Privacy policy

1. Controller and contact

Controller: Fuad Cosa Cambra, owner of Fundido Creative. Full identification is given in the legal notice.

Privacy channel confirmed by the owner: hola@fundidocreative.com.

Whether a data protection officer is needed is assessed according to the processing carried out. It is not claimed that every SaaS must appoint one.

Identification of the controller

2. Data and purposes

Legal bases: account, service, credits and support, for the performance of the contract (Art. 6(1)(b) GDPR); data of representatives of organisations, security and fraud prevention, on the basis of legitimate interest (Art. 6(1)(f)); billing and accounting retention, to comply with a legal obligation (Art. 6(1)(c)); aggregated, cookie-free visit statistics (Cloudflare Web Analytics), on the basis of legitimate interest (Art. 6(1)(f)); campaign measurement or other analytics, only if you accept it, on the basis of consent (Art. 6(1)(a)), which you can withdraw whenever you like from “Privacy”; promotional use of your brand or images, only with separate and optional consent.

Sign in with Google is based on the performance of the contract (Art. 6(1)(b) GDPR): it is another way, which you choose, of identifying yourself in your account. Google acts as controller of your Google account and of its sign-in service, with its own privacy policy. An account created with Google has no Fundido password until you use “Reset your password”.

If Fundido processes data of other people on the restaurant's instructions, its role and the corresponding data processing agreement must be established. At launch, it is recommended to limit inputs to dishes without people or unnecessary data.

• Account and access: email address, name, restaurant, password hash, sessions, verification and recovery. Professional organisation: country, tax identifier and declaration of representation, to associate the service and limit the gift per organisation; format validation does not certify tax registration.
• Sign in with Google (optional, only if you press that button): Google confirms to us your Google account identifier, your email address (already verified by Google) and your name; its service may also send your profile photo, which Fundido neither stores nor uses. We do not receive or store your Google password and we do not ask for access to your Gmail, Drive, calendar or contacts. We store the identifier, the email address and the date of linking so that we can recognise you next time.
• Service: originals, metadata, instructions, styles, results, menus, history and balance movements.
• Evidence and security: versioned acceptance, date, HMAC fingerprints of identifiers and user agent, technical and review logs. A linkable fingerprint may still be personal data.
• Billing: tax details and payment references if purchasing is enabled. The Stripe flow means Fundido does not store the card.

3. Providers and recipients

What the image providers state in their public documentation (consulted on 21/10/2026): OpenAI states that data sent to its API is not used to train its models and that it may keep logs for up to 30 days to detect abuse; OpenRouter states that it does not store the content of requests unless its owner enables logging and that it does not use it for training, and that each provider applies its own policy. Fundido does not promise zero retention or processing only within the EU: the photo may be kept by the provider for those periods.

Transfers outside the European Economic Area are covered by the EU-US Data Privacy Framework or by standard contractual clauses. Apart from the cookie-free visit statistics of Cloudflare Web Analytics, we only load third-party analytics or marketing services if we activate them and you accept them in the cookie notice.

• Cloudflare, Inc.: hosting, API, database and storage (US/EU).
• Resend: transactional account email (US).
• OpenRouter, Inc., OpenAI and Google (Vertex AI) (US): they generate the image from the photo and the instructions (the main model is OpenAI's and, if it cannot, Gemini replies); they read the photo or the PDF of the menu and turn it into an editable draft; and they reply to Luna, the panel assistant, with your name, your venue's name and your account status (balance, dishes, menu and screen). For the menu and for Luna the model is DeepSeek V4.1 Flash, open source, without retaining the data.
• Google Ireland Limited / Google LLC: sign-in with your Google account (identity and verified email address), only if you choose “Sign in with Google”. It acts as controller of its identity service. This is distinct from Google as an image generation provider.
• Stripe Payments Europe, Ltd.: payments and invoices (Ireland); it acts as an independent controller for payments and fraud prevention.

4. Retention

In the preparation of the new process, the original is kept while the photo has an open decision, so that another version can be requested. When it closes, the previous retention criterion applies again, with at least one day to carry out the sweep; if there are several open decisions for the same original, the one still in force is respected. Results that are not kept are removed when their process closes. Closing the account deletes originals, previews and results from our own storage, with a record of what was deleted and of the records retained.

We keep the results you keep, your account, instructions, acceptances, tax details, balance and security and support logs, with restricted access and for as long as necessary to provide the service and meet legal obligations or claims. Deletion from our storage is not immediate in backups or at providers, which delete them according to their own time limits.

If you sign in with Google, the link (provider, identifier, email address and date) is kept while your account exists and is deleted when you close it; the intermediate sign-up step, if you had not yet accepted the terms, is deleted after 15 minutes. You can remove Fundido from the apps with access to your Google account whenever you like from your Google account settings. That does not delete your Fundido account: for that, use “Close my account” in Profile.

5. Rights

You can request access, rectification, erasure, restriction and, where applicable, objection and portability, and you can withdraw consent without retroactive effect.

The response is provided without undue delay and, as a general rule, within one month. If the complexity or number of requests so requires, it may be extended by two months, with notice and reasons given within the first month. You can lodge a complaint with the Spanish Data Protection Agency (AEPD) without first having to complain to Fundido.

To deal with your requests we will verify your identity in a proportionate way. You can make them at hola@fundidocreative.com; data export and account closure help you exercise them.

6. Browser and security

The session uses a server cookie with HttpOnly; drafts and preferences use local storage. The technologies and their duration are detailed in the cookie policy.

The product applies separation by restaurant, hashed passwords, revocable sessions and access controls. This does not constitute a certification or an absolute guarantee. The fidelity check is not used as a decision on financial credit or access to employment.