Privacy policy

Last updated: October 2026

We don't sell your data or share it for commercial purposes. We only use it to handle your request and provide our services.

This policy explains how we process your personal data, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection and the Guarantee of Digital Rights (LOPDGDD).

1. Data controller

Controller: Metaweb Online, S.L.
Tax ID (NIF): B09849241
Address: Ctra. de Castellón, km 4,800, nave 60, Polígono San Valero II, 50720 La Cartuja Baja, Zaragoza (Spain)
Contact: info@mwo.es

2. What data we process

Contact form and email: name, company, email address, phone number, the service you are interested in and the information you include in your message.
Customers: the contact and billing details needed to provide the service you have purchased.
Client area and apps: name, email address, password (stored encrypted; we never see it), company, tax ID (NIF) and phone number if you provide them, the apps you try or purchase, your subscription and payment history, and, for installable apps, the identifier and name of the devices on which you activate your licence.
What you create in the apps with your account: for example, your MetaOffice documents (saved automatically to your account so you have them on all your devices), your Paylio invoices and quotes or your MetaBoard boards. We store it only for you and for the people on your team you share it with, and we don't look at it or use it for anything else. PDFs you prepare in MetaPDF are not stored: they are processed in your browser and never reach our server.
Sign in with Google: if you choose "Continue with Google", Google sends us your name, your email address and an identifier for your Google account, solely to create your account or sign you in. We do not receive your Google password or any other data from your account. You can disconnect Metaweb Online at any time in your Google account's security settings; your mwo.es account will keep working if you create a password for it.
Payments: we do not receive or store your card details. You enter them directly in the bank's gateway (Redsys) or in PayPal, which only report the payment result to us and, for renewals, a reference to the payment method.
Visit measurement (cookie-free): the page you visit, the date, the website you arrive from, whether you use a mobile device and an encrypted, irreversible fingerprint of your IP address, used only to count unique visitors. We do not store your IP or share it with anyone.
Browsing: only if you accept analytics or advertising cookies, the data described in the cookie policy.

We only ask for the data we need. Fields marked with an asterisk are mandatory; without them we cannot handle your request.

3. Purposes and legal basis

Answering your enquiries and preparing quotes: your consent and the application of pre-contractual measures at your request (Art. 6.1.a and 6.1.b GDPR).
Providing the services you have purchased, invoicing and managing the customer relationship: performance of the contract (Art. 6.1.b GDPR) and compliance with legal, tax and accounting obligations (Art. 6.1.c GDPR).
Managing your account, giving you access to the apps, collecting subscription payments and notifying you of anything affecting your service (end of the trial period, renewals, failed payments, changes to the terms): performance of the contract (Art. 6.1.b GDPR).
Counting visits to the website with our own cookie-free measurement, to know which pages are of interest: our legitimate interest in understanding how the website is used, with minimal data and without identifying you (Art. 6.1.f GDPR). This data is deleted after 13 months.
Measuring website usage and the effectiveness of our campaigns: your consent, which you can withdraw at any time (Art. 6.1.a GDPR).

We do not make automated decisions or build profiles with legal effects on you, and we will not send you commercial communications without your consent.

4. Retention

Enquiry and quote data that does not lead to a purchase is kept for up to one year to allow for possible follow-up. Customer data is kept for as long as the relationship lasts and afterwards for the legal periods (generally six years for commercial records and four for tax records). It is then deleted or blocked as required by law. What you create in the apps is kept until you delete it or close your account.

5. Recipients

We do not disclose your data to third parties except where legally required (for example, to the Spanish Tax Agency). When you pay for a subscription, the bank via Redsys (Servicios de Redsys, S.L.) or PayPal (Europe) S.à r.l. et Cie, S.C.A. process the payment data as independent controllers, under their own privacy policies. The providers that supply us with email and office software (Google Workspace), web hosting and, if you accept cookies, analytics and advertising (Google Analytics and Google Ads) have access to it as processors, under a contract compliant with the GDPR.

6. International transfers

Some Google services may involve data transfers to the United States. Google LLC is certified under the EU-US Data Privacy Framework and applies the standard contractual clauses approved by the European Commission, which ensures an adequate level of protection.

7. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw any consent you have given, without affecting the lawfulness of the processing carried out before. Write to us at info@mwo.es or by post to our address, stating the right you are exercising. If necessary to identify you, we may ask you for a document proving your identity.

If you believe we have not processed your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (aepd.es).

8. Security

We apply appropriate technical and organisational measures to protect your data against loss, unauthorised access or alteration, such as an encrypted connection (HTTPS) across the whole website.

9. Minors

This website is aimed at businesses and professionals. We do not knowingly collect data from children under 14.

10. Changes to this policy

We may update this policy to reflect legal changes or changes to our services. The date of the last update appears at the top of the page.