Privacy policy

SetupX asks for the minimum data the service needs: who you are, how to reach you, and the laps you drive in the simulator. Nothing else. Here it is, in plain words.

Who is responsible for your data

SetupX is a subscription service for sim racing drivers. For anything about your data, write to setup@setupx.es and a person will answer. If you need the full legal and tax details of the owner, for an invoice or a complaint, we send them through that same address.

What we collect

• When you create an account or start the trial: your name and your email, plus how you heard about us if you tell us.
• When you pay: payments are handled by Stripe. We never see or store your card. From Stripe we receive your subscription status, the amount and the date.
• When you use the app: your Assetto Corsa lap data (times, speed, throttle, brake, gears, steering, car, track and conditions) and the setups you request.
• When you visit the website: your IP address and browser are recorded in the server log, as on any website. Measurement cookies only run if you accept them.

Why we use it, and on what legal basis

• To provide the service (your account, your setups, your lap analysis). Basis: our contract with you.
• To charge you and keep our accounts. Basis: the contract and our legal obligations.
• To email you about your account: welcome, payment notices, end of trial, incidents. Basis: the contract.
• To send the newsletter, if you signed up. Basis: your consent, which you can withdraw from any email.
• To measure how the site is used. Basis: your consent in the cookie notice.
• To improve the service with aggregated lap data that never identifies you. Basis: our legitimate interest.

Who we share it with

We do not sell your data and we do not hand it over for third-party advertising. Only the providers we need to run the service process it:

• Stripe (Ireland): payments and subscriptions.
• Resend (United States): sending service emails.
• Hetzner (Germany): the server everything runs on.
• Cloudflare (United States): storage for setup files.
• Anthropic (United States): the model that analyses telemetry and answers as the engineer. It receives lap data, not your name or email.
• Google (Ireland): website measurement, only if you accept cookies.

Transfers outside the European Union rely on the safeguards foreseen in the GDPR, such as standard contractual clauses or the EU-US adequacy framework.

How long we keep it

• Your account and your laps: while you are a customer and up to a year afterwards, in case you come back.
• Invoices and payment records: as long as tax law requires.
• The newsletter: until you unsubscribe.
• Server logs: a few weeks.

If you ask us to delete everything, we do, except what the law requires us to keep.

Your rights

You can ask us to access, correct, delete, limit, port your data or object to its use. Write to setup@setupx.es from your account address. If you think we are getting it wrong, you can complain to the Spanish Data Protection Agency (aepd.es).

Minors

The service is not aimed at children under 14. If we find an account belonging to one without parental consent, we close it.

Changes

If we change this policy we update the date above, and if the change matters we tell you by email.

Last updated: 22 October 2026.