Controller and contact
Controller: MYSERVEAI TECHNOLOGIES SL, NIF/CIF B23836711, address Calle Nerine 1, 28019 Madrid, Spain and privacy email contacto@kintavor.com. Sales will not be enabled until these details are complete and verified.
Data and purposes
Se tratan los datos estrictamente necesarios para responder consultas, gestionar cuentas, verificar correo, procesar pagos, activar y mantener accesos, conservar progreso, vincular un navegador, prestar soporte, prevenir abuso, cumplir obligaciones y atender derechos.
- Identification and contact: name, email and voluntarily supplied details.
- Account and security: password hash, sessions, browser/system declared by the user agent, blocks and audit trail.
- Purchase: references, amount, currency, status and necessary tax details; KINTAVOR does not receive full card numbers.
- Learning: progress, attempts, answers, bookmarks, lab and error notebook.
- Tutor: minimised question, references used, tokens and cost; users are warned not to enter secrets or confidential information.
- Measurement: UTM and events without personal information, only after the applicable consent.
Legal bases
Performance of the contract provides the legal basis for the account, access, progress, support and billing. Legal obligations justify tax retention, fraud prevention and responding to rights requests. Legitimate interests may support security, auditing and defending claims following a balancing assessment. Consent is used for non-essential cookies and marketing communications where applicable.
Providers and transfers
Providers may include Hostinger (hosting), Stripe (payments), the SMTP provider (email), Google (measurement/advertising only with consent) and OpenAI (tutor only when enabled). Before production, the actual providers, contracts, locations, safeguards and applicable international transfers must be documented. Personal data is not sold.
Retention and deletion
Accounts and progress are retained during access and for a limited period for support and defence of claims. Billing and transaction data is retained for statutory periods. Expired tokens, codes and rate limits are purged on short schedules. Tutor questions are minimised or anonymised according to configuration. An erasure request does not remove information that must be blocked or retained under a legal obligation.
Rights
You can request access, rectification, erasure, objection, restriction, portability and exemption from automated decisions where applicable by writing to contacto@kintavor.com and identifying your request. You can also complain to the Spanish Data Protection Agency after contacting the controller.
Security and decisions
Password hashing, encryption in transit, secure sessions, CSRF, prepared queries, attempt limits, role-based administrative access control, auditing and backups are applied. The indicative educational level has no legal effect and is not an official certification decision.