Unfinished document: the controller's details are missing
This text has no legal validity until the company name, tax ID and registered address are filled in at src/lib/legal.ts. Until then, sign-up must not be opened to the public and no files from real users should be accepted.
Privacy policy
Updated on 14 Sept 2026
Informative translation. In the event of any discrepancy, the Spanish version prevails.
Who handles your data
The data controller is Brian Ortega Serrano, tax ID «PENDIENTE», registered address Avinguda Països Catalans, 3, 25132 Lleida. For anything to do with your data, write to hola@empop.app.
What we keep and why
| What | What for | Legal basis |
|---|---|---|
| Your email and password | So you can sign in to your account. | Performance of the contract |
| Region and sectors | To show you the grants that are useful to you and set aside the 6,000 that aren't. | Performance of the contract |
| Your company details: name, legal form, payroll, turnover | To know whether you meet each call's requirements. | Performance of the contract |
| Your project and your pitch deck, if you're a startup | To alert you to programmes that fit and, only if you switch it on, to show it to accelerators. | Consent |
| The grants you save or dismiss | So you don't lose track of them and so we don't show you again what you've already set aside. | Performance of the contract |
Your pitch deck
It's stored encrypted and private. It has no public address: to open it a link is generated that expires after five minutes. Nobody at EMPOP looks at it unless you ask us for help with it.
It's only shown to third parties if you explicitly tick the «I want accelerators to be able to see my project» box. You can untick it whenever you like and you stop appearing immediately. If you delete the file, it really is deleted.
Who else sees it
We work with two providers who host the application and the database: Supabase (database and files, servers in Ireland) and Vercel (the application). Both are data processors and are bound by contract.
We don't sell your data to anyone and we don't share it for advertising. The only sharing possible is the one you switch on: showing your project to accelerators and investors.
For how long
As long as your account is open. If you delete it, everything is removed —including the pitch deck— except what we're required to keep by law, such as invoices if you become a paying customer.
What you can require of us
To access your data, correct it, delete it, object to our handling it, restrict the handling and take it elsewhere. Write to hola@empop.app and we'll reply within a month at most.
If you think we're not doing it properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Cookies
We only use the ones needed to keep your session open. There are no advertising or third-party tracking cookies, so you don't need to give us permission for them.