legal.privacy_title

legal.privacy_intro

1. legal.privacy_s1_title

legal.privacy_s1_p1

• legal.privacy_s1_l1
• legal.privacy_s1_l2
• legal.privacy_s1_l3

2. legal.privacy_s2_title

legal.privacy_s2_p1

2 bis. Shared structural knowledge (anonymized)

MeigaHub shares anonymized technical structures of your automation rules and skills across accounts (trigger type, action sequence, delivery channels and technical tags) so the agent can suggest proven skeletons when creating new rules or skills. Before any structure is shared, an automatic process strips all private or identifiable data: names, URLs, identifiers, emails, phone numbers, keys, free-form content, channel IDs and any reference to people or companies. Only the generic technical structure is kept. This structural information does not allow identification and, under Article 4.1 of the GDPR, does not constitute personal data. You can request exclusion of your structures from the shared catalogue by writing to the contact below.

3. legal.privacy_s3_title

legal.privacy_s3_p1

• legal.privacy_s3_l1
• legal.privacy_s3_l2
• legal.privacy_s3_l3

legal.privacy_s3_p2

3 bis. Specialist Access to User Accounts

When the user purchases a specialist hour pack, an authorized MeigaHub worker (specialist) may access the user's account in a limited capacity to deliver the contracted service.

Legal basis: Contract performance (Art. 6.1.b GDPR) — access is strictly necessary to fulfil the contracted service.

• The specialist only accesses account sections that the administrator has expressly authorized in the assignment.
• All access is automatically logged (date, time, section, action) in an unalterable activity log.
• The specialist signs a digital confidentiality agreement before accessing each assigned account.
• The user can view the complete specialist access history in their "My Services" section (GDPR Art. 15 — right of access).
• Additionally, the user receives a daily email digest summarizing the specialist's recorded actions.

Retention: Activity logs are retained for 2 years and automatically deleted after that period (GDPR Art. 5.1.e).

4. legal.privacy_s4_title

legal.privacy_s4_p1

• legal.privacy_s4_l1
• legal.privacy_s4_l2

legal.privacy_s4_p2

4 bis. Payment data

MeigaHub never sees, receives or stores your card details at any point. When you pay you are taken to the gateway's own environment and the details are entered there. We only keep the outcome of the operation —whether it was authorised, the amount and an internal order reference— and the billing details you filled in yourself.

Depending on the gateway active at the time, which you are told during checkout, the following parties take part:

• Comercia Global Payments Entidad de Pago, S.L. (Spanish tax ID B65466997, Madrid), a Spanish payment institution supervised by the Bank of Spain, as the acquirer of the bank card terminal. CaixaBank, S.A. acts as its agent and holds the settlement account, and Redsys Servicios de Procesamiento, S.L. is the technical platform the operation travels through.
• Stripe Payments Europe, Ltd. (Ireland), as an alternative.

These entities are not processors acting on MeigaHub's behalf: they determine their own purposes and means for payment data and answer for it directly to you. In particular, and as required by our contract with the acquirer, we inform you of the following:

Comercia Global Payments informs you that it also acts as controller of the data of cardholders carrying out operations at this establishment, by virtue of the contractual relationship between Comercia Global Payments and the Establishment. To execute the operation the following data is processed: i) bank card data (PAN, expiry, issuer, CVV); ii) cardholder data (first name and surname); iii) geolocation data at the time of payment. The legal basis is the legitimate interest of Comercia Global Payments in performing the aforementioned contract. Data will be communicated to banking entities in order to validate and execute the payment; on occasion this communication may entail an international transfer where one of the parties has engaged foreign banking entities, covered by the derogation in Article 49(1)(c) GDPR as necessary for the performance of a contract in the interest of the data subject. The retention period is 5 years in line with the limitation period for civil actions, and a minimum of 6 years in compliance with applicable payment services regulations.

Although Comercia Global Payments is a Spanish company supervised by the Bank of Spain, its majority shareholder belongs to the US group Global Payments. The data we keep about a purchase —amount, date, description and billing details— stays on our servers, is governed by this same policy and is retained for the period applicable to accounting records.

5. legal.privacy_s5_title

legal.privacy_s5_p1

• legal.privacy_s5_l1
• legal.privacy_s5_l2
• legal.privacy_s5_l3
• legal.privacy_s5_l4
• legal.privacy_s5_l5
• legal.privacy_s5_l6
• legal.privacy_s5_l7
• legal.privacy_s5_l8

6. legal.privacy_s6_title

legal.privacy_s6_p1

• legal.privacy_s6_l1
• legal.privacy_s6_l2
• legal.privacy_s6_l3
• legal.privacy_s6_l4

7. legal.privacy_s7_title

legal.privacy_s7_p1

• legal.privacy_s7_l1
• legal.privacy_s7_l2
• legal.privacy_s7_l3
• legal.privacy_s7_l4
• legal.privacy_s7_l5
• legal.privacy_s7_l6

legal.privacy_s7_p2

8. legal.privacy_s8_title

legal.privacy_s8_p1

legal.privacy_s8_p3

legal.privacy_s8_p2

legal.privacy_s8_p4

legal.privacy_s8_list_ref

legal.privacy_s8_p5

legal.privacy_s8_audit_title

legal.privacy_s8_audit_p1

9. legal.privacy_ai_title

legal.privacy_ai_p1

• legal.privacy_ai_l1
• legal.privacy_ai_l2
• legal.privacy_ai_l3
• legal.privacy_ai_l4
• legal.privacy_ai_l5
• legal.privacy_ai_l6
• legal.privacy_ai_l7

10. legal.privacy_minors_title

legal.privacy_minors_p1

11. legal.privacy_s9_title

legal.privacy_s9_p1

12. legal.privacy_s10_title

legal.privacy_s10_p1

[email protected]

legal.privacy_s10_p2