Book a demo
Privacy

Privacy policy

What personal data this website processes, why, for how long, and who else sees it. In short: we host the site in a way that keeps server logs, count visits without cookies, record sessions and identify visiting companies only if you agree, and use what you type into the demo form only to get back to you.

Last updated: 20 October 2026

Who is responsible

The controller for the processing described here, under the EU General Data Protection Regulation (GDPR), is:

Company
Apilize Technologies SL
Address
C/ Carrícola 3, 5-15, 46017 Valencia, Spain
Registry
Registro Mercantil de Valencia, sheet V-232843
Tax ID (NIF)
B75743187
Privacy contact
privacy@apilize.com

Write to that address for any question about your data or to exercise the rights listed below.

Hosting and server logs

The site is a static website hosted by Render (Render Services, Inc., San Francisco, USA). When you open a page, your browser sends technical data that the hosting servers record in access logs: IP address, date and time, the page requested, the referring page, and your browser and operating system.

We need this to deliver the site and to keep it secure, for example to detect and block abuse. The legal basis is our legitimate interest in operating a secure website (Art. 6(1)(f) GDPR). The pages contain no third-party fonts, maps or videos; fonts and scripts are served from our own domain, apart from the PostHog analytics script and, after your consent, Google Tag Manager and the Leadfeeder script it loads, described below.

Analytics

We use PostHog (PostHog Inc., with data stored in PostHog's EU Cloud in Frankfurt, Germany) to understand how the site is used: which pages are read, where visitors come from, and which parts, such as the demo request form, are used. The PostHog script is loaded from PostHog's EU servers. With your consent we also load Google Tag Manager, which in turn loads Leadfeeder to see which companies visit the site. When you first visit, a banner asks for your choice, which covers both. You can change it at any time under Cookie settings.

Without your consent, or if you reject

PostHog runs in cookieless mode. Nothing is stored in or read from your browser's storage. Visits are counted with a hash computed on PostHog's servers from your IP address, browser details and a random value that changes every day, so the same visitor cannot be recognised on another day. We see page views, clicks on page elements, the referring site and campaign parameters in the link, browser, device type and approximate location (country or city) where available, as well as technical errors on the page (error message, script location, browser) and page load performance. Session recording is off.

The legal basis is our legitimate interest in measuring and improving the website with as little data as possible (Art. 6(1)(f) GDPR).

If you accept

In addition, PostHog stores a random identifier in a first-party cookie and in your browser's local storage, so that your visits can be connected over time, and records your session: mouse movements, scrolling and clicks, rebuilt as a replay of the page. Everything typed into form fields is masked in the recording and never sent.

The legal basis is your consent (Art. 6(1)(a) GDPR, and the rules on storing information in your device: § 25(1) TDDDG in Germany, Art. 22(2) LSSI in Spain). You can withdraw it at any time under Cookie settings; we then delete the identifier from your browser and return to cookieless mode. Withdrawal does not affect processing that happened before.

Google Tag Manager (only if you accept)

If you accept, the site loads Google Tag Manager (Google Ireland Limited, Ireland, with Google LLC, USA) from Google's servers. Tag Manager is a tool that loads other website scripts, here the Leadfeeder tracker described below. Tag Manager itself sets no cookies and does not build visitor profiles, but loading it transmits your IP address and technical browser data to Google. It loads only the scripts named in this policy.

The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG, Art. 22(2) LSSI). Without your consent Tag Manager is not loaded at all, and after you withdraw consent under Cookie settings it is no longer loaded.

Leadfeeder: which companies visit (only if you accept)

If you accept, Google Tag Manager also loads the tracker of Leadfeeder (Leadfeeder Finland Oy, Finland, part of Dealfront Group GmbH, Germany). Leadfeeder processes your IP address and the pages you view and matches the IP against a register of companies, so we learn which organisation a visit came from, for example its name and industry. We use this to understand which businesses are interested in Apilize and to follow up on business enquiries. Leadfeeder stores a random identifier in a first-party cookie and in your browser's local storage (both named _lfa) to connect visits from the same browser.

The legal basis is your consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG, Art. 22(2) LSSI). Without your consent the Leadfeeder script is not loaded at all. If you withdraw consent under Cookie settings, we delete the identifier and the script is no longer loaded.

In both cases

IP anonymisation is on, so PostHog does not store your IP address with the events. We do not link analytics data to the details you send through the demo form, do not build profiles of individual visitors for advertising and do not sell data. Your choice itself is kept in your browser's local storage so the banner does not come back on every page.

Demo requests and email

The Book a demo form asks for your name, work email, company and a preferred date and time, or, in the Call me ASAP tab, a phone number or email. We also send your time zone and the page you were on. The form is submitted to Google Forms in our Google Workspace (Google Ireland Limited); responses are stored in a Google Sheet that only our team can open, and we receive an email notification.

We use these details only to arrange and hold the call you asked for and to follow up on it. The legal basis is taking steps at your request before a possible contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR). The same applies when you email us directly.

Recipients and transfers

We use the following service providers, each bound by a data processing agreement and acting on our instructions:

  • Render Services, Inc. (USA): website hosting.
  • PostHog Inc. (USA; data stored in the EU): analytics and session recording.
  • Leadfeeder Finland Oy (Finland), part of Dealfront Group GmbH (Germany): identifying visiting companies, only with your consent.
  • Google Ireland Limited (Ireland), with Google LLC (USA): Google Workspace for the demo form, email and storing requests; Google Tag Manager, only with your consent.

Where data reaches a provider or its parent company in the USA, the transfer is covered by the EU–US Data Privacy Framework where the provider is certified under it, and otherwise by the European Commission's standard contractual clauses (Art. 45 and 46 GDPR). We do not share your data with anyone else unless the law requires it.

How long we keep data

  • Server logs: kept by Render for a short period for operations and security, then deleted.
  • Analytics events: up to 12 months, then deleted.
  • Session recordings: 30 days.
  • Identifier in your browser (only after consent): the PostHog cookie expires after one year; withdrawing consent deletes it immediately.
  • Leadfeeder cookie _lfa (only after consent): expires after one year; withdrawing consent deletes it immediately.
  • Company visit data in Leadfeeder: up to 24 months, then deleted.
  • Demo requests and related emails: as long as needed to handle the request and any business relationship that follows; if nothing follows, deleted after 24 months. Longer only where tax or commercial law requires it.

Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you (Art. 15);
  • have it corrected (Art. 16) or deleted (Art. 17);
  • restrict its processing (Art. 18);
  • receive it in a portable format (Art. 20);
  • object at any time to processing based on our legitimate interest, for reasons arising from your particular situation (Art. 21);
  • withdraw consent at any time, with effect for the future (Art. 7(3)).

To use any of these, write to the privacy contact above. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work. Our lead authority is the Spanish Agencia Española de Protección de Datos (aepd.es).

You are not required to provide personal data to read this website. Without your contact details we cannot arrange a demo. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

Changes

We update this policy when the website or the services behind it change. The date at the top shows the current version.