// Legal

Privacy Policy

Last updated: 30 October 2026

1. Data controller

The data controller for personal data collected through this website (BlueProfit) is:

2. Data we collect

We collect only the data needed to provide the service:

  • Registration data: name, email address and password (stored with bcrypt hash).
  • Billing data: what is needed to issue the invoice (name or company name, tax ID, address). Payment is by bank transfer; we do not store card details.
  • Usage data: dates consulted, map areas visited, to improve the product.
  • Technical data: IP address, browser type and operating system, for security and diagnostic purposes.

3. Purpose of processing

Your data is used exclusively to:

  • Manage your account and access to the service.
  • Issue invoices and manage your access.
  • Send you service-related communications (updates, invoices).
  • Improve the service through aggregated and anonymised usage analysis.

We do not sell or share your data with third parties for commercial purposes.

4. Legal basis

Processing is based on the performance of the service contract (Art. 6.1.b GDPR) and, where applicable, on the explicit consent you have given us (Art. 6.1.a GDPR).

5. Processors

These companies process data on behalf of BlueProfit, only to provide the service and with the safeguards required by the GDPR:

  • Vercel — website hosting.
  • Neon — database.
  • Resend — email delivery.

Some of these providers may process data outside the EU; where that is the case, the safeguards set out in the GDPR and in their data processing agreement apply.

6. Data retention

We retain your personal data for as long as you keep an account with BlueProfit. After you cancel your account, data is deleted within a maximum of 30 days, except where the law requires us to keep it (for example, invoices).

7. Your rights

Under the GDPR, you have the right to:

  • Access: request a copy of the data we hold about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request deletion of your data.
  • Portability: receive your data in a structured format.
  • Objection: object to processing in certain circumstances.

To exercise any of these rights, write to contacto@blueprofitfish.com. You may also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

8. Cookies

We use only strictly necessary technical cookies: your language choice and the session of the light version of the report (/parte). The dashboard session is stored in your browser. We do not use tracking or advertising cookies.

9. Security

We apply appropriate technical and organisational measures to protect your data: encryption in transit (HTTPS/TLS), passwords stored with bcrypt hash, and restricted database access.

10. Changes to this policy

We may update this policy to reflect changes in the service or in applicable law. We will notify you by email of any significant change.