Privacy Policy

1. Data controller Antonio Martínez Motos (Tax ID ES14310960S), based at Calle Diputada Ángela Llinares 4, Villajoyosa, Alicante, Spain, is the controller responsible for personal data collected through AllySwap. You can contact the controller at info@allyswap.com. 2. Data we collect When you register and use AllySwap, we may collect: - Registration data: email and password (stored encrypted, never in plain text). - Profile data: artist name, bio, nationality, profile photo, Spotify profile link, playlist link, Instagram link (if provided). - Service usage data: proposed, accepted, or completed Swaps, credits, reputation history. - Communications: messages sent through the contact form (name, email, and message content). - Technical data: IP address and connection data automatically collected by the hosting infrastructure for security and service operation purposes. 3. Purpose of processing We process your data to: - Create and manage your user account. - Enable the matching and Swap system between artists. - Manage the credit and reputation system. - Respond to inquiries submitted through the contact form. - Send communications strictly necessary for the service (e.g., password recovery). - Comply with legal obligations. We do not use your data for marketing purposes and do not send commercial communications. 4. Legal basis The legal basis for processing your data is: - Performance of the service agreement you accept upon registering (Article 6.1.b GDPR). - Your explicit consent, given via the acceptance checkbox on the relevant forms (Article 6.1.a GDPR). - The controller's legitimate interest in ensuring the Site's security. 5. Data retention We retain your personal data for as long as you keep your AllySwap account active. If you delete your account from your profile, your personal data and associated history are removed from our systems, except for information we must keep due to legal obligations. Messages sent through the contact form are kept in the controller's inbox for as long as necessary to handle the inquiry. 6. Recipients and international transfers Your data is not shared with third parties except where legally required. We use the following providers to deliver the service, acting as data processors: - Railway (application and database hosting). - Resend (transactional emails: password recovery and the contact form). These providers may be located outside the European Economic Area. In such cases, the transfer is covered by GDPR safeguards (standard contractual clauses or equivalent mechanisms required by those providers). 7. Your rights You can exercise your rights of access, rectification, erasure, objection, restriction of processing, and data portability at any time by writing to info@allyswap.com or by deleting your account directly from your profile. You also have the right to file a complaint with the Spanish Data Protection Agency (www.aepd.es) if you believe the processing of your data does not comply with applicable law. 8. Security measures We apply appropriate technical and organizational measures to protect your personal data, including password encryption and secure connections (HTTPS).