At We Agile You, we work in accordance with the UNE-ISO 27001:2022 information security standard. This allows us to offer our customers a comprehensive, personalized service with a high degree of professionalism and information security, focused on delivering safe, high-quality digital products to companies of all kinds.
At We Agile You, we know that information is a highly valuable asset for both our organization and our customers. It therefore requires adequate protection and management to ensure the continuity of our business and to minimize any damage caused by failures affecting the integrity, availability and confidentiality of information.
For these reasons, We Agile You makes the following commitments:
- Demonstrate our ongoing commitment to information security management and the privacy of personal data through training and awareness programs that encourage everyone to take part in these areas, so that our staff's skills contribute to the continuous improvement of our production process.
- Comply with the law and with any other requirements agreed with our clients, including those related to information security and the protection of personal data, so that all our activities are carried out within the applicable rules and regulations.
- Meet these requirements and continuously improve the effectiveness of the Information Security Management System by measuring and monitoring the solutions and developments made for our clients, as well as our information security and personal data privacy objectives.
- Ensure business continuity by developing continuity plans in accordance with recognized methodologies.
- Carry out, and periodically review, a risk analysis based on recognized methods that allows us to establish the level of information security and personal data protection, and to minimize risks through specific policies, technical solutions and contractual agreements with specialized organizations.
- Ensure that the staff of We Agile You work towards the objectives set and comply with legal requirements at all times.
How we protect your data
- Encryption: all traffic between your browser and our services is encrypted over HTTPS (TLS). Your data is stored in Google Cloud (Firebase), which encrypts it at rest.
- Access control: sign-in is handled by Firebase Authentication, and database security rules restrict who can read and write each record. Only the staff who need it can access production data, and all our internal tools use two-factor authentication. Anyone who has a game's URL can read that game, so only share it with your team.
- Backups: your data is backed up regularly with Google Cloud's managed backups.
- Data retention: we keep your data while your account exists. When you delete your account (My account → Delete account), we immediately delete your profile, the games you own, your retrospective and icebreaker data, and cancel any subscription. Billing records are kept for as long as tax law requires, newsletter data is kept until you unsubscribe, and copies in backups expire on their own schedule.
Last updated on October 22, 2026