Last updated: 28 August 2026
Privacy policy
This policy describes data processing for the site, free resources, purchases and student accounts.
1. Data controller
Controller: MYSERVEAI TECHNOLOGIES SL. CIF: B23836711. Address: Calle Nerine 1, 28019 Madrid, Spain. General email: contacto@kintavor.com. Privacy email: formacion@kintavor.com. Company registration details: awaiting documentary verification; no volume, folio, register sheet or registry is published without official supporting evidence.
2. Data processed
- Account and purchasing: first name, surname, email, internal identifiers, product, price, payment status and validity period. KINTAVOR does not store complete card details.
- Learning: progress, answers, results, errors, notes, bookmarks, certificates and tutor use.
- Security: a truncated or protected IP address where feasible, browser user agent, device identifier, sessions, login attempts and audit events.
- Support: messages and metadata required to handle an enquiry.
- Cookies and consent preferences: only in accordance with the recorded choice; no advertising analytics are active.
3. Purposes and legal bases
| Purpose | Legal basis | Retention |
|---|---|---|
| Create and maintain the account, deliver the course and provide support | Performance of the contract | During access and the applicable statutory periods |
| Invoicing, tax obligations and consumer rights | Legal obligation and contract | During the applicable statutory periods |
| Security, fraud prevention, authorised device and audit | Legitimate interests and the duty to maintain security | For as long as necessary according to the documented risk |
| AI tutor requested by the student | Performance of the service | According to the configuration communicated in the account |
| Non-essential marketing communications | Consent, which may be withdrawn | Until withdrawal or erasure |
| Non-essential analytics | Consent | According to the provider and cookie panel settings |
4. Processors, recipients and transfers
Depending on the function requested, hosting, email, payment and support providers, and the AI tutor service, may be involved. KINTAVOR maintains applicable agreements and safeguards with the relevant processors.
Disclosed configuration: hosting, Hostinger (hosting).; email, Hostinger (email).; payments, Stripe (payments).; AI tutor, OpenAI is disabled. No data is sent to the provider. The original optional tutor can be configured separately.; analytics, No third-party advertising analytics tools are enabled..
Stripe processes payments under its own applicable notices and roles. Data will not be disclosed except where legally required or where there is a documented need to provide the service.
5. AI tutor and data that must not be submitted
The tutor is limited to educational support. It must not receive passwords, API keys, tokens, sensitive real configurations, non-public business addresses, customer data or secrets. Interface notices must remind users of this before each submission.
No automated decisions with legal or similarly significant effects are envisaged. The readiness score is educational and does not determine employment, certification or access to rights.
6. Rights
You may request access, rectification, erasure, restriction and portability, object to processing, and withdraw consent without affecting earlier processing. Write to formacion@kintavor.com and state the right you wish to exercise. Additional information to verify your identity will be requested only where necessary and proportionate.
You may also complain to the Spanish Data Protection Agency at https://www.aepd.es/.
7. Security, minors and changes
Access controls, strongly encrypted passwords, secure sessions, limited logging, backups and incident procedures are used. No measure eliminates all risk.
The service is not specifically directed at minors. Applicable policy: This service is intended for adults. Special categories of personal data are not requested. Do not enter health data, trade secrets or information that identifies third parties.. Material changes to this policy will be communicated by an appropriate means.
Sources and date accessed
- Regulation (EU) 2016/679 (GDPR) · accessed 2026-08-28
- Organic Law 3/2018 (LOPDGDD) · accessed 2026-08-28
- Law 34/2002 (LSSI-CE) · accessed 2026-08-28
- Royal Legislative Decree 1/2007 (TRLGDCU) · accessed 2026-08-28
- AEPD — Guide on the use of cookies · accessed 2026-08-28