Privacy

Duesroll is a product of TEXNI VELOCIDAI S.L., a company registered in Spain. Where this page says “we”, it means that company.

For anything on this page, write to hello@duesroll.com.

We are the controller for the people who sign up to use Duesroll — association administrators — and for anyone who joins the waitlist. We decided to collect that data and we decide what happens to it.

We are a processor for everything an association puts into Duesroll about its own members: the member companies, the people who represent them, and what they declare. The association decides what to collect and why. We only hold and handle it so the association can run its dues.

If you are a member company and want your details corrected or removed, ask your association. They control that record; we act on their instruction. We will not act on it directly, because we have no way to know whether the request is legitimate and the association does.

If you administer an association: your email address and a hashed password, so you can sign in. Your association’s name and settings. Billing details for your subscription, held by Stripe rather than by us.

If your company belongs to an association using Duesroll: the company name, the name and email address of the contacts the association records against it, the figure the company declares each year, and the invoices and payments that follow from it. The association put that there.

If you joined the waitlist: your email address and, if you gave one, your association’s name. We use it to write to you when Duesroll opens, and for nothing else.

We do not hold card numbers or bank details. Those go directly to Stripe or PayPal and never reach our servers.

A member declares their figure through a link sent by email. That link is tied to one member and one round, expires, and is stored only as a hash — so the link in the email cannot be reconstructed from our database. Anyone holding the link can see and update that member’s own record and nothing else.

We use these companies to run Duesroll. Each one is bound to handle data only on our instructions.

• Supabase — the database and sign-in
• Vercel — hosting and serving the application
• Stripe — card and bank payments, and our own subscription billing
• PayPal — where an association has connected its own PayPal account
• Postmark — sending the emails Duesroll sends on an association’s behalf

We do not sell personal data, and we do not share it for advertising. There is no advertising on Duesroll.

When a member pays their dues by card or bank transfer, the money is charged directly on the association’s own Stripe or PayPal account. It never enters ours, and we take nothing from it. That means the payment record — including whatever the card network tells them — belongs to the association and to their payment provider.

Our providers operate in the European Union and the United States. Where data reaches the United States, it is covered by the standard contractual clauses or an equivalent transfer mechanism in our agreement with that provider.

Association and member records are kept for as long as the association uses Duesroll. If an association closes its account, we delete its data within 90 days, except anything we are required to retain — invoices and payment records, which Spanish law requires us to keep for six years.

Waitlist addresses are deleted once Duesroll is open and we have written to you, or sooner if you ask.

Under the GDPR you can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to send it elsewhere. Write to hello@duesroll.com and we will answer within one month.

If your data is in Duesroll because your association put it there, send the request to them — see section 2.

If you think we have handled your data badly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos. We would rather you told us first.

Duesroll sets one cookie, to keep you signed in. There is no analytics, no tracking, and no third-party cookie on this site or in the application.

If we change this page in a way that matters, we will email association administrators before it takes effect. The date at the top always shows the current version.