Last updated: 29 September 2026
Merjora, operated by Merjora S.L. in Madrid, Spain, is the data controller for the personal data described in this notice. Contact us at hola@merjora.com.
We collect account and identity details such as your name, email address and login information; the business information and content you submit during onboarding, assessments and support conversations; and technical and usage data such as device identifiers, IP address, browser information, activity logs and cookie preferences. Paddle separately collects the payment information needed to complete your purchase.
We use account and business data to create and administer your account, provide assessments, identify opportunities, deliver purchased services and support you because this is necessary to perform our contract with you. We process security, fraud-prevention, service analytics and product-improvement data for our legitimate interests in operating and improving a safe service. We use consent where required for optional analytics or marketing, and process information when needed to comply with legal obligations.
We share only what is necessary with hosting, infrastructure, analytics, communications and customer-support providers acting as our subprocessors; professional advisers such as legal and accounting providers; and public authorities where the law requires it. Paddle is our online reseller and Merchant of Record and receives information needed for product sales, subscription management, payments, tax compliance, invoicing, customer service and returns. We do not sell personal data.
Some providers may process data outside Spain or the European Economic Area. Where required, we use an adequacy decision, the European Commission's Standard Contractual Clauses or another legally recognised safeguard.
We retain account and business information while your account is active and afterwards only for as long as needed to provide the service, resolve disputes, enforce agreements and meet legal, tax and accounting obligations. Support, security and transaction records may be retained for the applicable statutory period. When information is no longer required, we delete or anonymise it.
We use appropriate technical and organisational measures designed to protect personal data, including encryption in transit and at rest, access controls, restricted operational access, backups and monitoring. No system can guarantee absolute security.
Under applicable data-protection law, you may request access, rectification, erasure, restriction or portability of your personal data; object to certain processing; and withdraw consent at any time without affecting earlier processing. We aim to respond within one month. Email hola@merjora.com. You may also complain to the Agencia Española de Protección de Datos (AEPD) or your local supervisory authority.
We use essential storage for security, language preferences and signed-in sessions. Optional product analytics remain off until you consent. You can accept, reject or change optional-cookie preferences from Cookie Settings in the footer. We do not use advertising cookies.