Privacy policy
Version v1 (2026-10-21)
Who is responsible
Timur Akhtyamov, autónomo (self-employed), Spain — NIF Z1630466R (intra-EU VAT ESZ1630466R).
Calle Jazmín 1, 30613 Villanueva del Río Segura (Murcia), Spain
Questions, access, correction or deletion: privacy@xregos.com
The service may later be operated by a Spanish SLU owned by the same person. If that happens, this policy and your rights under it carry over unchanged; we will not quietly widen what we do with your data because the legal wrapper changed.
What we collect, and why
Nothing to use the check. The free orientation runs without an account and without an email address. If you never hand one over, we hold no personal data about you.
Your email, when you ask us for something with it: to save a profile and receive change signals, to watch a counterparty, to receive the Art 61 memo, or to subscribe to Radar. Legal basis: performance of what you requested, and consent for the ongoing signals.
The company profile you type in, stored only when you choose to save it — the structured answers, not your documents. We do not copy, upload or retain source documents.
An advisory request, if you send one: your name, work email, company, your message, the result of your check, the campaign or referring site of your first visit, and the text and version of the consent you gave. These are shared with Timur Akhtyamov personally, in his capacity as the advisor, so that he can reply to you — which is the entire purpose of the form, stated on it.
Counters, not profiles. We count funnel steps (a check started, a check completed, a form submitted) together with a short campaign or referring-host tag. No identifiers, no click ids, no cross-site tracking, no advertising cookies, and therefore no cookie banner.
How long we keep it
Advisory requests: 24 months, or until you ask us to delete them — whichever is sooner.
Saved profiles and subscriptions: until you unsubscribe. Every email we send carries a one-click unsubscribe link, and following it removes the address from every store that can produce mail to you.
Aggregate counters hold no personal data and are kept indefinitely.
Who processes data for us
Vercel (hosting, EU/US), Upstash (stored data), Brevo (email delivery), Anthropic (generating the explanation of a norm — it receives the marked-up requirement and your structured profile, never your documents). Each acts on our instructions under a processing agreement.
Your rights
Access, rectification, erasure, restriction, portability, and objection to processing based on legitimate interests — write to privacy@xregos.com and we will answer within one month.
You may also complain to the Agencia Española de Protección de Datos (AEPD): https://www.aepd.es.
This policy is governed by Spanish law and GDPR (EU) 2016/679 and LOPDGDD (Organic Law 3/2018); disputes go to the courts of Murcia, Spain.