This is a courtesy translation. If it differs from the Spanish version, the Spanish version prevails.
Privacy policy
Last updated: 24 September 2026
Here we explain what personal data we process on reponlo.com and in the Repónlo application (app.reponlo.com), what we use it for and what you can do with it.
1. Controller
Consultoría EHERO S.L.U., tax ID (NIF) B72671100, Rúa Emilia Pardo Bazán 25 A2, 36204 Vigo (Pontevedra), Spain. For any privacy matter: info@consultoriaehero.com.
2. Two different roles
- We are the controller of the data of whoever creates an account and of the people who use the application (name, email, company), of the billing of the plans and of whoever writes to us.
- We are the processor of the data that each company stores in the application about its business. If that includes personal data (for example, about its team or its suppliers), the company is the controller and we process it only to provide the service, under the data processing agreement in the terms of service.
3. What data we process and why
| Visits to reponlo.com | The server logs the IP address, the browser, the page requested and the time, to keep the website running and protect it from abuse. Basis: legitimate interest. They are deleted in the periodic rotation of those logs. |
|---|---|
| Your account | Name, email, your company's name and password (which we store transformed with a one-way algorithm: we cannot see it). Also the date and IP of sign-ins, for security. Basis: performance of the contract. While the account is active and, afterwards, for the time needed to deal with possible liabilities. |
| Service emails | Confirming your email, team invitations, password changes and notices about the service. We do not send advertising. Basis: performance of the contract. |
| Paid plans | Billing and order data, managed in the consultoriaehero.com shop. Basis: performance of the contract and legal obligations. Kept for the periods required by commercial and tax law (generally six years). |
| If you write to us | What you tell us and your email address, to reply to you. Basis: your consent when writing to us. For as long as the conversation lasts and a reasonable time afterwards. |
We do not sell data, build commercial profiles or make automated decisions that affect you.
4. Cookies and storage in your browser
reponlo.com does not use cookies or analytics or advertising tools.
The application uses a single technical session cookie, needed to keep you signed in while you use it; since it is essential for the service, it does not require consent. It also stores some working items in your own browser, such as the ticked boxes of the load list, the draft of an unfinished stocktake or how you prefer to sort the warehouse. That stays on your device and is not sent to anyone.
5. Who we share it with
Only with the providers we need to provide the service, under a data processing agreement:
- OVH SAS: hosting of the website and the application, on servers in France.
- Zoho Corporation B.V. (ZeptoMail): sending of the service emails, from its data centre in the European Union.
- The payment provider you choose when paying for a plan in the shop. It receives the card details directly: we do not see them.
The shared product catalogue does not receive personal data. When you look up a barcode, the application checks that code in our catalogue (api.reponlo.com), which in turn may look it up in public databases such as Open Food Facts. If your company turns on the sharing option, when a product is added its code, name, format and brand are contributed, without your company's name or any other data about it. Prices, costs, sales and data about your machines are never shared. If it also turns on «Also contribute my photos», the catalogue receives the product photo already reduced and without location data; if a person or anyone's data could be seen in it, it is discarded and deleted. A photo withdrawn from the catalogue also disappears from the product cards of the users who used it, in the check run every day.
We may also have to provide data to the authorities when required by law.
Data is stored in the European Union. If any provider needed to access it from outside the European Economic Area, it would be with the safeguards required by the General Data Protection Regulation, such as the European Commission's standard contractual clauses.
6. Your rights
You can ask us to access your data, correct it, delete it, take it with you, restrict its use or object to it. Write to info@consultoriaehero.com with the subject «Data protection» from your account's email. We will reply within one month at most.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
7. Security
All communication is encrypted (HTTPS). Each company's data is kept separate from the others', passwords are not stored in plain text, access to the servers is restricted and we make regular backups.
8. Minors
Repónlo is a service for professionals and businesses. It is not aimed at people under 18.
9. Changes
If we change this policy significantly, we will announce it in the application or by email before the change takes effect.