Privacy Policy
Last updated: November 3, 2026
Draft: this text has not been reviewed by a lawyer yet. Details in brackets are pending.
This policy explains what data UnEnlace collects when you create your card, when someone visits it and when someone reports it, what we use it for and how you can exercise your rights. It complements our Terms and Conditions.
1. Who is responsible for your data
UnEnlace is responsible for the processing of your personal data. For anything related to your privacy, write to support@unenlace.com.
2. What data we collect
- Account: your email and password (stored encrypted by our authentication provider; we never see it). If you sign in with Google, Microsoft, Apple or Facebook, the name, email and identifier that the provider shares with us. The date you created the account, signed in and accepted these documents, and when you confirmed owning the rights to an image you uploaded.
- Your card: username, name, photo, cover and background, job title, company, bio, phones, email, WhatsApp, address and location on the map, links, social networks and followers, booking and store links, design, animations, music and languages. Everything you put on your card is public.
- Security log: each time you create your card or publish changes, your IP address, approximate location calculated from the IP by our hosting provider (country, region and city, never your exact position), browser and device, and the date and time.
- Reports: the reason and details of the report, the email of the person reporting if they give it, and an irreversible code calculated from their IP (we do not store the IP itself) to limit abuse.
- Moderation: the warnings and suspensions of the account, their reason, messages and dates, and our team's internal notes.
- Communications: the emails you send us and our answers.
On the cards we do not use analytics, advertising or tracking. Our hosting provider processes technical data of each visit (IP and browser) to deliver the page and protect it from attacks, and keeps it for a short time in its logs.
3. What we use it for
- To create, store and show your card, and to let you sign in.
- To send you service emails: confirming your account, resetting your password and notices about warnings or suspensions.
- Security log: to prevent fraud and abuse, detect accounts created to evade a suspension, investigate reports and answer requests from the authorities.
- To review reports and moderate content according to the Terms and Conditions.
- To see aggregated figures (for example, how many cards are created per day or from which countries) that help us improve the service.
We do not sell your data, we do not use it for advertising and we do not make automated decisions with legal effects on you: moderation decisions are made by people.
4. Legal basis
We process your data to perform our contract with you (your account and your card), for our legitimate interest in keeping UnEnlace safe and free of abuse (security log, reports, moderation and aggregated figures), and to comply with legal obligations. If at some point we need your consent for something else, we will ask for it and you can withdraw it whenever you want.
6. International transfers
Our providers may store or process data in the United States and other countries. When the law requires it, we rely on the safeguards they offer, such as the standard contractual clauses approved for this purpose.
7. How long we keep it
- Account and card: while your account exists. When you delete it, we delete your card and your images; copies in our providers' backups disappear after a limited time.
- Security log: 90 days; after that it is deleted automatically.
- Reports and moderation: while the account exists. We may keep the minimum necessary for longer if there is a legal claim or a request from the authorities.
- Of deleted accounts we only keep a count per day, without personal data.
9. Your rights
You can access your data, correct it (most of it directly in the editor), ask for its deletion, object to or restrict its use, receive a copy in a portable format and withdraw your consent. In Mexico these are known as ARCO rights; in the European Union and the United Kingdom they are recognized by the GDPR.
To exercise them, write to support@unenlace.com from the email of your account, telling us what you need. We will answer within the deadlines set by the law that applies to you. You can also file a complaint with the data protection authority of your country.
10. Security
We use encrypted connections (HTTPS), access rules in the database so that each user only sees their own private data, access restricted to administrators, and codes instead of IPs in reports. No system is 100% secure; if there is a breach that affects you, we will tell you as the law requires.
11. Minors
UnEnlace is not for people under 18. If we learn that a minor created an account, we will delete it.
12. Changes to this policy
We may update this policy. The date of the current version is at the top, and if the change is important we will tell you in the editor or by email.
13. Contact
UnEnlace