Privacy policy

Who is responsible

The data controller is Jonas Rodon Teixeira, tax ID (NIF) 41550281E, contact email info@tovallons.cat. IONIX is the video call and remote support service available at ionix.tovallons.cat.

What data we process

If you create an account: your email address, your password (stored encrypted, never in plain text), your language, your plan and the dates you signed up and verified.

Session history: if you use IONIX with your account, we store each room's identifier and its start and end time. We don't store what was said or seen.

Registered computers (Pro plan): if you register a computer for unattended access, we store its name, an identifier of its private room, an encrypted digest of its secret and the date it was last seen. The secret itself lives only on that computer; only your account can enter that room and the agent shows a notice every time someone connects. You can remove the computer from your dashboard at any time.

Technical data: your IP address is used in memory to limit sign-in attempts and appears in the hosting server's logs. We don't store it in our database.

Payments: when the Pro plan is available, payments are handled by Stripe. We never see or store your card details.

What we don't do

IONIX doesn't record video, audio or screen on its servers. With the Pro plan, whoever leads the session can record it on their own computer: both sides see a notice while it lasts and the file doesn't pass through IONIX. The connection between participants is direct and encrypted; when a network prevents that, our own relay forwards encrypted packets without being able to see their content.

If you use your computer and your phone in the same room at once, the chat between them goes directly between your devices, without passing through our server.

We use no tracking cookies and no advertising. We only keep your session and your language in your browser.

Why we use the data and on what legal basis

To provide the service and manage your account (performance of a contract). To send you service emails, such as email confirmation and password recovery (performance of a contract). To protect the service from abuse and attacks (legitimate interest). To charge and invoice (performance of a contract and legal obligation).

Who we share it with

IONOS SE, as the provider of the server where IONIX is hosted. Resend, to send service emails. Stripe, for payments, when available. Google, only through a public STUN server that browsers query when connecting to learn their public address: it receives your IP address, never the content of the session; we will remove it once we can use only our own server. We don't sell your data or share it for advertising.

How long we keep it

As long as you keep your account. Verification and recovery links expire on their own. You can ask us to delete your account and its history at any time by writing to info@tovallons.cat.

Your rights

From your dashboard you can download your data and delete your account yourself.

You can access, correct and delete your data, object to its processing, restrict it and request its portability by writing to info@tovallons.cat. If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or the Catalan Data Protection Authority (apdcat.cat).

Security

We use encrypted connections (HTTPS), store passwords with a secure hashing algorithm, limit sign-in attempts, and relay credentials expire after one hour.

Children

IONIX is not aimed at children under 16.

Changes

If we change this policy, we will publish the new version here with its date.