OLSUM application privacy

Version 2026-10-18-v1. Date: 18 October 2026.

1. Controller and scope

Fernando Donate Pardo, sole trader (self-employed), Spanish tax ID 21004295M, trading as OLSUM. Carrer Verge del Pilar 6, Picanya, Valencia, Spain. Contact: hello@olsum.es. This information covers app.olsum.es, including account holders managing jobs and people receiving links to complete them. The marketing website and contact form are covered by the website privacy policy.

2. Accounts and the relationship with OLSUM

We process email and sign-in credentials, name and, if supplied, company, phone and logo. We also process plan information, subscription and payment identifiers and status, and evidence of terms acceptance (user, version, context, plan and date where applicable). Purposes are account creation and security, service provision, contract management, support, complaints and tax and legal obligations. Legal bases are contract performance or requested precontractual steps (GDPR Art. 6(1)(b)), legal obligations (Art. 6(1)(c)) and legitimate interests in security and handling legal claims (Art. 6(1)(f)). Reading this policy is not general consent or a marketing subscription.

3. Jobs, people and worker links

Users may enter work groups, worker or collaborator names and contact details, tasks, instructions, checklist responses, notes, photographs, hours and corrections, dates and reports. When a business or professional uses OLSUM for other people’s data in its activity, that customer determines the purposes and acts as controller; OLSUM processes the data on its behalf to provide the service. The data processing annex governs this relationship.

If you receive a job link, your answers and files are provided to the person or organisation assigning it. Ask them for their identity, legal basis and how to exercise your rights. You do not need an account or subscription to respond. Do not include sensitive data, identity documents, health information or unnecessary images of people. The business must inform you and have a valid legal basis; employee consent is not presumed to be the appropriate basis in every case.

4. Providers, recipients and transfers

The application uses Lovable Cloud for hosting, authentication, database and storage, with Supabase technology. Photos are held in private storage and the code uses temporary access links. Stripe processes payments: OLSUM receives transaction identifiers and status, not full card numbers. Google Fonts serves fonts and receives technical connection data. Email support uses DonDominio and messages from the website form use Resend. Authorities or advisers may receive data where legally required or justified.

These services may involve processing or access outside the European Economic Area. We do not guarantee that all data is hosted in Spain or the EU. Transfers must rely on appropriate GDPR safeguards, including adequacy decisions or standard contractual clauses. Ask hello@olsum.es for information and a copy of relevant safeguards. Provider information: Lovable processing terms, Lovable subprocessors, Stripe, DonDominio and Resend. Listing providers does not assert that an audit has been performed or a particular hosting region contracted.

5. Retention and deletion

Account data is kept during the service relationship and afterwards as necessary for legal obligations and liabilities. Jobs and files remain while the customer keeps them in the account; the customer may manage them and request return or deletion under the processing annex. Cancelling a subscription does not delete the account. To avoid charges continuing without an associated account, automatic account deletion is blocked while a subscription has not ended, payments remain outstanding or that status cannot be verified; contact hello@olsum.es to handle your request and exercise your rights.

Invoices, records and contract evidence may be retained during statutory liability periods after account deletion. No unverified automatic deletion date is promised for provider technical logs or backups; requests are handled according to purpose, legal duties and security cycles. Acceptance evidence is not automatically erased on cancellation; its retention and eventual deletion are limited to the contractual and legal purposes above.

6. Browser storage and security

The app stores language and information needed to maintain your session; it may use temporary storage to recover page loading after errors. These mechanisms support requested access and operation. No advertising or optional analytics are introduced by this update. Anyone holding a job link may use it to respond: share links only with intended recipients and do not publish them. Never send your password or full banking details to support.

7. Rights

You may request access, rectification, erasure, objection, restriction and portability where applicable by writing to hello@olsum.es or the address above. For data entered by a customer organisation, address the request to that organisation; OLSUM can forward it and assist. Additional identification is requested only where necessary. The general response period is one month, subject to justified statutory extensions. You may complain to the Spanish Data Protection Agency or another competent authority. Where specific processing relies on consent, you may withdraw it without affecting earlier lawful processing. OLSUM does not use job data for automated decisions with legal effects or commercial profiling.