Privacy Policy
Last updated: 4 June 2026
This policy describes how the Company processes your personal data in connection with the Losali service, in accordance with Regulation (EU) 2016/679 ("GDPR") and applicable Spanish legislation (LOPDGDD).
1. Data controller
Obinova, sole trader (self-employed, "autónomo") under Spanish law.
Address: Carrer de la Diputació, 180, 9B, 08011 Barcelona, Spain.
NIF: X5352704Y.
Contact for any data-related question: contact@losali.com.
2. Data we collect
- Account data: email address, name (where provided, for example via Google sign-in), account identifier.
- Usage and call data: numbers dialled, date, time and duration of calls, rate applied, balance and Credit movements.
- Payment data: customer identifier from our payment provider, purchase history and invoices, amounts, billing country and VAT data. We never store full bank card numbers: payments are processed directly by Stripe.
- Technical data: IP address, connection and security logs, device and browser type, and data from cookies (see article 7).
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Account creation and management, provision of the Service (connecting calls) | Performance of the contract |
| Billing, accounting and tax obligations | Legal obligation |
| Fraud prevention and Service security | Legitimate interest |
| Service-related communications (support, important information) | Performance of the contract |
| Commercial / promotional communications | Consent (revocable at any time) |
| Audience measurement and statistics (analytics cookies) | Consent |
4. Recipients and processors
We use service providers (processors within the meaning of the GDPR) who access your data only for the purposes described and in accordance with our instructions:
| Provider | Role | Location |
|---|---|---|
| Supabase | Authentication and database | European Union |
| Stripe | Payment processing | Ireland / United States |
| Brevo (Sendinblue) | Email sending (transactional and campaigns) | European Union |
| Vercel | Hosting of the web interface | United States |
| OVH | Hosting of the application services (API, telephony) | European Union (France) |
| Google (Tag Manager, Analytics) | Audience measurement | United States |
5. Transfers outside the European Union
Some providers (in particular Stripe, Vercel and Google) may process data in the United States. These transfers are governed by appropriate safeguards within the meaning of the GDPR, in particular the European Commission's standard contractual clauses and, where applicable, the EU-United States data protection framework (Data Privacy Framework).
6. Retention periods
- Account and usage data: retained for the duration of the relationship. An inactive account (no login for twelve (12) months) may be closed and its data deleted or anonymised, save for any legal retention obligation.
- Billing and accounting data: retained in accordance with applicable legal obligations (up to six (6) years).
- Technical and security logs: retained for a limited period for security and fraud prevention purposes.
We do not record the content of your calls.
7. Cookies
The site uses cookies strictly necessary for its operation (for example, maintaining your session). Subject to your consent, it also uses audience measurement cookies (Google Analytics via Google Tag Manager). You may at any time withdraw your consent and set or delete cookies via your browser.
8. Your rights
In accordance with the GDPR, you have the following rights: right of access, rectification, erasure, restriction of processing, objection, portability, and the right to withdraw your consent at any time. You may exercise these rights by writing to contact@losali.com.
You also have the right to lodge a complaint with a supervisory authority, in particular the Agencia Española de Protección de Datos (AEPD, www.aepd.es) in Spain, or with the authority of your country of residence (for example the CNIL in France).
9. Changes
We may update this policy. The applicable version is the one published on this page, the last updated date of which appears at the top.