal data in accordance with applicable legislation.

ZEXEL will not be liable for any damage resulting from a breach of this obligation by the User.

9. Disclosures to third parties and international transfers

To provide the Services, ZEXEL may disclose Users’ data to:

– The companies that work with creators, to the extent necessary to manage and invoice each collaboration.
– The regulated payment providers and banks that process payments to creators.
– Public authorities, including the Spanish Tax Agency, when required by law.

ZEXEL also uses service providers (data processors) that are essential for the operation of the platform, such as those used to send communications or updates to the User. ZEXEL has put appropriate contractual measures in place with them to protect your personal data. If any of these providers is located outside the European Economic Area, ZEXEL will ensure that the processing offers adequate safeguards, either because the provider is located in a country declared adequate by the European Commission or through any other mechanism provided for in the GDPR, such as standard contractual clauses.

Our team and the collaborators who work for or with ZEXEL are bound to keep confidential the personal data they have access to.

10. Questions

If you have any questions about this Privacy Policy, please write to privacy@zexel.io.

11. Acknowledgement

The User declares that they have been informed of the conditions regarding the protection of their personal data, in the manner and for the purposes described in this Privacy Policy.