Privacy policy
In short
- Reading SkillVerdict needs no account, and the site sets no cookies.
- We only receive personal data when you buy a review or an audit, or write to us, and we use it to deliver the service, invoice it and answer you.
- Payments are handled by Stripe. We never see your full card number.
Who is responsible
ZERTIDOX S.L. (NIF B93867711), Via Laietana 59, 4th floor, door 1, 08003 Barcelona, Spain, phone +34 934 124 227. Contact for anything about your data: info@zertidox.com.
What data we process, why and on what legal basis
- IP address, browser, page requested and time, in the hosting server's logs on every visit: to serve the site and keep it secure. Legal basis: our legitimate interest in running a secure site (GDPR art. 6.1.f).
- Name, email, billing address and country, payment method details shown by Stripe (brand and last 4 digits) and, if you give it or the checkout asks for it, your tax ID, when you pay through a Stripe payment link: to take the payment, issue the invoice and apply the right tax. Legal basis: performance of the contract (art. 6.1.b) and our legal duties on invoicing and tax (art. 6.1.c).
- The skill repository URL and your answer to the "start now" question at checkout (fast-track review): to identify the skill and know when we may start. Legal basis: performance of the contract (art. 6.1.b).
- Your emails with us, the list of skills you send for a team audit, and the private report: to agree the scope, deliver the service and answer you. Legal basis: performance of the contract (art. 6.1.b), or our legitimate interest in answering you if you write without buying (art. 6.1.f).
The checkout data is needed to make the contract: without it you cannot buy. We do not use your data for advertising, we do not sell it, we do not build profiles and we do not take automated decisions about you. We do not email newsletters: issues are published on the site.
A published verdict is about a public repository, not about you. If the skill's author is a person, their name may appear on the verdict as it appears in the repository; that is based on our legitimate interest in informing users about software they may install (art. 6.1.f), and the author can object as explained below. We take it from the public repository and its commit history.
Who helps us provide the service
- Stripe (Stripe Payments Europe, Ltd., Ireland) processes payments, collects the checkout data listed above and sends receipts and invoices. For payment processing Stripe acts on our behalf; for its own legal duties (fraud prevention, anti-money-laundering) it acts as an independent controller under its own policy: stripe.com/privacy.
- Vercel (Vercel Inc., United States) hosts the site and keeps the server logs: vercel.com/legal/privacy-policy.
- Proton (Proton AG, Switzerland) hosts our email: proton.me/legal/privacy.
- Anthropic provides the AI tools (Claude) we use to read skills, handle our email and draft reports, so it may process your emails and the content of a private report: anthropic.com/legal/privacy.
When a provider processes data outside the European Economic Area, the transfer relies on an adequacy decision of the European Commission (Switzerland, or the EU-US Data Privacy Framework for certified companies) or on the Commission's standard contractual clauses.
How long we keep it
- Server logs: for the short period of our hosting plan (between 1 hour and 1 day on Vercel's standard plans, see Vercel's documentation). Vercel may keep its own logs longer under its privacy policy.
- Invoices and payment records: 6 years, as required by Spanish commercial law (article 30 of the Código de Comercio), and for as long as tax obligations remain open.
- Emails, lists of skills and private reports: until the service is delivered and any complaint period has passed, and at most 2 years, unless you ask us to delete them earlier and no legal duty requires keeping them.
Your rights
You can ask for access to, correction or deletion of your data, object to or restrict its processing, and ask for a copy in a portable format, by writing to info@zertidox.com. If you think we have not respected your rights, you can complain to the Spanish data protection authority (Agencia Española de Protección de Datos, aepd.es).
Cookies
The site sets no cookies and stores nothing in your browser. Stripe's checkout pages set their own cookies, explained in Stripe's cookie policy.