Legal · Privacy

Privacy Policy

Last updated · June 2, 2026

In shortWe collect the minimum data needed to deliver your purchase. Payments are handled by Lemon Squeezy. We never sell your data. You have full GDPR rights.

This Privacy Policy describes how Dmitrii Bosiachenko, autónomo registered in Spain (NIF: Z3795401S) ("we," "us," or "GoldVein.ai") collects, uses, and protects your personal information when you visit https://goldvein.ai or purchase our digital products.

This policy is provided in compliance with the EU General Data Protection Regulation (GDPR, Regulation 2016/679) and the Spanish Organic Law 3/2018 on Personal Data Protection and Guarantee of Digital Rights (LOPDGDD).

01 Data controller

Controller

Dmitrii Bosiachenko (autónomo)

NIF

Z3795401S

Address

Calle Manuel Pedregal 17, 5°B · 33001 Oviedo, Asturias, Spain

goldvein.ai@gmail.com

02 What data we collect

Purchase data

When you buy GoldVein.ai, our payment processor Lemon Squeezy (acting as Merchant of Record) collects and forwards to us:

Your name and email address
Country of residence (for VAT calculation)
Order ID and purchase amount
The last 4 digits of your payment card (for support purposes)

We do not collect or store full payment card data. Payment information is handled exclusively by Lemon Squeezy and its underlying processors (Stripe, PayPal).

Website usage data

When you visit our Website, we may collect:

IP address (anonymized after 30 days)
Browser type and operating system
Pages visited and time spent
Referrer URL (where you came from)

This is collected via standard analytics tools. See our Cookie Policy for details.

Communication data

If you email us at goldvein.ai@gmail.com, we retain the content of your message for support and quality assurance.

03 Why we process your data

Purpose

Legal basis (GDPR)

Delivering your purchase

Performance of contract (Art. 6.1.b)

Sending product updates and onboarding emails

Performance of contract (Art. 6.1.b)

Tax and accounting records

Legal obligation (Art. 6.1.c) — Spanish tax law

Improving the product and website

Legitimate interest (Art. 6.1.f)

Marketing communications (newsletter, if opted in)

Consent (Art. 6.1.a)

04 How long we keep your data

Purchase records: 6 years (Spanish tax law requires retention of invoices)
Email correspondence: 2 years after last contact
Analytics data: 14 months
Marketing list: Until you unsubscribe

05 Who we share data with

We share your data only with the processors strictly necessary to deliver our service:

Lemon Squeezy

Merchant of Record — handles payment, tax compliance, invoicing. Their privacy policy

Email service provider

For transactional emails (order confirmation, product delivery)

Spanish tax authorities (AEAT)

Required reporting under Spanish tax law

We never sell your personal data. We never share it with advertising networks or data brokers.

06 International data transfers

Our payment processor Lemon Squeezy operates from Ireland (Stripe Payments Europe Ltd) and may process data in the United States under the EU-US Data Privacy Framework. All transfers comply with GDPR Chapter V safeguards.

07 Your rights

Under GDPR and Spanish law, you have the right to:

Access the personal data we hold about you
Rectify inaccurate or incomplete data
Erase your data ("right to be forgotten"), subject to legal retention obligations
Restrict processing of your data
Portability — receive your data in a structured, machine-readable format
Object to processing based on legitimate interest
Withdraw consent at any time, where processing is based on consent
Lodge a complaint with the Spanish Data Protection Authority (AEPD) at aepd.es

To exercise any of these rights, email us at goldvein.ai@gmail.com. We respond within 30 days as required by GDPR.

08 Security

We apply industry-standard security measures: TLS encryption in transit, encrypted storage at rest, limited access on a need-to-know basis. Our payment processor Lemon Squeezy is PCI-DSS Level 1 certified.

Despite reasonable precautions, no method of transmission over the internet is 100% secure. If a data breach occurs that affects your data, we will notify you and the AEPD within 72 hours as required by GDPR Article 33.

09 Children

GoldVein.ai is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

10 Changes to this policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Material changes affecting your rights will be communicated by email where we have your address.

11 Contact

For any privacy question or to exercise your rights, contact:

Dmitrii Bosiachenko
Autónomo (registered in Spain)
NIF: Z3795401S
Calle Manuel Pedregal 17, 5°B
33001 Oviedo, Asturias
Spain

goldvein.ai@gmail.com