Legal
Privacy policy
Short version: the website sets no cookies and keeps nothing about you unless you send a form. The app does not keep the sites, apps or addresses you visit.
Who is responsible
The controller of your data is NicePeopleAtWork S.L. (NPAW), Calle Roc Boronat 23, 08005 Barcelona, Spain, tax ID B-64908460. For anything about your data, write to dataprotection@nicepeopleatwork.com.
The website
Reading this website creates no account and sets no cookies: no analytics, no advertising pixels, no social media widgets, nothing saved in your browser. The fonts are served from our own server. The site is served from NPAW's web server in Google Cloud, in the Netherlands. Like any web server, it receives your IP address, the page you ask for, the time and your browser's name, and keeps them in standard access logs for 14 days, to keep the site secure and running. Then they are deleted. We do not use them to identify you.
The forms (beta access, contact and business)
When you send one of the three forms, we keep what you wrote and the time we received it, and nothing else. We do not keep your IP address with it.
| What we keep | Why |
|---|---|
| Form | Which form you used: beta access, contact or business. |
| To answer you. | |
| Name | Optional. To address you by your name. |
| Your phone | Beta only, optional. Which phone to send the invitation for. |
| Country where you live | Beta only, optional. Where you live, to plan where the service is offered. |
| Company | Business form only, optional. The company you write for. |
| Message | What you tell us. |
| Language | The language of the page, to answer you in it. |
| Agreement | That you ticked the box. |
| Time received | To answer in order and to know when to delete it. |
Why we may. Your consent, which you give by ticking the box, and, for the beta, the steps you ask us to take before you use the app. You can withdraw your consent at any time by writing to us; we then delete the request.
Where. In Google Cloud storage in the European Union (the Netherlands), operated by NPAW. Only the NPAW people who answer the requests can read them.
How long.12 months after we receive it; then it is deleted. If you join the beta or we start working together, what that needs moves to that relationship and its own terms.
The app and the service
- Your account: the email address you sign in with, or the identifier Apple or Google gives us when you sign in with them, and the devices you sign in on (up to five). To know it is you and to give you access. Basis: the contract.
- Purchases: the receipt from the store or from the payment provider, to give you access, handle cancellations and refunds and meet tax law. Basis: the contract and our legal obligations.
- Usage: when each connection starts and ends and how much data it moves, to show it to you and to size our servers. Basis: the contract.
- Your traffic: it travels encrypted through our servers to reach its destination, as with any VPN. We do not keep the sites, apps or addresses you visit, nor the names your phone looks up. We use your IP address only while you are connected.
- Reports when something fails: only when you tap "Something wrong?" and only if "Send diagnostics when something fails" is on in Settings: what happened to the connection in the last two minutes (connection counters, phone model, app and system versions) and your note, never what you were doing. Basis: your consent, which you withdraw by turning the switch off.
How long. Technical records of the servers, 30 days. Reports when something fails, 90 days. Your account and its usage, until 30 days after you delete the account (you can do it in the app). Purchase receipts, as long as tax law requires.
With whom. Only with the providers we need to run the service, under contract and only on our instructions: Google Cloud (servers and storage), the payment provider for web purchases, the email service that sends you sign-in links, and Apple or Google when you buy or sign in with them. Some of them may process data outside the European Union; when they do, it is under the European Commission's standard contractual clauses or an adequacy decision. When, in VPN mode, you choose a country outside the European Union, your traffic reaches the Internet from a server in that country; we keep nothing of it there either.
We do not sell your data, we do not use it for advertising and we do not build profiles of you. We give an authority only what a valid legal order requires; since we do not keep your activity, we cannot give it.
Your rights
You can ask to access, correct, delete or take away your data, to limit how we use it or to object to it, by writing to dataprotection@nicepeopleatwork.com. We answer within one month. If you think we did not answer properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority where you live.
Age
Lagbuster is for people aged 18 or over.
Changes
If we change how we handle data, we update this page and the date below; if the change matters for you, we tell you by email or in the app before it applies.
Last updated: November 15, 2026