joa.solucions
digitals

Privacy policy

Last updated: 25 September 2026

1. Data controller

This website is owned by DATAAPPS & LEARNING, SLU, tax number (NRT) L-720967-N, trading as SOLUCIONS DIGITALS JOA (trade registration number 936631 A). Business address: Urb. Can Noguer, Edifici Celistia, Bloc C, 4t 2a, AD700 Escaldes-Engordany, Andorra. Contact: joa@joasolucions.com.

This policy explains which data we process when you visit joasolucions.com, for what purpose and on which legal basis, for how long, and what rights you have. Andorran Qualified Law 29/2021 of 28 October on personal data protection applies.

2. Which data we process

  • Contact form: name and e-mail address (required, because without them we cannot reply), company (optional) and the message you write.
  • Direct e-mail: whatever data you choose to include when writing to our address.
  • Technical data: when you use the form or the analysis demo, our endpoints process your IP address to limit abuse (section 5). The hosting provider may keep request metadata, such as IP address, date and requested resource, in technical logs.
  • Analysis demo: the content of the file you upload, under the conditions in section 6.

We use no tracking cookies and no advertising analytics.

3. Purposes and legal bases

  • Answering enquiries and requests for information: pre-contractual steps taken at your request and, when you tick the box on the form, your consent. You may withdraw it at any time without affecting processing carried out before.
  • Preparing quotes and managing a contractual relationship: performance of the contract or of pre-contractual steps.
  • Abuse prevention and service security (request limits, duplicate-submission control): our legitimate interest in keeping the service running and protected. We have weighed that this involves technical, pseudonymised data kept for a very short time.
  • Compliance with legal, accounting or tax obligations: legal obligation.

We do not build profiles or make automated decisions with legal effects on you.

4. Contact form and e-mail

Your enquiry is sent to our mailbox through Gmail, by Google. The application does not store the form content in files on the web server. Messages are kept in the e-mail services used to send them and handle the reply, in line with the applicable retention periods.

The e-mail we receive records the version of this policy you accepted and the time of acceptance, so that it can be evidenced.

5. Usage limits and technical data

To limit abuse we use temporary counters in Redis (Upstash) linked to a cryptographic digest (hash) of the IP address, never the plain IP. Analysis demo counters expire after 24 hours. Form counters expire after 10 minutes or one hour, and delivery receipts after 24 hours.

The hash is a pseudonymisation measure, not a guarantee of anonymity.

6. Data analysis demo

Exploring a CSV or Excel file happens in your browser: the file is not sent to the server.

Only if you request an AI reading is a limited sample sent to our server. Our endpoint processes the sample in memory without storing its content in a database or file. OpenAI receives a statistical profile (column names, categories and aggregate statistics), not the original rows.

The statistical profile sent to OpenAI is subject to the provider’s controls and retention periods. According to its documentation, the API does not use the data to train models by default, but may keep abuse-monitoring logs for up to 30 days.

Aggregating data is not the same as anonymising it: column names and categories may contain personal information. Do not enter personal or confidential information in this demo.

Your browser keeps a local count of the queries available to you (section 7). The server keeps its own counters (section 5).

7. Browser storage

We use no cookies. Some pages use the browser’s local storage (localStorage), which stays on your device and is not sent to us:

  • analysis-counts: shows the usage limits of the analysis demo. Values from other days are ignored.
  • theme: display preference on the maths practice page.
  • mathProgress and currentCourse: progress and selected course in the maths practice.
  • totalSessions: local count of practice sessions, for information only.

They are kept until you clear them from your browser. They support the functionality you asked for (remembering limits, progress and preferences) and cannot identify you or track you across websites.

8. Recipients and providers

We do not sell or hand over your data. These providers are involved in running the site:

  • Vercel: website hosting and endpoint execution, with technical request logs.
  • Google (Gmail): delivery of form enquiries to our mailbox.
  • OpenAI: interpretation of the demo’s statistical profile, only if you enable it.
  • Upstash (Redis): temporary usage-limit counters.
  • jsDelivr: serves the MathJax library on the maths page. Your browser requests it directly and the provider can see your IP address.

The site’s typeface is served from our own domain, with no browser requests to Google Fonts. We may disclose data to authorities where legally required.

9. International transfers

These providers may process data outside Andorra, including in the European Union and the United States. We cannot guarantee that all data remains in Andorra or the European Union. We rely on the mechanisms provided by Law 29/2021 and on the guidance of the Andorran Data Protection Agency, such as adequacy decisions and contractual clauses, and on the safeguards offered by the providers. You may ask us for more information.

10. Retention

  • Enquiries: while we handle them and for up to 12 months after the last communication, unless they lead to a contractual relationship.
  • Contractual, accounting and tax records: for the periods required by Andorran commercial and tax law.
  • Technical counters: between 10 minutes and 24 hours.

These criteria also apply to e-mail sent from our mailbox.

11. Your rights

You have the right to access your data, rectify it, erase it, object to processing, request restriction, obtain portability and withdraw any consent you have given.

To exercise them, write to joa@joasolucions.com stating which right you wish to exercise. We may ask you to verify your identity. If you believe your request has not been handled properly, you may lodge a complaint with the Andorran Data Protection Agency (www.apda.ad).

12. Security

We apply proportionate technical and organisational measures: encryption in transit (HTTPS), a content security policy, request limits, restricted access to services and no logs containing enquiry content on the web server.

13. Changes to this policy

Any change will be published on this page with the corresponding date and version. Current version: 2026-09-25.