Privacy policy

1. Data controller

The data controller responsible for your personal data is closego SL, with tax ID B76123456, registered address at C/ Triana 42, 35002 Las Palmas de Gran Canaria (Spain), and registered in the Mercantile Registry of Las Palmas.

You may contact our Data Protection Officer (DPO) at any time by writing to [email protected]. For general privacy enquiries you may also write to [email protected].

2. Data we collect

We collect different categories of data depending on how you interact with closego:

• Registration and account data: name, email address, company or business group name, and password (stored in encrypted form). This data is necessary to create and manage your account.
• Usage data: activity logs within the platform (actions performed, checklists completed, tasks updated, etc.) to ensure the correct operation of the service and improve the user experience.
• Technical data: IP address, browser type and version, operating system, pages visited, and access timestamps. Collected automatically for security and diagnostic purposes.
• Billing data: information required to process payment for your subscription plan (cardholder name, card details or direct debit information). This data is managed by our payment provider and we do not store full card numbers on our servers.
• Communications: when you contact us by email or through the demo request form, we retain the content of your message in order to respond and follow up.

3. Purpose of processing

We use your data for the following purposes:

• Service delivery: creating and managing your account, providing access to the platform, processing payments, and sending service-related communications (invoices, maintenance notices, changes to terms).
• Product improvement: analysing aggregated and anonymised platform usage to identify issues, prioritise features, and improve the accounting close experience.
• Commercial communications: if you give us your explicit consent, we may send you product updates, use cases, and relevant content. You may withdraw this consent at any time from your profile or by emailing [email protected].
• Security and compliance: preventing fraudulent use, protecting the integrity of our customers' data, and meeting legal obligations.

4. Legal basis for processing

The processing of your data is based on the following legal grounds:

• Contractual performance (Art. 6.1.b GDPR): processing of registration, usage, and billing data is necessary to provide the service you have contracted.
• Legitimate interest (Art. 6.1.f GDPR): processing of technical data for security, diagnostics, and product improvement is based on our legitimate interest in providing a reliable and secure service.
• Consent (Art. 6.1.a GDPR): commercial communications are sent only with your prior, express, and informed consent.

5. Data retention

We retain your data for the entire duration of your account. When you cancel your subscription, we keep your data for 30 additional days so that you can export your information before permanent deletion. After that period, we proceed to the permanent and irrecoverable deletion of all your data from our servers and backups.

Billing data is retained for the period required by applicable tax law (currently 5 years from the date of invoice issuance).

6. Your rights (GDPR)

As a data subject, you have the following rights over your personal data:

• Access: you may request a copy of the personal data we process about you.
• Rectification: you may correct inaccurate or incomplete data.
• Erasure: you may request the deletion of your data when it is no longer necessary for the purpose for which it was collected.
• Portability: you may receive your data in a structured, commonly used, and machine-readable format.
• Objection: you may object to processing based on legitimate interest or to receiving commercial communications.
• Restriction: you may request that we temporarily suspend processing while a complaint is being resolved.

To exercise any of these rights, write to [email protected] stating your name, account email, and the right you wish to exercise. We will respond within a maximum of 30 days. If you believe that processing is not compliant with the GDPR, you may also lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7. International transfers

Your data is hosted on infrastructure located within the European Union. When we use cloud service providers with a presence outside the European Economic Area (EEA), we ensure that adequate safeguards for the transfer are in place, in particular through the execution of Standard Contractual Clauses approved by the European Commission or the verification of applicable adequacy decisions.

Infrastructure and service providers that may process data on your behalf are subject to data processing agreements (DPAs) that guarantee the same level of protection required by the GDPR.

8. Cookies

closego uses strictly necessary first-party cookies for the operation of the platform (authentication, security) and, with your consent, analytical cookies to improve the service. For detailed information about the cookies we use and how to manage them, please see our Cookie policy.

9. Changes to this policy

We may update this privacy policy when necessary to reflect changes to the service, applicable regulations, or our data processing practices. If we make material changes, we will notify you by email with at least 30 days' notice before the effective date. Your continued use of closego after that date constitutes acceptance of the updated policy.

The version prior to any update will always be available upon request to [email protected].