Data controller
Controller: NEXUSVIBE SL.
Tax identification number (NIF): B70966650.
Address: C/Casas de Miravete Nº 22A Planta 4, Oficina 4, 28031, Madrid.
Privacy policy
28 August 2026
Information about how personal data is collected, used, retained and protected across the YOTU brand.
Common scope of the YOTU brand
This policy applies uniformly to the YOTU brand and the digital services managed within its ecosystem.
Where a product has additional specific conditions, those conditions supplement this document without replacing its general framework, unless expressly stated otherwise.
- YOTU Pro: a marketplace for construction and renovation projects, clients and professionals.
- YOTU Invoices: quotes, invoicing and administrative management.
- YOTU OS: operational management of companies, job sites, teams, costs and projects.
- YOTU Time: working-time records, attendance and workplace incidents.
- YOTU Jobs: employment and hiring professionals.
- YOTU Ecosystem: shared presentation and navigation between the brand's products.
Categories of data
We process identification, contact, activity and technical data and, where appropriate, billing or contracting information.
- Identification: first name, last name, company, tax identification number and equivalent information.
- Contact: email address, telephone number and addresses required to provide the service.
- Platform use: logs, interactions, preferences and technical metadata.
- Billing and payments: information essential for managing subscriptions and accounting obligations.
Purposes of processing
We use data to provide the service, maintain security and meet legal obligations.
- Account management, authentication and support.
- Providing features of YOTU Pro, Invoices, OS, Time, Jobs and Ecosystem.
- Tax, commercial and fraud-prevention compliance.
- Product improvement and aggregated performance analysis.
Legal basis
We process data on the basis of contractual performance, legal compliance, legitimate interests and, where applicable, consent.
Recipients and processors
We may share data with technology providers, infrastructure services, payment processors and competent authorities when legally required.
We do not sell personal data to third parties for commercial purposes.
Retention
We retain data during the active relationship and for the periods necessary to meet legal obligations or defend claims.
Tax-related data is retained for at least the periods required by applicable tax rules.
Data subject rights
You may exercise the rights of access, rectification, erasure, objection, restriction and portability under the GDPR.
You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).
Security
We apply technical and organizational measures proportionate to the risk, including access controls, traceability, backups and periodic reviews.
International transfers
Where international transfers take place, appropriate safeguards under the GDPR will apply, such as standard contractual clauses or adequacy decisions.
Updates and contact
We may update this policy when legal requirements or the operation of our services change.
For privacy matters, use the official support channels of any YOTU product.