SetGantt by SetFile
← Back

Privacy Policy

Last updated: August 14, 2026. This Privacy Policy explains how SetFile processes personal data collected through the SetGantt marketing website at setgantt.com. It does not cover the SetGantt product itself, which will have its own privacy notice once its own data processing is defined.

APPROVED — V0.3 (NICO) This text was approved by Nico as SetFile's working legal base for setgantt.com. It has not been reviewed by external legal counsel.

1. Who is responsible for your data

The data controller responsible for this website is SetFile, S.L. (CIF ESB63448211), with registered address at Plaça de Catalunya, 1, 08002 Barcelona, Spain, legally represented by Nicolau Rabasseda. For any privacy question, contact us at setfile@setfile.net.

2. What information we collect

We only collect personal data if you actively provide it — through the contact form on this website. The form asks for your name and email address (both required), and optionally your phone number and a message. Before the message can be sent, your browser also completes a Google reCAPTCHA challenge (see Section 4).

This website has no user accounts, registration, or login — the contact form is the only place where you can submit personal data.

3. How we use your information

We use the information you submit through the contact form solely to respond to your enquiry. Submitting the form delivers your message to SetFile by email; we do not currently store the content of your enquiry in a database on our servers — it exists only as the email itself.

The legal basis for this processing is Article 6(1)(b) GDPR (steps taken at your request, prior to a possible contract) when your message concerns SetGantt as a product or service, and Article 6(1)(f) GDPR (our legitimate interest in responding to messages sent to us) for any other kind of enquiry. We do not rely on consent (Article 6(1)(a) GDPR) as the basis for this processing, since the form has no separate consent mechanism beyond submitting it.

4. Google reCAPTCHA

To protect the contact form against spam and automated abuse, we use Google reCAPTCHA v2 (the "I'm not a robot" checkbox), provided by Google as part of Google Cloud. Since April 2, 2026, Google no longer acts as an independent controller for reCAPTCHA: SetFile is the data controller for the data reCAPTCHA processes on this website, and Google acts only as our data processor, under the Google Cloud Terms of Service and the Cloud Data Processing Addendum. reCAPTCHA processes this data only for the purpose of providing and securing the service — detecting and preventing spam, fraud, and automated abuse — under the reCAPTCHA Service Specific Terms.

On this website, reCAPTCHA's script loads automatically as soon as the page finishes loading — not only once you start using the form — from Google's www.recaptcha.net domain (an alternate to www.google.com that Google documents as avoiding any additional cookies beyond reCAPTCHA's own). It sets a cookie (_GRECAPTCHA), which Google documents as necessary for this risk-analysis purpose. It may also process information such as your IP address and browser/device data as part of that analysis. Your IP address is also sent to Google separately, as part of the server-side verification when you submit the form.

5. Local storage (not a cookie)

This website remembers whether you prefer the light or dark visual theme using your browser's local storage (a single value, under the key setgantt-theme) — not a cookie. This value never leaves your browser, is not linked to your identity, and is not used for tracking.

6. Cookies

This website does not set any cookies of its own. Google reCAPTCHA, described in Section 4, sets its own necessary cookie (_GRECAPTCHA) when it loads, on every page that includes the contact form. For full detail, see our Cookies Policy.

7. Analytics and tracking

We do not use Google Analytics, Matomo, Plausible, advertising pixels, or any other analytics or tracking service on this website.

8. Video content

Product demonstration videos on this website are hosted directly by us as video files. They are not embedded from YouTube, Vimeo, or any other external video platform, and do not set any tracking cookies.

9. Security and technical logs

When you submit the contact form, our backend records your IP address, the time of the request, and whether the submission succeeded or was rejected (for example, for failing validation or the reCAPTCHA check), for security and abuse-prevention purposes — including limiting how many requests a single IP address can make per minute. We never log the content of your message or your reCAPTCHA response token.

These application-level security logs are kept for 30 days. CONFIRM WITH IT — PRODUCTION DEPLOYMENT whether the hosting infrastructure (for example, Nginx) additionally keeps general web server access/error logs, and for how long — this belongs to the future production deployment and does not block the rest of this policy. We do not assume such logs do not exist.

10. How long we keep your data

We keep your enquiry and any related correspondence for 12 months from the date of our last communication with you. If your enquiry leads to a contractual relationship with SetFile, any further processing of your data is governed by that relationship, not by this retention period.

11. Who we share your data with

Your contact form submission is sent by email through Arsys, our email delivery provider — see Arsys's data protection policy.

Your reCAPTCHA interaction is processed by Google, acting as our data processor as described in Section 4. We do not sell, rent, or otherwise share your personal data with any other third party.

12. International data transfers

Google acts as our data processor for reCAPTCHA under the Cloud Data Processing Addendum referenced in Section 4, which may involve processing your data outside the European Economic Area under whatever transfer mechanism is in place in that agreement at the time. We do not independently verify or restate those mechanisms here — see Google's Cloud Data Processing Addendum for its current terms. We are not otherwise aware of any transfer of your data outside the EEA in connection with this website.

13. Your rights

Under the GDPR and Spanish data protection law (LOPDGDD), you have the right to access, rectify, and erase your data, to restrict or object to its processing, and to data portability. To exercise any of these rights, contact us at setfile@setfile.net. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) if you believe your data has been processed unlawfully.

14. Data Protection Officer

SetFile has not currently appointed a Data Protection Officer. For any privacy-related question, please contact us using the details in Section 1.

15. Children's privacy

This website is intended for a business audience and is not directed at children. We do not knowingly collect personal data from children.

16. Changes to this policy

We may update this policy as the website or its underlying technology changes. The date at the top of this page reflects the last update.

17. Contact

For any question about this policy or your personal data, contact SetFile at setfile@setfile.net.