Privacy Policy

Last updated: June 2026

1. Controller

Jan Lohmer
Carrer de Bartomeu Xamena 22, 07610 Palma, Spain
info@repursa.com

2. What data we collect

We collect the following personal data:

  • Account data: email address and password hash when you create an account.
  • Usage data: number of repurposes generated per month, video IDs processed.
  • Payment data: billing details processed by Stripe. We do not store card numbers.
  • Technical data: IP address and browser type collected in server logs for security purposes.

3. How we use your data

  • To provide and operate the Repursa service (Art. 6(1)(b) GDPR — contract performance).
  • To enforce plan limits and manage your subscription (Art. 6(1)(b) GDPR).
  • To send transactional emails (account confirmation, password reset, billing) (Art. 6(1)(b) GDPR).
  • To detect and prevent abuse (Art. 6(1)(f) GDPR — legitimate interest).

4. Third-party processors

We share data with the following processors under GDPR-compliant data processing agreements:

  • Supabase (supabase.com) — authentication and database. Hosted in the EU.
  • Anthropic (anthropic.com) — AI content generation. Data transferred to the US under Standard Contractual Clauses. Only video transcripts are sent, never personal data.
  • Stripe (stripe.com) — payment processing. Certified PCI DSS Level 1. Data may be processed in the US under Standard Contractual Clauses.
  • IONOS (ionos.com) — email delivery. Hosted in the EU.

5. Data retention

Account data is retained as long as your account is active. Usage records are kept for 12 months for billing purposes. Server logs are deleted after 30 days. You may request deletion at any time.

6. Your rights

Under GDPR you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion of your data ("right to be forgotten").
  • Export your data in a portable format.
  • Restrict or object to processing.
  • Withdraw consent at any time (where processing is based on consent).

To exercise any of these rights, contact us at info@repursa.com.

7. Supervisory authority

You have the right to lodge a complaint with the Spanish data protection authority (AEPD): www.aepd.es.

8. Cookies

Repursa uses only functional cookies necessary for authentication (session token). No tracking or advertising cookies are used. No cookie consent banner is required.

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes via email or a notice on the website. Continued use of the service constitutes acceptance.