Privacy policy
Version privacy-2026-10-16 · Last updated: 2026-10-16
This policy explains how AgentBroker Index (agentbrokerindex.com) processes personal data under Regulation (EU) 2016/679 (GDPR) and Spain's Organic Law 3/2018 (LOPDGDD).
1. Controller
Andrés G. Otero, an individual based in Spain who runs AgentBroker Index. Privacy contact: hola@agentbrokerindex.com. Full identification details are in the Legal notice. No data protection officer has been appointed (not required for this activity).
2. What we process, why, and on what legal basis
| Purpose | Data | Legal basis |
|---|---|---|
| Sending you the weekly newsletter (which may include sponsored content, always labelled as advertising) | Email, language, subscription status | Your consent (Art. 6(1)(a) GDPR; Art. 21 Spanish LSSI-CE) |
| Confirming your sign-up (double opt-in) and being able to prove your consent | Email, time of request and of confirmation, page you signed up from, version of this policy | Your consent and our obligation to be able to demonstrate it (Arts. 6(1)(c) and 7(1) GDPR) |
| Replying to emails you send us | Your email and message | Legitimate interest in answering you (Art. 6(1)(f) GDPR) |
| Serving the website securely (hosting provider's technical logs, abuse protection) | IP address and technical request data | Legitimate interest in security (Art. 6(1)(f) GDPR) |
We use no analytics, no profiling and no automated decision-making, and open/click tracking is switched off for our emails. We never sell or share your data with sponsors or advertisers. You must be at least 14 to subscribe (Art. 7 LOPDGDD).
3. Processors and international transfers
- Resend (Plus Five Five, Inc., USA) stores the subscriber list and sends the emails. Our sending is configured in its EU region (Ireland, eu-west-1), but Resend also processes data in the US. Safeguards: the European Commission's Standard Contractual Clauses (Decision 2021/914) incorporated in its DPA, and its EU-U.S. Data Privacy Framework certification.
- Cloudflare (Cloudflare, Inc., USA) hosts the website, runs the signup endpoint (Cloudflare Pages and Functions) and provides DNS. Safeguards: Standard Contractual Clauses in its DPA and its EU-U.S. Data Privacy Framework certification.
- Mailbox: Cloudflare Email Routing (Cloudflare, Inc.), which forwards messages sent to hola@agentbrokerindex.com to a mailbox hosted by Grok Bot (agentbrokerindex@mail.grokbot.com) / Cloudflare Email Routing (Cloudflare, Inc.), que reenvía los mensajes enviados a hola@agentbrokerindex.com a un buzón alojado por Grok Bot (agentbrokerindex@mail.grokbot.com), only for messages you send us.
4. How long we keep data
- Unconfirmed sign-ups: deleted within 30 days.
- Subscribers: for as long as you stay subscribed.
- After you unsubscribe: we keep your address flagged as unsubscribed, with the consent record, for up to 3 years only so we don't email you again and can show we acted lawfully; then it is deleted. If you ask for erasure we do it, keeping only the minimum needed to respect your choice.
- Emails you send us: as long as needed to deal with them, at most 2 years.
5. Your rights
You can request access, rectification, erasure, objection, restriction and portability, and withdraw consent at any time (without affecting earlier lawful processing), by writing to hola@agentbrokerindex.com. To unsubscribe, use the link in any email. If you think we have mishandled your data you can complain to the Spanish Data Protection Agency (AEPD), C/ Jorge Juan 6, 28001 Madrid, www.aepd.es, or the authority where you live.
6. Security
The site is served over HTTPS only; service keys are stored as encrypted secrets; confirmation and unsubscribe links are signed, and confirmation links expire after 48 hours.
7. Cookies
This site sets no first- or third-party cookies for analytics or advertising. See the cookie policy.
8. Changes
If we change this policy materially we will update the version and date and, where it affects subscribers, tell you in the newsletter.