Legal

Privacy policy

This policy explains how Cow Technologies processes personal data in PiOne: your account, the six apps (Zopi, Cowpi, Worpi, Yospi, Fanpi and Rippi) and the informational websites. It is written to be understood; if anything is unclear, write to us.

This is an English translation of the Spanish «Política de privacidad». If the two versions differ, the Spanish version prevails.

Who processes your data
Your data and your customers' data
Your account and purchase data
What you store in the apps
Zopi and Meta's platforms
Worpi and your Gmail account
Artificial intelligence
Providers that process data on our behalf
Transfers outside the European Union
How long we keep data
Security
Your rights and how to delete your data
The informational websites and your browser
Changes to this policy

1. Who processes your data

Cow Technologies, S.L.U., tax ID B70608153, Rúa de Muros 72C, 15896 Portela de Villestro, Santiago de Compostela (A Coruña), Spain. For any privacy matter, write to us at soporte@pi-one.app.

2. Your data and your customers' data

There are two kinds of personal data in PiOne, and our role is different for each:

Yours, as a PiOne customer (your account, your tax details, your purchases): here Cow Technologies is the controller, and this policy explains what we do with that data.
That of the people you work with and store in the apps (your customers, your contacts, your employees, the people who write to you on social media): here you are the controller and Cow Technologies is the processor. We process it only to provide the service to you, following your instructions, and never for our own purposes. This is set out in the terms of use (section 12), and we will provide you with the data processing agreement if you need it.

If you are a customer of a business that uses PiOne and you want to exercise your rights over your data, contact that business. If you write to us, we will pass your request on to them and help them deal with it.

3. Your account and purchase data

What data: name, email address and password (stored in a way that nobody can read it, not even us); the tax details you give us (name or company name, tax ID, address, phone number); your plan, your purchases and your use of artificial intelligence and emails; and whatever you write to us when asking for support.
What for: to create your account and give you access to the six apps with it; to provide the service; to charge you and issue your invoices; to measure the usage included in your plan; to send you service emails and notices (sign-ins, password recovery, charges, changes to prices or terms); to answer your questions; and to protect the service against fraud and attacks.
On what legal basis: the performance of the contract you accept when you create the account (Article 6(1)(b) GDPR); compliance with legal obligations, such as tax and accounting obligations (Article 6(1)(c)); and our legitimate interest in keeping the service secure (Article 6(1)(f)).
Payments: handled by Stripe. We do not see or store your card details.
Advertising: we will not send you advertising without your permission, we do not sell your data and we do not use it for third-party advertising.

4. What you store in the apps

Each app stores the data you give it in order to do its job. For third-party data you store, we act as processor (section 2). In summary:

Worpi: your customers, suppliers and employees, with their contact details and, if you record them, their bank details and SEPA mandates; quotes, orders, delivery notes, invoices, payments and expenses; visits, delivery routes and time records; and, for each delivery, the name and signature of the person who receives the delivery note. When you start a visit or tap «Estoy aquí» (I'm here), Worpi stores the phone's location at that moment; it does not track anyone's position. To locate addresses and calculate routes, it sends addresses to Google Maps. If you use the relevant features, it sends Anthropic the documents you scan so they can be read, your visit notes so they can be summarised and what you dictate so the instruction can be understood, and it sends OpenAI your voice notes to transcribe them (the audio is not stored). It can send emails from your own mail server and, if you connect it, from your Gmail account (section 6). If you give your accountancy firm access, it sees your invoices, your VAT books and your employees' time records. Your customers can download their invoices from the invoice portal, and if you use the DeCA, the carrier receives the control document for each shipment by link. If you turn on Verifactu, your invoice records are sent to the Spanish Tax Agency, as the law requires.
Zopi: the messages and comments you receive on the social networks you connect, and the people who send them. We explain this in detail in section 5.
Cowpi: your quotes and proposals, and the details of the people you send them to: their name and email; when and for how long they look at the proposal, with a fingerprint calculated from their IP address; the questions they ask you from the proposal, with their email; and, if they sign, their name, their email, the image of their signature, the IP address they sign from and their acceptance of the terms. Documents are stored in Cloudflare R2 and are opened with their link, which cannot be guessed. If you use the relevant features, Cowpi sends images to Google Vision to read their text, and sends Anthropic the details of a proposal to summarise it or the description of a job to suggest the lines of a quote. If you have PiOne, the quotes you make in Cowpi are also recorded in Worpi, with the customer's name and email.
Yospi: your services, your schedule and your team's (with their absences), your appointments and their payments, and your customers' details: name, phone number, email, language, your notes about them, their appointments, no-shows and blocks, and the waiting list. When someone books on your page, Yospi stores proof of their consent: what they accepted, when and from which IP address. On PRO, when you charge for an appointment, the sale is passed to Worpi with the customer's name, phone number and email to issue the invoice. Do not store health data or other specially protected data in customer, appointment or waiting-list notes, or in the reason for absences, unless you have a legal basis to process it.
Fanpi: your menu, your ordering points and the orders. From the person ordering: their name and phone number, what they type or dictate to order, their order history and proof that they accepted your terms (date, version of the text, IP address and browser). To understand each order, Fanpi sends Anthropic the customer's sentence, your menu and their latest orders. If the customer dictates the order, speech recognition is done by their own browser (Chrome, for example, does it with Google's servers). If the customer asks for it, Fanpi tells them their order is ready with a notification from their browser.
Rippi: your shop, your catalogue and the orders. From your buyers: their account in your shop (name, email, phone number, address and password, stored in a way that nobody can read it); their orders, with delivery details and proof that they accepted your terms (date, version of the text and IP address); their favourites, votes and reviews; and whether they want to receive your offers. The buyer pays on Stripe, in your own Stripe account, to which Rippi passes their email. If you use Worpi, the sale is passed to Worpi with their name, email, phone number and address to issue the invoice. Each shop has its own legal pages with the merchant's details.

The apps send you alerts by email and, if you turn them on, notifications in your browser or on your phone.

5. Zopi and Meta's platforms

Zopi replies on your behalf on Instagram, Facebook and WhatsApp Business. To do so, and only when you connect your account and give us permission, it processes the following data:

From your connected account: the identifier and username of your Instagram account, your Facebook page or your WhatsApp Business number, and the access token Meta gives us to act on your behalf. It also stores the information about your business that you write (sector, tone, services, prices and frequently asked questions) so that the replies sound like yours.
From the people who write to you: their identifier on the platform, their username, the text of their private messages and comments, and their phone number or name if they give them to you in the conversation. Zopi does not request or store their profile picture.

What we use each Meta permission for:

Seeing your pages and your Instagram professional account (pages_show_list, instagram_basic, pages_read_engagement): so that you can choose which account to connect, and to show it in Zopi.
Reading and replying to messages (instagram_manage_messages, pages_messaging): to receive the private messages sent to you, classify them and reply to them in your tone.
Reading and replying to comments (instagram_manage_comments): to reply to comments on your posts.

To classify each message (interested customer, comment or spam) and write the reply, Zopi sends Anthropic the message, the history of that conversation and the information about your business (section 7). Replies are published through Meta. Zopi only alerts you when there is real interest; it does not take decisions with legal effects on anyone.

We do not use the data we receive from Meta for advertising, we do not sell it and we do not share it with anyone, except the providers that process it on our behalf to provide the service to you.

How long: for as long as your account exists, unless you ask us to delete it (section 12). You can remove Zopi's access from your Meta settings (apps and websites) at any time: from then on Zopi stops receiving and sending messages on that account, but what has already been stored is kept until you ask for it to be deleted.

6. Worpi and your Gmail account

If you connect your Gmail account to Worpi (smart inbox), and only with your permission, Worpi:

reads your inbox (sender, subject, date and the beginning of the text of your latest emails) to show it to you inside Worpi next to your customers, so that you can see which customer is writing to you and what they owe;
marks as read the emails you open from Worpi;
sends emails from your account when you decide to (quotes, invoices, replies);
if you ask for help replying to an email, sends Anthropic its sender, its subject, part of its text and that customer's name and outstanding balance, to suggest a reply (section 7).

Worpi does not store the content of your emails: only the access token Google gives it, encrypted. We do not use Gmail data for advertising, we do not sell it, we do not use it to train artificial intelligence models, and nobody at Cow Technologies reads it, unless you ask us to in order to give you support or the law requires it. You can disconnect Gmail at any time from Worpi or from your Google account's permissions.

Worpi's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

7. Artificial intelligence

Some features of the apps use artificial intelligence, always to help you: Zopi, to classify messages and write replies; Fanpi, to understand the orders your customers type or dictate; Worpi, to read scanned documents, summarise visits, understand voice instructions and suggest replies to emails; and Cowpi, to summarise a proposal or suggest the lines of a quote. To do this, we send Anthropic only the text needed for each request. Worpi voice notes are transcribed by OpenAI. These providers act as processors: they may only use the data to provide their service to us and they do not use it to train their models. What the artificial intelligence suggests may contain errors; review it before using it.

8. Providers that process data on our behalf

To provide the service we use the following providers, which process data only on our behalf and under a data processing agreement:

Hetzner Online (Germany): the servers where the apps and their databases run, and one of the two backup copies.
Backblaze (data centre in the European Union): the second backup copy, encrypted.
Stripe (Ireland): payments for your plans and purchases in PiOne.
Resend (United States): sending the apps' emails and, in Cowpi, receiving emails, on Amazon Web Services infrastructure in Ireland.
Anthropic (United States): artificial intelligence.
OpenAI (United States): transcription of voice notes in Worpi.
Google (Ireland and United States): Google Maps in Worpi (locating addresses, calculating routes and showing maps), Google Vision in Cowpi, and Firebase for Rippi notifications.
Cloudflare (United States): storage of Cowpi documents (R2) and forwarding of support email.
Proton (Switzerland): the mailbox where we receive support email.

Data also reaches others by your decision or by law, and they are not our providers: Meta (Instagram, Facebook and WhatsApp) and Google (your Gmail account), which are the accounts you connect and which process data under their own terms; Stripe, when your Rippi buyers pay into your own Stripe account; the Spanish Tax Agency, which receives Verifactu records if you turn it on; and each browser's notification service (from Google, Mozilla or Apple), which delivers the notifications you turn on in encrypted form.

9. Transfers outside the European Union

Some of these providers are in the United States or may access the data from there. In those cases, the transfer is covered by the safeguards in Chapter V of the GDPR: an adequacy decision, such as the EU-U.S. Data Privacy Framework where the provider is certified, or the European Commission's standard contractual clauses. Proton is in Switzerland, a country with an adequacy decision from the European Commission.

10. How long we keep data

Your account and what you store in the apps: for as long as your account exists. If you stop paying or cancel a plan, your account goes back to Junior and your data stays; we do not delete it for non-payment.
If you close your account or ask us to delete your data: first, if you wish, we give you a copy (in Worpi, including your invoices and their tax records, which you are required to keep); then we delete it from the apps within 30 days at most. It remains in the encrypted backups until those backups expire, at most six months later, and it is not used for anything except to restore the service after a disaster.
Proof that someone accepted terms (date, version of the text, IP address and browser): when their data is deleted, it is kept without their name or phone number for three years, so that it can be shown in the event of a claim, and then deleted.
Invoices we issue to you and payment data: for the periods required by law (six years, under Spanish commercial and tax law), even if you close your account.
Worpi activity log (who made which change, when and from which IP address): twelve months.
Worpi control documents (DeCA): thirteen months; the link the carrier receives stops working seven days after the shipment ends.
Unfinished purchases in Rippi shops: seven days.
Technical server logs: 14 days, for the security and proper operation of the service, and then deleted.

11. Security

Data travels encrypted (HTTPS). Passwords are stored in a way that nobody can read them. The databases are not accessible from the internet. We make encrypted backups every day, with two different providers.

12. Your rights and how to delete your data

You can ask us for access to your data, to rectify it, erase it, object to its processing, restrict it or take it with you (portability), by writing to soporte@pi-one.app from your account's email address. We will reply within one month at most.

A copy of your data: ask us for it whenever you want.
Closing your account and deleting your data: write to us. Before that, if you wish, we will give you a copy.
Deleting Zopi's data from Meta: in your Facebook or Instagram account settings, go to «Apps and websites», choose Zopi and request that your data be deleted. Meta notifies us and we delete what Zopi stores for your connected Instagram and Facebook accounts: the connection and its access token, the messages, the leads and their contacts, and the example replies. Meta gives you a confirmation code you can use to check the status of the deletion. This does not close your PiOne account; for that, or to request deletion another way, write to us.

If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

13. The informational websites and your browser

The informational websites (pi-one.app and the apps' websites: zopi.es, cowpi.es, worpi.es, yospi.es, fanpi.es and rippi.es) have no forms, use no analytics or advertising, load nothing from other servers and store nothing in your browser. Only the technical server logs remain (IP address, date and time, requested page and browser), on the basis of our legitimate interest in security (Article 6(1)(f) GDPR).

When you use the apps, they store in your browser only what they need to work: your session, your preferences (such as the language) and, in some of them, a temporary copy of what you last looked at so that you can use it offline (for example, the delivery driver's routes in Worpi), which is deleted when you sign out. None of them uses analytics or advertising cookies. In three cases your browser connects to another service, and only when you use that feature: Worpi's maps are loaded from Google Maps; help videos, from YouTube in its privacy-enhanced mode; and when paying in a Rippi shop, Stripe uses its own cookies to prevent fraud. More detail in the cookie policy (in Spanish).

PiOne is designed for professionals and businesses and is not aimed at minors.

14. Changes to this policy

If we change this policy in a significant way, we will notify you by email before the change applies. The version in force is always the one on this page.

Last updated: 23 October 2026.