Privacy Policy

The controller is SoftLife, the entity identified as such in the relevant contract or business relationship.

For privacy enquiries and to exercise your rights, contact hola@softlife.es.

We may process identification and professional data, such as your name, email address, company, role, franchise, or relationship with SoftLife.

For franchisee onboarding and payouts, we may also process tax identifiers, account-holder information, and bank account details needed to calculate and make payments.

When an onboarding contract is accepted electronically, we retain the contract text and data, signer identity and capacity, checked declarations, typed signature, date and time, acceptance identifier, contract version, cryptographic hashes, evidence PDF, and an HMAC fingerprint of the IP address. The raw IP address is not stored in the contract record.

We also process account and security data, access logs, technical identifiers, device information, and data required to provide support and protect the platform.

When operational features are used, we may process service, cleaning, and refill reports, notes, photographs, voice recordings, transcripts, incidents, assignments, and machine-related activity. Machine telemetry does not normally identify a person by itself, but it may be associated with an account or professional action.

We process data to create and administer accounts; authenticate users; provide the platform and its features; manage machines, inventory, incidents, operations, and franchisee payouts; answer enquiries; maintain security; prevent misuse; and retain evidence and audit trails.

The applicable legal bases are the performance of a contract or steps taken before entering into a contract; compliance with legal obligations; and the legitimate interests of SoftLife and its partners in operating, protecting, and improving the service. Where required by law, we will request consent, which may be withdrawn without affecting the lawfulness of earlier processing.

Contract-acceptance evidence is collected to enter into, manage, and evidence the relationship and prevent abuse. It is not based on a general GDPR consent checkbox and does not turn contract acceptance into consent for incompatible purposes.

We do not make decisions producing legal effects based solely on automated processing. Some features may use automated or artificial-intelligence tools to transcribe, classify, or suggest information, subject to human review where appropriate.

We retain data while the account or contractual relationship remains active and for as long as needed to provide the service. It may then be kept in restricted form for the periods required to meet legal obligations and address potential liabilities.

Security logs, temporary files, and operational evidence are retained only for the period reasonably necessary for their purpose, unless they must be preserved in connection with an incident, claim, or legal obligation.

Data may be shared with franchises, customers, employers, or partners where necessary to manage the machines and services assigned to them, according to their role and permissions.

We also use technology providers acting as processors for hosting, databases, authentication, storage, notifications, support, communications, and artificial-intelligence features. Some providers may process data outside the European Economic Area. Where necessary, safeguards recognised by the GDPR will be used, such as adequacy decisions or standard contractual clauses.

We may disclose information to public authorities where required by law.

You may request access, rectification, erasure, restriction, objection, and portability, and may withdraw consent where processing is based on consent.

To exercise these rights, email hola@softlife.es, stating which right you wish to exercise and providing the information needed to verify your identity. We may request additional documentation if there are reasonable doubts about the requester's identity.

You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

We apply reasonable technical and organisational measures to protect data against loss, alteration, and unauthorised access or disclosure. No system can guarantee absolute security.

Users must keep their credentials confidential, use the platform only for authorised purposes, and avoid including unnecessary or special-category personal data in notes, photographs, audio, or other free-text fields.

The platform is intended for professional users and not for children under 14. We do not knowingly collect children's data through this service.

We may use cookies or similar technologies that are strictly necessary to sign in, maintain sessions, and protect the platform. If non-essential technologies are introduced, we will provide the information and consent choices required by law.

We may update this policy to reflect legal, technical, or service changes. The current version will always be available on this page and will show its latest update date.