Legal notice & privacy policy
Legal notice (Aviso legal)
This website and the lina4.ai service are operated by:
- Poyais Invest SL
- Represented by the administrators (administradores solidarios, each with sole power of representation): Dr. Eva M. Winter, Juan J. Vanrell, Maximilian S. Winter
- Tax identification number (CIF/NIF): B57678682 (EU VAT ID: ESB57678682)
- Registered in the Mercantile Registry of Mallorca (Registro Mercantil de Mallorca): Volume (Tomo) 2436, Sheet (Folio) 23, Page (Hoja) PM-66362, Entry (Inscripción) 1
- Registered address: Paseo Illetes 4 / 12, 07181 Illetes, Spain
- Contact: support@lina4.ai
This legal notice is provided in accordance with Spanish Law 34/2002 on Information Society Services and Electronic Commerce (LSSI-CE).
Privacy policy
Who is responsible
The data controller for your personal data is Poyais Invest SL, contactable at support@lina4.ai. We collect as little personal data as possible and never sell it.
What data we process
- Account data: your email address and a securely hashed password.
- Profile and setup data you give us: your name, the address (subdomain) you choose, your GitHub username and optional GitHub no-reply email, the SSH public keys you provide, and your language and tone preferences. We use these to set up and run your own workspace and website address. Note that the address you choose is a public web address of the form code<handle>.lina4.ai; the handle therefore becomes public (it also appears in public certificate transparency logs). If you do not want a real name to be public, choose a pseudonymous handle.
- Technical data: your IP address, used briefly for security and rate limiting, and basic usage data needed to run the service.
Why we process it and on what legal basis
- To provide the service you request, including setting up your account, workspace and address (performance of a contract, Art. 6(1)(b) GDPR).
- To keep the service secure and prevent abuse, for example rate limiting (legitimate interest, Art. 6(1)(f) GDPR).
- To protect the registration form against automated abuse and bots, using Cloudflare Turnstile (legitimate interest, Art. 6(1)(f) GDPR).
- To send you optional updates, only if you opt in (your consent, which you can withdraw at any time).
Who receives your data (processors)
We use a small number of service providers strictly as processors acting on our behalf:
| Provider | Purpose | Where data is processed | Transfer safeguard |
|---|---|---|---|
| Hetzner | Server hosting and backups | Germany and Finland (EU) | None needed (processed within the EU) |
| Resend (incl. its subprocessor Amazon SES) | Delivery of transactional emails, such as the verification link | Provider in the US; sending path in the EU (eu-west-1) | EU-US Data Privacy Framework and EU Standard Contractual Clauses |
| Migadu | Receiving email you send to support@lina4.ai | Switzerland; mail servers in France (EU) | None needed (processed in the EU and Switzerland) |
| Porkbun | Domain and DNS, used to set up your name.lina4.ai address | United States | EU Standard Contractual Clauses |
| Anthropic | The AI assistant, Claude, that helps build your project; processes the content you choose to work on during a session | United States | EU Standard Contractual Clauses |
| Cloudflare | Bot protection on the registration form (Turnstile); processes your IP address and basic browser signals to tell humans from bots | United States and global | EU-US Data Privacy Framework and EU Standard Contractual Clauses |
Use of Claude (Anthropic)
The AI assistance in this service is provided through Claude, operated by Anthropic, under an account held by Poyais Invest SL. This means you access Claude as an administered offering: Poyais Invest SL enables your access and has administrative control over the data submitted to Claude through the service. Your use of Claude is also subject to Anthropic's own terms, in particular its Privacy Policy and Usage Policy. By using the service you agree to use Claude in line with that Usage Policy. We do not use your content to train AI models.
Other recipients
During workspace setup we also contact GitHub (GitHub Inc., United States): we check that the GitHub username you give exists, and we retrieve your public SSH keys from your GitHub account to grant you access. GitHub acts here as an independent third party, not as a processor on our behalf.
International transfers
Some of these providers, and the recipient GitHub, are based in or process data in the United States (Anthropic, Resend and its subprocessor Amazon SES, Cloudflare, Porkbun, and GitHub). These transfers are covered by appropriate safeguards: for Resend, Cloudflare and GitHub by the European Commission's adequacy decision for the EU-US Data Privacy Framework together with the EU Standard Contractual Clauses, and for Anthropic and Porkbun by the EU Standard Contractual Clauses. Hetzner (EU) and Migadu (EU and Switzerland) involve no such transfer.
How long we keep it
We keep your account and the data you create until you delete them. Security logs are kept only briefly (90 days) and then removed. You can request deletion of your account and associated data at any time by contacting us, and we honour that deletion.
Cookies
We use a strictly necessary cookie to keep you signed in. The bot-protection widget on the registration form (Cloudflare Turnstile) also sets a strictly necessary cookie that is used only to tell humans from bots. We do not use advertising, analytics or tracking cookies. Because these cookies are essential to provide the service, no cookie consent banner is required.
Your rights
You have the right to access, correct, delete, restrict or object to the processing of your personal data, and the right to data portability. To exercise any of these, contact us at support@lina4.ai. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD, C/ Jorge Juan 6, 28001 Madrid, www.aepd.es) or with the supervisory authority of your country of residence.
Changes
We will keep the current version of this notice on this page. Continued use of the service means you accept it.
Terms of service
The lina4.ai service is operated by Poyais Invest SL ("we"). By creating an account or using the service you agree to these terms.
The service
lina4.ai helps you build and host small web projects with AI assistance. It is currently offered free of charge in a limited, early test phase to a small group of users. The service is provided "as is" and "as available"; we do not promise uninterrupted availability and it is not intended for business-critical or production use during this phase. Because the service is provided free of charge and made available immediately after you sign up, you agree to that immediate provision; should any statutory right of withdrawal apply to a free digital service, it ends once provision has begun.
Acceptable use
You agree to use the service lawfully and not to misuse it (for example: no illegal, harmful, infringing or abusive content, no attempts to break or overload the platform, no use that endangers other users). The AI assistance is provided through Claude (Anthropic); you must use it in accordance with Anthropic's Usage Policy. We may suspend or remove a project or account that violates these terms or poses a security or legal risk.
Your content and responsibility
You are responsible for what you create, publish or run through the service, and you confirm you have the necessary rights to do so. Anything published at your address is your responsibility, not ours.
AI assistance
AI output can be wrong or incomplete. We give no warranty as to its correctness or fitness for any purpose, and you remain responsible for reviewing and using it.
Ending use
You can stop using the service and request deletion of your account and data at any time (see the privacy policy above). We may suspend or end your access, with notice where reasonable, in particular for the reasons set out under acceptable use.
Liability
To the extent permitted by applicable law, we are not liable for indirect or consequential damages, or for loss of data or profit arising from use of the service during this test phase. Nothing in these terms limits liability that cannot be limited by law.
Governing law
These terms are governed by Spanish law, without prejudice to any mandatory consumer protection rights you may have in your country of residence.