Privacy Policy

Last updated: 16/09/2026

This is a courtesy translation. The Spanish version, at Política de Privacidad, is the legally binding one; in the event of any discrepancy, it prevails.

1. Data controller

Owner: Additiu Marketing Digital SL
Tax ID (NIF): B55314066
Registered address: C/ Sant Maurici 24, 17740 Vilafant (Girona), Spain
Contact e-mail: info@abency.com

Additiu Marketing Digital SL is the controller of the personal data collected through the Abency platform (hereinafter, "the Platform").

2. Personal data collected

The following categories of personal data may be processed through Abency:

a) Identification and contact data

• First name and surname
• E-mail address
• Company / business name
• Platform access data (username and credentials)

b) Professional data

• Information relating to the company or brand being managed
• Social networks and accounts connected by the user
• Metrics and analytics data derived from those integrations

c) Billing data

• Subscription status
• Customer and invoice identifiers in Stripe

3. Purposes of processing

Personal data is processed for the following purposes:

• To enable registration and access to the Platform
• To manage the contractual relationship and subscriptions
• To publish, schedule and analyse content on connected social networks
• To display metrics, reports and integrated analytics
• To manage billing and payments
• To handle enquiries and support requests
• To comply with legal and tax obligations

Data will not be used for purposes other than those described here.

4. Legal basis for processing

The legal basis for processing the data is:

• Performance of a contract (use of the Platform and provision of the service)
• Compliance with legal obligations
• Legitimate interest in improving and securing the service
• The user's consent, where required

5. Recipients of the data

Data may be disclosed only to providers necessary for the provision of the service, including:

• Stripe (payment and billing management)
• Google Analytics 4 (web analytics)
• Google Tag Manager (tag management)
• Third-party platforms connected by the user: Meta (Facebook / Instagram), Google, TikTok, LinkedIn
• Providers of specific features enabled by the user: DataForSEO (keyword research), Canva (design import) and OpenAI (AI-based semantic keyword clustering)
• Anthropic, PBC, only where the user voluntarily enables Abency's MCP connector in its products (see section 7)

In all cases, access to the data is strictly limited to the purpose of the service.

6. Use of Google user data (Google API Services)

Abency integrates with several Google services through their official APIs. Access to Google user data takes place solely with the user's explicit consent and complies with the Google API Services User Data Policy.

a) Google data accessed

When the user connects their Google accounts, Abency may access the following data, according to the permissions granted:

• Basic profile information: e-mail address and name associated with the Google account (for identification and authentication)
• Google Analytics 4: web analytics metrics and dimensions for the properties selected by the user (read-only access)
• Google Search Console: organic search performance data for the sites verified by the user (read-only access)
• Google Ads: advertising campaign data, including performance metrics such as spend, clicks, impressions, CTR, CPC and ROAS for the accounts selected by the user
• Google Business Profile: information on the accounts and business listings (locations) selected by the user, their daily performance metrics (impressions in Search and Maps, direction requests, call clicks and website clicks) and the associated reviews. Access is read-only: Abency does not create, modify or delete content on Google Business profiles

b) Purpose of the use of Google data

Data obtained from Google APIs is used exclusively to:

• Show the user unified metrics and reports within the Abency dashboard
• Allow centralised viewing of the performance of their web properties, campaigns, SEO rankings and local presence (Google Business Profile), including their reviews
• Make it easier to manage multiple accounts and brands from a single interface

c) Storage of Google data

• Abency stores the OAuth authorisation tokens needed to maintain the connection with Google services
• Metrics data may be cached temporarily to improve platform performance
• Data is retained for as long as the user keeps the integration active, and is deleted when the user disconnects their Google account

d) Sharing and disclosure of Google data

Abency does not share, transfer or disclose Google user data to third parties.

• Data obtained from Google APIs is accessible only to the user who authorised the connection and to the members of their organisation within Abency
• Google user data is not sold to third parties
• Google user data is not used for advertising purposes
• Abency does not transfer Google user data to artificial intelligence tools or machine learning models on its own initiative, and under no circumstances uses it to train models. The only exception is where the user voluntarily connects a compatible AI assistant through the official MCP connector (see section 7): in that case it is the user themselves accessing their own data through that assistant. Abency does not authorise the use of this data to train models and, under the terms of compatible providers such as Anthropic, data sent through their API and connectors is not used to train their models

e) Revoking access

The user may revoke Abency's access to their Google data at any time by:

• Disconnecting the integration from Abency's settings panel
• Revoking the permissions from their Google account security settings

Following revocation, Abency will delete the authorisation tokens and will stop accessing the user's Google data.

7. Integration with AI assistants (MCP connector)

Abency offers a connector based on the open MCP (Model Context Protocol) standard that allows compatible artificial intelligence assistants — such as Anthropic's Claude — to access the user's organisation data in Abency, on demand and on the user's behalf.

a) Voluntary activation and consent

• The connector is disabled by default and is only enabled if the user expressly connects it from their AI assistant
• The connection is authorised using OAuth 2.0 with PKCE: the user signs in to Abency and explicitly approves the access on a consent screen
• Access is scoped to the organisation of the authorising user, with no access to data belonging to other organisations

b) Data accessible through the connector

Depending on what the user asks their assistant to do, the connector may expose:

• The content and status of social media posts for the brands being managed
• Metrics and reports from Google Search Console, Google Ads, Meta Ads and web analytics
• Keyword research and rank tracking data (SEO)
• Internal organisation management data: users, clients, projects, work orders and time entries

c) Disclosure of data to the assistant's provider

When the user uses the connector with an AI assistant, the data needed to fulfil their request is transmitted to that assistant's provider (for example, Anthropic, PBC) for the sole purpose of processing the user's request. Abency does not authorise the use of this data to train AI models and, under the terms of compatible providers such as Anthropic, data sent through their API and connectors is not used to train their models. The provider's processing of the data is additionally governed by its own privacy policy. Abency does not sell this data and does not disclose it to any third party other than the assistant provider chosen by the user.

d) Revoking access

The user may revoke the connector's access at any time by:

• Removing the connector from their AI assistant's settings
• Revoking or deleting the access token from their organisation's settings in Abency

Following revocation, the assistant can no longer access the organisation's data.

8. International data transfers

Some integrations may involve international transfers of data outside the European Economic Area.

Such transfers are made only with providers that:

• Comply with the GDPR
• Offer adequate safeguards (standard contractual clauses or other legal mechanisms)

9. Data retention

Personal data will be retained:

• For as long as an active contractual relationship exists
• For as long as the user keeps their account on the Platform
• For the periods required by applicable law

Once the relationship ends, the data will be deleted or anonymised, save where there is a legal obligation to retain it.

10. Users' rights

The user may exercise the following rights:

• Access to their personal data
• Rectification of inaccurate data
• Erasure of the data
• Restriction of processing
• Objection to processing
• Data portability

To exercise these rights, send a request to: 📩 info@abency.com

The user also has the right to lodge a complaint with the Spanish Data Protection Agency (AEPD).

11. Data security

Abency applies appropriate technical and organisational measures to ensure the security, integrity and confidentiality of personal data, preventing unauthorised access, loss or alteration of the information.

12. Use of cookies

The Platform uses first-party and third-party cookies, including:

• Essential cookies required for it to work
• Analytics cookies (Google Analytics 4)
• Security and anti-fraud cookies (Stripe)

The use of cookies is governed in detail by the Cookie Policy.

13. Professional use only

Abency is a platform intended exclusively for companies and professionals (B2B). It is not directed at anyone under 14 years of age or at private consumers.

14. Changes to this policy

Additiu Marketing Digital SL reserves the right to amend this Privacy Policy to reflect legislative developments or changes to the Platform. Any amendments will be published on the website.