GarBarPrivacy
Privacy policy
How GarBar handles information when you visit our company website or contact us. TaskFlow and Lucid Saga have their own privacy policies for their apps and services.
1. Who is responsible
GarBar is the public brand of GARBAR, IN-TEC, S.L., NIF B56760374, with registered address at Carrer Sant Antoni Mª Claret, 24, 3ª planta, 08037 Barcelona, España. We are responsible for the personal information handled for this company website and our company correspondence. Our full register details are available on the company information page.
For privacy questions and requests, write to info@garbar.tech or to our registered address. You do not need to use a particular form or subject line. This notice explains processing; visiting the website is not blanket consent to unrelated data use.
2. What this policy covers
These pages introduce the company and link to our products. They do not provide TaskFlow’s task capture or Lucid Saga’s storytelling service. Product accounts, recordings, stories, files, subscriptions and product support are described in each product’s own policy. Following a product link does not automatically create an account or send it the contents of an email to us.
3. Information handled
Website delivery and security involve technical connection information such as IP addresses, requested URLs, request times, browser information and error or abuse signals. If you email us, we receive your address, any name or contact details you provide, the message and any attachments you choose to send. Only information necessary to answer your enquiry is needed; avoid sending passwords, payment-card details or unnecessary sensitive information.
The company pages have no contact form, advertising trackers, marketing analytics, app-account database or AI submission feature. If a private version of the website requires ChatGPT sign-in, the hosting platform handles authentication under its own account and privacy rules. We do not receive your ChatGPT password.
4. Purposes and legal bases
We handle ordinary company enquiries and protect the website on the basis of our legitimate interests in answering correspondence, maintaining availability and preventing abuse (GDPR Article 6(1)(f)), balanced against your rights. If you request steps toward a contract, the necessary correspondence may instead rely on Article 6(1)(b). Legal obligations, including handling data-rights requests and required records, rely on Article 6(1)(c).
We do not sell personal information or use correspondence for advertising profiles. We do not make decisions about you with legal or similarly significant effects through automated processing. Any optional purpose requiring consent would need its own information and choice; this policy itself does not provide that consent.
5. Providers and recipients
Google Workspace handles the company mailbox, including receiving, storing and replying to messages and attachments. The public website is hosted on Google Cloud Run in Madrid, Spain, with Cloudflare providing DNS, HTTPS delivery and connection protection. These providers handle the technical information needed for those functions. Their notices explain processing for their own security and legal obligations. No account or sign-in is needed to visit the public website.
Access to correspondence is limited to people authorised to handle it. Information may also be shared with professional advisers or competent authorities where necessary for a legal obligation or claim. A link to another website takes you to that operator’s services and privacy information.
6. International processing
Email, hosting, identity and support providers may process information outside the European Economic Area. An EU company address is not a promise of EU-only processing. Where a transfer requires safeguards, the applicable mechanism must cover that recipient and processing, such as a relevant adequacy decision or contractual safeguards. You can ask us for the mechanism and safeguards applicable to your information.
7. How long information is kept
We keep correspondence while dealing with the enquiry and, where necessary, for the applicable obligation or legal-claim period. Technical records are limited by their delivery, troubleshooting and security purposes and the hosting provider’s applicable retention arrangements. Ask us about the period and any exception relevant to your request.
Where information must be retained for an obligation or claim, access is restricted to that purpose. Provider recovery copies and independent legal or security records may expire on different schedules; deletion is not a promise of immediate removal from every backup.
9. Your rights
Depending on the processing, you may request access, correction, erasure or restriction; object to legitimate-interest processing; and request portability where the legal conditions apply. If processing relies on consent, you can withdraw it without undoing earlier lawful processing. Contact info@garbar.tech or our registered address. We verify identity proportionately and do not ask for your password.
Requests are normally free and answered within one month. Where the law permits an extension because of complexity or the number of requests, we explain it within the first month. You can complain to the Spanish Data Protection Agency (AEPD), including if you disagree with our response.
10. Security and updates
We use HTTPS for the website and limit access to company correspondence. No website or email service can offer an absolute security guarantee. Product age limits and product-specific permissions are stated in their own notices; they are not inferred from these company pages.
We identify updates by the date on this policy and provide any additional notice required for a material change in processing. The English, Spanish and Catalan versions are intended to explain the same practices.