Privacy Policy

1. Data controller

The data controller for your personal data is:

2. Data we collect

We collect only the data necessary to provide the service:

• Registration data: name, email address and password (stored encrypted).
• Usage data: chatbot configuration, training documents and generated conversations.
• Technical data: IP address, browser type and access logs, retained for security purposes.
• Billing data: information required to manage subscription payments, processed by our payment provider.

3. Purposes of processing

We process your data for the following purposes:

• Provision and maintenance of the contracted service.
• Management of your user account and service-related communications.
• Platform improvement through aggregated and anonymised usage analysis.
• Compliance with legal and tax obligations.

4. Legal basis

The processing of your data is based on:

• Performance of a contract: necessary to provide the service you have subscribed to (Art. 6.1.b GDPR).
• Legal obligation: where required by applicable law (Art. 6.1.c GDPR).
• Legitimate interest: to ensure platform security and prevent fraud (Art. 6.1.f GDPR).

5. Data recipients

Your data may be accessed by the following data processors, with whom we have data protection agreements in place:

• AI providers (Anthropic, OpenAI): process conversation content to generate responses. See their privacy policies on their respective websites.
• Cloud infrastructure provider: secure hosting of platform data.
• Payment provider: billing and payment processing. We do not store credit card details.

6. International transfers

Some of our AI providers (Anthropic, OpenAI) are based in the United States. Transfers are made with adequate safeguards in accordance with the GDPR, in particular through Standard Contractual Clauses approved by the European Commission or under the EU-US Data Privacy Framework.

7. Retention period

We retain your data for as long as necessary to fulfil the purposes for which it was collected:

• Account and service data: for as long as your account is active and, after cancellation, for the legally required period (up to 5 years for tax and commercial obligations).
• Technical and security logs: maximum 12 months.

8. Your rights

As a user, you may exercise the following rights at any time by writing to legal@asistente.cloud:

• Access: obtain confirmation of whether we process your data and receive a copy.
• Rectification: request correction of inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request deletion of your data when it is no longer necessary.
• Portability: receive your data in a structured, commonly used format.
• Objection and restriction: object to processing or request that we restrict it in certain circumstances.

If you believe that the processing of your data violates applicable regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (aepd.es).

9. Cookies

We use only strictly necessary cookies for the platform to function:

• Session cookie: keeps you logged in while you navigate the dashboard.
• CSRF cookie: security protection to prevent cross-site request forgery attacks.

10. Contact

For any enquiry related to this privacy policy or to exercise your rights, write to us at: