Privacy policy
Last updated: 19 August 2026
This page explains what personal data we collect on selebralo.com, what we use it for, who it is shared with, and what you can demand from us at any time. It is written to be understood, not to cover our backs.
Selebralo is at a stage prior to being incorporated as a company. While that is the case, the project is run by an individual and the contact channel for anything to do with your data is info@selebralo.com. As soon as incorporation is complete, we will publish the company name, tax number and registered address on this page.
What data we process
What you give us when creating an account: name, email address and the kind of user you are (customer or provider). We never see your password; it is stored encrypted by our authentication provider.
What you give us while using the service: event date, number of guests, messages you write and, for bus requests, pickup and drop-off points. If you are a provider, also the details of the space or fleet you publish, with its address, photos and prices.
If you leave a phone number when requesting a visit, which is optional, we process it solely so the venue can call you. You can request the visit without giving it.
What is generated simply by browsing: IP address, browser type and pages visited. The analytics part of this is only collected if you accept cookies, as explained in the cookie policy.
What we use it for, and on what legal basis
To provide the service you asked for: creating your account, handling your visit, quote or booking requests, and putting you in touch with the provider. The legal basis is performance of the contract between you and us.
To send you the essential service emails: confirmations, notices that a provider has replied, password recovery. Same legal basis, and none of it is advertising.
To understand in aggregate how the site is used and improve it. The legal basis here is your consent, which you give or withdraw whenever you like from the cookie policy.
To keep the platform secure and free of spam, for example through the check on the sign-up form. The legal basis is our legitimate interest in the service not degrading.
Who it is shared with
With the provider you write to. This is the essence of Selebralo: when you ask to visit a venue or request a bus quote, that business receives your request and your email so they can reply. Without that there is no service to provide.
If you gave a phone number when requesting a visit, the venue receives it along with the request, for the same purpose of being able to reply to you.
With the companies that provide our infrastructure, acting as data processors and only able to use the data to serve us: Supabase (database and authentication), Resend (email delivery), Vercel (hosting and traffic measurement), Google (Analytics if you accepted it, and the Google ratings shown on listings), MapTiler (maps) and Cloudflare (spam checks).
The Selebralo team can access requests and the messages exchanged through the platform, in order to provide support, resolve incidents and prevent fraud. We say so explicitly because it is not obvious.
We do not sell your data to anyone, nor share it for advertising purposes.
Transfers outside Europe
Our database and email run in the European Union (Ireland). Some of the services above, Google in particular, may process data on servers outside the European Economic Area, under the international transfer mechanisms provided for in European law.
How long we keep it
Your account data, for as long as the account is open. If you close it or ask us to delete it, we erase it except for anything we are legally required to keep.
Requests and their history are kept for as long as they are needed to manage the relationship with the provider and to be able to evidence what happened in the event of a complaint.
Analytics data is kept for 14 months.
Your rights
You can ask us to access your data, correct it, delete it, object to our processing it, restrict its use, or take it elsewhere. Just write to info@selebralo.com from your account address and we will reply within one month at most.
If you believe we have not done our job properly, you can complain to the Spanish Data Protection Agency (www.aepd.es). We would appreciate you writing to us first, but it is your right and you do not have to.
Children
The service is not aimed at children under 14 and we do not knowingly collect their data. If we find an account belonging to a child, we will delete it.
Security
Access to data is restricted by database-level rules: each user can only read their own records and those of requests they take part in. Passwords are stored encrypted and the whole site runs over a secure connection. No system is infallible, but if a breach affected you, we would tell you.
Changes to this policy
If anything material changes, we will update this page and the date at the top. If the change genuinely affects you, we will let you know by email.