Privacy notice
Last updated: 2026
The short version
Sekondo does not upload your documents. The bridge runs on your computer and talks to your Adobe application over a local connection. We hold only the data needed to sell you a licence, invoice it and support it.
1. Data controller
- Company: Sekondo Solutions, S.L.U. (trading as Sekondo)
- Registered address: C/ Menta, 67, 14012 Córdoba, Spain
- Tax number (CIF): B05606629
- Commercial registry: Registration with the Commercial Registry of Córdoba (Spain) in progress. Incorporated by deed of 15 September 2026 granted before Florencia Tejeda Castillo, notary of Benalmádena (Málaga), under number 1185 of her protocol.
- Email: hola@sekondo.app
Data protection enquiries: privacidad@sekondo.app. We have not appointed a data protection officer because the conditions of article 37 GDPR do not apply.
2. Categories of data we process
- Identification and contact: name, surname, email address, company name, country and, where applicable, tax number.
- Billing: plan, amounts, dates, invoice number and country of taxation. Card data is processed exclusively by our payment provider; we never see or store it.
- Licence: licence key, product and version, and an anonymous machine identifier derived by hashing, used only to count activated devices.
- Support: the content of the messages you send us and any technical details you choose to attach.
- Website: the web server keeps access logs including IP address, date, page requested and user agent, for security and diagnostics.
- Where your visit came from: the label of the ad or link that brought you here, which is attached to your request if you send us one.
- Advertising cookies, only if you accept them: see section 14.
3. What we do not process
We do not receive, store or analyse your documents, your layers, your images or the text of the instructions you give your AI assistant. That information does not pass through our systems. The instructions travel between you and your AI provider under your own agreement with them.
4. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Providing the service, licensing and support | Performance of the contract (art. 6.1.b GDPR) |
| Invoicing and accounting | Legal obligation (art. 6.1.c GDPR) |
| Preventing licence abuse | Legitimate interest (art. 6.1.f GDPR) |
| Server security logs | Legitimate interest (art. 6.1.f GDPR) |
| Product news to customers | Legitimate interest, with opt-out in every message |
| Launch notifications to non-customers | Consent (art. 6.1.a GDPR) |
| Measuring which ads bring us requests (Meta and Google cookies) | Consent (art. 6.1.a GDPR), which you can withdraw under “Cookie settings” |
5. Where the data comes from
From you, when you buy, register, write to us or fill in a form. We do not buy lists and we do not enrich your data from third-party sources.
6. Retention
- Account and licence: while you are a customer and for four years afterwards.
- Invoices and accounting: six years, under the Spanish Commercial Code, and four years for tax purposes.
- Support messages: three years from closure.
- Consent for communications: until you withdraw it.
- Server logs: thirty days.
7. Recipients and processors
We share data only with providers acting on our instructions under a data processing agreement: our payment provider (a payment provider acting as merchant of record, identified during checkout), our email provider, and our hosting provider (Raiola Networks, S.L. (España)). We also disclose data when a law or a competent authority requires it. We never sell data.
If you accept the advertising cookies, Meta Platforms Ireland Ltd. and Google Ireland Ltd. receive data about your visit to this website, as described in section 14.
8. International transfers
Our providers process data within the European Economic Area wherever possible. Where a transfer outside the EEA is unavoidable, it is covered by an adequacy decision or by the European Commission's standard contractual clauses, with supplementary measures where appropriate.
Meta and Google may transfer the data from their cookies to the United States. Both are certified under the EU-US Data Privacy Framework, covered by the European Commission's adequacy decision of 10 July 2023.
9. Your rights
You may request access, rectification, erasure, restriction, portability, and object to processing, as well as withdraw consent at any time without affecting the lawfulness of prior processing. Write to privacidad@sekondo.app, stating your request; we may ask for proof of identity. We answer within one month.
If you believe your rights have not been respected, you may complain to the Spanish Data Protection Agency, aepd.es, C/ Jorge Juan 6, 28001 Madrid.
10. Automated decisions
We do not make automated decisions producing legal effects, and we do not profile you. If you accept the advertising cookies, Meta and Google may use them to show you ads under their own policies.
11. Security
We apply technical and organisational measures appropriate to the risk: encryption in transit, access limited to those who need it, and periodic review. No system is completely secure, but we will notify you and the authority of any breach that requires it, within the legal deadlines.
12. Minors
The service is not directed at people under eighteen and we do not knowingly collect their data.
13. Changes
We may update this notice. Substantial changes are announced by email before they take effect.
14. Cookies
This website sets no advertising or measurement cookie without your permission. The first time you visit, we ask you in a notice with two equal buttons, “Accept” and “Decline”; if you decline, the site works exactly the same. You can change your mind at any time from “Cookie settings”, in the footer of every page.
Our own, always on
They are stored only in your browser and are never sent to us, except the origin label, which travels with your request only if you send one:
| Name | Type | Purpose | Duration |
|---|---|---|---|
| sekondo.billing | Local storage, own, technical | Remembers whether you chose to see monthly or annual prices | Until you clear your browser data |
| sekondo.cookies | Local storage, own, technical | Remembers whether you accepted or declined the advertising cookies | Until you clear your browser data |
| sekondo.origen | Session storage, own | Keeps the label of the ad or link that brought you here, to attach it to your request | Until you close the tab |
Advertising, only if you accept
They tell Meta and Google that a visit came from one of our ads and whether it ended in a request, so we know which ads work and stop paying for the ones that do not.
| Name | Owner | Purpose | Duration |
|---|---|---|---|
| _fbp | Meta Platforms Ireland Ltd. | Recognises the browser to measure visits and requests coming from Meta ads (Instagram and Facebook) | 3 months |
| _fbc | Meta Platforms Ireland Ltd. | Keeps the identifier of the click on a Meta ad | 3 months |
| _gcl_au | Google Ireland Ltd. | Measures visits and requests coming from Google Ads | 3 months |
| _ga | Google Ireland Ltd. | Tells one visitor apart from another so we can see how many people come and which pages they read (Google Analytics) | 2 years |
| _ga_M8V3ZMXX8E | Google Ireland Ltd. | Keeps the state of the visit for Google Analytics | 2 years |
| _gcl_aw | Google Ireland Ltd. | Keeps the identifier of the click on a Google ad | 3 months |
Meta and Google process this data as controllers in their own right, under their policies: Meta and Google.