Privacy policy
Last updated 13 October 2026
This policy explains how Bernat Relats Martinez ("we") handles personal data in UserJourney. It has two parts: the data of founders and their teams who use the dashboard, where we are the controller; and the data about the users of their products, where the founder is the controller and we process it for them.
Who is responsible
Bernat Relats Martinez, NIF 49360587B, Carrer Rosella, 38, 08415 Bigues i Riells (Barcelona), Spain. Email: hello@userjourney.dev.
Founders using the dashboard
| Data | Why | Legal basis |
|---|---|---|
| Sign-in id, email, name and avatar from your sign-in provider (for example GitHub) | To create and identify your account and send account emails (billing, security, replies to your support messages) | Contract |
| Your projects, settings, playbook texts, team and session | To provide the dashboard | Contract |
| Your messages in the support chat, and ours | To answer you; if you're not on the dashboard when we reply, we email you the reply | Contract |
| Subscription state and billing events (plan, dates, amounts, cancellation reason) | To apply your plan and keep business and tax records | Contract and legal obligation |
| How you use our website and dashboard, measured with UserJourney itself: pages, the source of your first visit, your account id, email and name once signed in, and your plan | To see where people get stuck, help them and improve the product | Legitimate interest |
| Technical logs (IP address, browser, errors) kept briefly | To keep the service secure and fix problems | Legitimate interest |
We don't sell personal data, show ads, or send marketing. The dashboard uses one essential session cookie and stores your theme and sidebar choice in your browser. Our website and dashboard set no analytics or advertising cookies: visits are counted without cookies, as described below.
Users of our customers' products
When a founder installs UserJourney on their product, it processes on their behalf:
- Anonymous visitors: the page, the referring site or campaign, the country and the kind of device. To count people rather than page views, the IP address and browser are combined with a random value that changes every day into a code that can't be turned back into either; the code is deleted after two days and never stored with anything about the person. No cookies or device storage are used for this.
- Signed-in users: the user id the product sends and, if the founder chooses, their email and name; the onboarding steps and events they reach; and their subscription state from the founder's Paddle or Stripe account (plan, amounts, trial and cancellation dates).
- Messages sent to them: the playbook emails and in-app cards the founder turned on, whether they were opened or clicked, and unsubscribes. Every email has a one-click unsubscribe.
For this data the founder is the controller and we are their processor under our terms; requests about it should go to the product's owner, and we'll help them.
Who we share data with
| Provider | Purpose | Where |
|---|---|---|
| Cloudflare, Inc. | Hosting, database and network (all service data) | Global network; database in the EU |
| GitHub, Inc. | Sign-in | US |
| Paddle.com Market Ltd | Our payments, invoices and taxes, as merchant of record and an independent controller of your payment data | UK and EU |
| Resend, Inc. | Sending emails (account emails, and playbook emails on behalf of founders) | US |
| Paddle or Stripe, connected by each founder | Reading their customers' subscription events, as the founder instructs | Per provider |
Transfers outside the European Economic Area rely on the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.
How long we keep it
- Account data: while your account exists. Write to us to delete your account, and with it your projects and their data.
- Project data: events older than 400 days are deleted; people and their stage stay while the project exists. Deleting a project deletes all its data at once.
- Visitor codes: two days.
- Billing records: as long as tax law requires (in Spain, generally 4 to 6 years).
- Technical logs: a few days.
Your rights
You can ask to access, correct, delete, restrict or port your data, or object to its processing, by writing to hello@userjourney.dev. You can export each project's people as CSV from the dashboard (on plans that include it), and we'll send you everything else on request. If you think we've handled your data wrongly, you can complain to the Spanish data protection authority, the AEPD, or to the authority where you live.
Security
Connections are encrypted, every request checks that you can access that exact project, data is separated per project, secret keys stay on the server, and card details never reach us: Paddle (and, for founders' customers, their own payment provider) handles them.
Changes
If we change this policy in a way that matters, we'll tell you by email or in the dashboard before it applies.