Who Controls Your Data
For the current MVP phase, Recala acts as the data controller for information collected through recala.co, including account credentials, onboarding inputs, publishing settings, and operational logs. If you need to exercise privacy rights during this phase, contact the team at hello@recala.co.
What We Collect
- Account data such as email address and authentication status.
- Onboarding and workspace data such as brand inputs, WordPress connection choices, and publishing preferences.
- Generated editorial data such as topics, outlines, drafts, thumbnails, and publish status.
- Technical and security data such as server logs, error traces, and anti-abuse signals.
Why We Process It
- To create, review, store, and publish authority content on your behalf.
- To authenticate users, secure workspaces, and prevent abuse.
- To operate support, troubleshoot incidents, and improve service reliability.
- To comply with legal obligations and maintain auditable operational records.
Legal Bases
- Performance of a contract or pre-contractual measures when you request or use the service.
- Legitimate interests in securing the platform, preventing misuse, and improving reliability.
- Legal obligations where retention or disclosure is required by law.
- Consent if non-essential analytics or marketing technologies are enabled later.
Processors and International Transfers
Recala currently relies on infrastructure and processor services including Supabase for database and authentication, Netlify for web hosting and delivery, Google Gemini for AI content-generation tasks, and WordPress when you connect your CMS for publishing. These providers may process data outside Spain or the EEA under their contractual safeguards.
Retention
We keep account and workspace data for as long as your workspace remains active and for a limited period afterward where needed for security, support, and legal recordkeeping. If you disconnect a CMS or delete a workspace, we will remove or anonymize data unless retention is required for legal claims or security investigations.
Your Rights
Where applicable, you may request access, rectification, deletion, restriction, portability, or objection. You may also lodge a complaint with the Spanish Data Protection Authority if you believe your rights have been infringed.
Cookies and Analytics
The current MVP uses essential authentication-related cookies needed to keep users signed in. No non-essential analytics script is loaded in the public site at the time of this update. If privacy-friendly analytics such as Simple Analytics are enabled later, this policy and the cookie policy will be updated, and consent will be collected whenever required under Spanish and EU rules.