Privacy Policy

1. Data controller

Amazing Media, Spain. Contact for all privacy matters: hello@amazingmedia.net.

2. What we collect

• Board entries: the name/title and handle you submit when claiming a position (public by design).
• Payment data: processed by Stripe; we receive your email, payment status and amount — never card numbers.
• Referral credits: the handle you share links under, and visit counts (no cross-site tracking).
• Technical logs: IP address and request metadata, processed for security and abuse prevention (legitimate interest, Art. 6(1)(f) GDPR), retained max 90 days.
• Cookies: strictly necessary only (session security). No advertising or third-party tracking cookies.

3. Why we process it

To provide the service you requested (contract performance, Art. 6(1)(b)), to comply with tax and accounting law (Art. 6(1)(c)), and to secure the platform (legitimate interest, Art. 6(1)(f)).

4. Processors

We use: Cloudflare (hosting/CDN, EU + global edge), Supabase (database/auth, EU region eu-central-1), Stripe Payments Europe (payments). All are GDPR-compliant processors under data-processing agreements.

5. Your rights

You can request access, correction, deletion, restriction, portability of your data, and object to processing. Write to hello@amazingmedia.net — we respond within 30 days. You also have the right to complain to the Spanish DPA (AEPD, aepd.es).

6. Retention

Public board entries are kept while the board is active. Payment records are kept 10 years as required by Spanish tax law. Security logs 90 days.

7. Opt-out / removal

Want your board entry removed? Email hello@amazingmedia.net with the board name and your handle — removal is honored promptly.