Privacy Policy
How Niceplace processes the personal data of creators, students and visitors.
This is a translation. If it differs from the Spanish version, the Spanish version prevails.
01 Who is responsible
The controller of the data described in this policy is Niceplace. You can write to [email protected] with the subject «Privacy».
Niceplace plays two different roles depending on whose data it is:
If you are a creator's student, that creator controls your data. Read their policy and write to them to exercise your rights. If you write to us, we will pass your request on to them.
02 What data we process
- Account: name, email, photo if you upload one, language, role and preferences.
- Sign-in: we don't use passwords. You sign in with a one-time code we email you, which expires in 10 minutes; we keep only an encrypted fingerprint of the code. If you choose «Continue with Google», Google sends us your verified email, name and photo: we use only the email to find your account and access nothing else in your Google account.
- Billing: plan, payment history, tax details you give us and the last digits of your payment method. Stripe keeps the full card.
- Content: courses, files, pages, posts, messages and what you write to the guide or the assistant.
- Technical data: IP address, approximate location derived from it, browser, device, access and error logs.
- Usage: pages visited and actions in the product, to make it work and improve it.
- Sources you connect: data you authorize us to bring from Google Drive, Vimeo, Zoom, or from public professional Instagram accounts and websites.
03 Why we use it and on what basis
| Purpose | Legal basis |
|---|---|
| Create your account, provide the service and support you | Performance of the contract |
| Charge your plan and issue invoices | Performance of the contract and legal obligation |
| Protect accounts, prevent fraud and abuse, diagnose errors | Legitimate interest |
| Improve Niceplace with aggregated usage data | Legitimate interest |
| Analytics on niceplace.app and non-essential cookies | Consent |
| Send you product news | Legitimate interest, with an unsubscribe link in every email |
| Respond to authorities and keep accounting records | Legal obligation |
When we rely on legitimate interest, we first weigh your rights. You can object by writing to us.
04 Artificial intelligence
When you use an AI feature, we send the model provider only the context needed to answer. Those providers cannot use the data to train their models, and we don't use it to train general-purpose models. We make no automated decisions that produce legal or similar effects on anyone. All the details are in Use of artificial intelligence.
05 Who we share it with
We don't sell or rent personal data. We share it only with:
- Providers that help us run the service, under contract and following our instructions. The types of providers we use are in Providers that process data.
- The creator, when you are their student: they see your student data, your progress and your payments.
- Services you connect, with the data needed for the feature you turn on.
- Authorities, when a law or a valid order requires it. If the law allows, we will tell you first.
- A buyer or successor, if Niceplace merges or is sold, who must respect this policy.
06 International transfers
We process data in the European Union and the United States. When a provider processes data outside the European Economic Area, we use recognized safeguards: the EU-U.S. Data Privacy Framework when the provider is certified, or the European Commission's standard contractual clauses, together with additional measures such as encryption.
07 How long we keep it
| Data | Period |
|---|---|
| Account and content | While the account is active. When it is closed, it is deleted as described in Data deletion. |
| Encrypted backups | Daily ones, 35 days. Monthly ones, 400 days. Then they are deleted. |
| Invoices and accounting records | The period the law requires. |
| Technical and security logs | As long as needed for security, or while an incident is investigated. |
| Tokens for connected services | Deleted when you disconnect the service. |
| Cookie consent | 12 months, then we ask again. |
08 Your rights
You can ask us, at any time, to:
- Access your data and receive a copy.
- Correct inaccurate or incomplete data.
- Delete your data, or restrict its use.
- Object to processing based on legitimate interest or for marketing.
- Receive your data in a format you can take to another service.
- Withdraw a consent, without affecting what was done before.
Write to [email protected] from your account email. We reply within one month, which may be extended by two more months in complex cases, with notice to you. If you are not satisfied, you can complain to the data protection authority in your country.
09 Minors
You must be over 18 to have a creator account. If you are a creator and have students who are minors, you are responsible for getting their parents' or guardians' consent when the law requires it based on their age and country.
10 Security
We encrypt data in transit and backups, limit internal access to what is needed and log who accesses what. Details are in Security. If a breach affects your data, we will notify you and the authority within the legal deadlines.
11 Changes to this policy
If we change something important, we tell you by email or in the product before it applies, and we update the date on this page.