Privacy Policy

LolaCore is developed and operated by María DC, based in Granada, Spain. This Privacy Policy explains how we collect, use, and protect personal data in connection with lolacore.com and the LolaCore software ecosystem.

1. Who We Are (Data Controller)

For the purposes of the GDPR and Spain's LOPDGDD, the data controller is:
María DC
Granada, Andalusia, Spain
legal@lolacore.com

2. Scope of This Policy

2.1 lolacore.com (this website) — Data collected when you visit, purchase, submit a contact form, or subscribe to communications.

2.2 The LolaCore plugin on your WordPress site — The plugin operates entirely on your own server. We do not collect, receive, or process any data generated by the plugin. All plugin data is stored in your own database. We have no access to it.

3. Data We Collect on lolacore.com

3.1 Analytics (Google Analytics)

We use Google Analytics to understand how visitors interact with our site. It collects pages visited, time spent, referring source, device type, and anonymized IP address. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR), subject to cookie consent. Data transfers to the USA are covered by Standard Contractual Clauses. You may opt out via the Google Analytics Opt-out Browser Add-on.

3.2 Contact Form

We collect your name, email, and message content to respond to your inquiry. We use Resend for email delivery. Data is retained for up to 12 months. Legal basis: Legitimate interest (Art. 6(1)(f) GDPR).

3.3 Purchase Data (via Lemon Squeezy)

Premium add-ons are sold through Lemon Squeezy as Merchant of Record. Lemon Squeezy handles payment processing, taxes, invoicing, refunds, and PCI-DSS compliance. Your transaction data is governed by Lemon Squeezy's Privacy Policy. We receive only your name, email, license key, and purchase record — never your payment card data. Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).

3.4 License Data

When you activate a premium add-on, your license key and site URL are sent to Lemon Squeezy for validation. No other data is transmitted. License data is stored in your WordPress database and deleted upon uninstallation.

3.5 Transactional Email

We use Resend to send license delivery, update notifications, and support responses. These are strictly transactional and do not require separate consent. Legal basis: Performance of a contract (Art. 6(1)(b) GDPR).

3.6 Marketing Communications

We collect email addresses from visitors who opt in. This list is stored in our own WordPress database in Spain (EU), not transferred outside the EEA. Each email includes a one-click unsubscribe. Legal basis: Consent (Art. 6(1)(a) GDPR).

4. Cookies

lolacore.com uses: strictly necessary cookies (session management, security — no consent required), analytics cookies (Google Analytics — subject to consent), and preference cookies (store your consent choice). Manage preferences at any time via the footer cookie settings link.

5. Third-Party Services

6. AI Providers — Important Notice

The LolaCore plugin uses an AI provider configured by you on your own WordPress installation. María DC is not a party to the data exchange between your site and your AI provider. Messages and site context are transmitted directly from your server to your chosen provider under your own API key. We do not route, intercept, log, or receive any portion of these communications.

7. Data Retention

8. Your Rights Under GDPR

• Right of access — Request a copy of your personal data
• Right to rectification — Request correction of inaccurate data
• Right to erasure — Request deletion, subject to legal retention obligations
• Right to restriction — Request that we limit how we process your data
• Right to data portability — Receive your data in a machine-readable format
• Right to object — Object to processing based on legitimate interest
• Right to withdraw consent — Withdraw at any time without affecting prior processing

Contact us at legal@lolacore.com. We respond within 30 days. You may also lodge a complaint with the Agencia Española de Protección de Datos (AEPD) at aepd.es.

9. Data Inside the LolaCore Plugin

We have zero access to your plugin data. All data is stored in your WordPress database. No telemetry, usage statistics, or analytics are sent to our servers. No requests are made to us except for license validation. Conversation history and memory facts never leave your server except to your configured AI provider. Uninstalling the plugin permanently deletes all associated data. As the operator of your WordPress site, you are the data controller for any personal data the plugin processes.

10. Children's Privacy

LolaCore products are intended for business and professional use. We do not knowingly collect personal data from individuals under 16. Contact legal@lolacore.com if you believe a minor has submitted data.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the “Last updated” date at the top of this page when we do.

12. Contact

María DC
legal@lolacore.com
Granada, Spain

LolaCore is a trademark of María DC. All rights reserved.