Privacy Policy and Data Protection (GDPR)

Data Controller

• Name: Legal identity of the controller: pending owner confirmation. Zero101OSINT identifies the project, not a verified legal entity.
• Address: Full legal address: pending owner confirmation.
• Email: contacto@zero101osint.com
• Phone: +34 600 533 823

Purpose of Processing

Handle inquiries and evaluation requests; record and deliver guides or documents; manage accounts and access. The code also includes payment and notification integrations. Google Analytics audience measurement only loads after analytics opt-in. Submitting a request does not authorize advertising.

Data: depending on the form, name, email, phone, company, role, message or request context. Download records may include document reference, language, acceptance and browser or request technical data. Accounts use email and access credentials. The complete technical-log and recipient inventory awaits owner validation.

Legal Basis

Optional analytics: prior consent, withdrawable through Cookie settings. The specific legal basis for inquiries, downloads, accounts and payments awaits owner confirmation; consent is not assumed for every processing purpose.

Recipients

The code uses Lovable Cloud for data, accounts and storage, Resend for email, and Stripe in payment integrations. Inquiries go to the configured management mailbox, including a Gmail mailbox. Google Analytics receives browsing data after analytics consent. Google Fonts serves fonts and receives browser requests. Providers’ contractual identities, processing agreements, locations and any international transfers and safeguards await owner verification. Data is not claimed to be anonymous or to remain exclusively in the EU.

User Rights

You have the right to access, rectify and delete data, as well as other rights recognized by the GDPR (portability, limitation of processing, opposition). You may withdraw consent where it is the legal basis, without affecting prior lawful processing, and lodge a complaint with the Spanish Data Protection Agency (AEPD).

You can exercise these rights by sending an email to contacto@zero101osint.com.

Data Retention

Pending owner completion: retention periods or criteria for inquiries, downloads, accounts, payments and technical records. Automatic deletion has not been verified for all these data. Withdrawing analytics consent blocks new measurement and removes accessible analytics cookies on this domain; it does not automatically erase data already received by Google.

Security

Reviewed forms and functions include input validation; restricted downloads use temporary signed links. This is not an absolute security guarantee. Organisational measures and processing records must be confirmed by the owner.