Privacy policy
Last updated:
This policy explains what personal data iAgentify processes, why, for how long and with whom it is shared, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
This is a translation provided for convenience. If it differs from the Spanish version, the Spanish version prevails.
1. Data controller
- Controller
- ACTUAL GRANOLLERS, S.L.
- Tax ID (NIF)
- B-61728366
- Address
- Barcelona (Spain)
- Privacy contact
- [email protected]
2. The role we play
We process data in two different situations:
- As a controller. The data of people who visit this site, write to us through the contact form or create a iAgentify account.
- As a processor. The data of people who talk to our customers’ agents (for example, someone messaging the WhatsApp number of a restaurant that uses iAgentify). In that case the controller is our customer: we process the data on its behalf and on its instructions. If you are one of those people and wish to exercise your rights, contact the business you spoke to; if you write to us, we will pass your request on.
3. What data we process
- Contact form: name, email address, phone number and company if you provide them, and the content of your message.
- Customer account: name, email address, password (stored using irreversible hashing), company name, billing details (legal name, tax ID, address) and language.
- Payments: amount, date, payment status, and the last four digits, brand and expiry date of the card. Full card details are handled by the bank through Redsys; we do not receive them.
- Use of the service: technical logs, IP address, the date and time of access and actions carried out in the account.
- Free-trial checks: IP address and an irreversible hash of your email address, to prevent more than one trial being claimed.
- Chat on this site: if you use the assistant, the content of the conversation and an anonymous visitor identifier.
- Data processed on behalf of customers: the content of conversations with their agents, channel identifiers (for example, a WhatsApp number or Instagram username) and any contact details the person provides.
4. Why we use it and on what legal basis
| Purpose | Legal basis |
|---|---|
| Answering enquiries from the contact form and the site chat | Your consent (Art. 6(1)(a) GDPR) |
| Creating and managing your account and providing the service, including the free trial | Performance of a contract (Art. 6(1)(b)) |
| Charging, invoicing and meeting accounting and tax obligations | Performance of a contract and legal obligation (Art. 6(1)(b) and (c)) |
| Sending service notices: low balance, payments, security, changes to the terms | Performance of a contract (Art. 6(1)(b)) |
| Protecting the platform and preventing fraud and abuse of the free trial | Legitimate interest (Art. 6(1)(f)) |
| Processing conversation data for our customers’ agents | Processing on behalf of the customer (Art. 28); the legal basis is determined by the customer |
We do not send marketing communications without your consent, and we do not build profiles for advertising.
5. How long we keep it
- Enquiries: for as long as needed to deal with them and, afterwards, while liabilities may arise.
- Customer account and content: while the account is active. After it is closed, the data is deleted or anonymised, except for what must be kept by law.
- Invoices and payment data: for the periods required by tax and commercial law.
- Technical and security logs: for as long as strictly necessary to investigate incidents and prevent abuse.
Customers can delete their knowledge sources and leads from the dashboard at any time.
6. Who we share it with
We do not sell personal data. To provide the service we rely on the following providers, which process data on our behalf under a data processing agreement:
| Provider | Service | Data |
|---|---|---|
| OpenAI | Language-model processing that writes the replies and indexes the knowledge base | Conversation messages and knowledge passages |
| Meta Platforms | Delivery of WhatsApp and Instagram messages, only if the customer connects those channels | Messages and channel identifiers |
| Redsys and the bank | Card payments for subscriptions and top-ups | Payment data |
| Hosting provider with servers in the European Union | Hosting of the platform and its databases | All service data |
| Transactional email provider | Sending service emails (verification, notices) | Name and email address |
We may also disclose data to public authorities and courts where a law requires us to.
7. International transfers
Service data is hosted in the European Union. Some providers, such as OpenAI and Meta, may process data outside the European Economic Area. In those cases the transfer relies on the safeguards provided for in the GDPR: an adequacy decision of the European Commission or standard contractual clauses. You can ask us for more information at the contact address.
8. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to [email protected]. Tell us which right you wish to exercise; if we have doubts about your identity, we will ask you to confirm it.
If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
9. Security
We apply technical and organisational measures proportionate to the risk: separation of each customer’s data, encryption of channel credentials, passwords stored with irreversible functions, role-based access control and activity logging. There is more detail on the security page.
10. Use of artificial intelligence
Agent replies are generated by a language model from the conversation and from the information each customer provides. iAgentify does not use that data to train artificial intelligence models and does not make automated decisions with legal effects on individuals.
11. Minors
iAgentify is a service for businesses and professionals. It is not aimed at minors and we do not knowingly collect their data.
12. Changes to this policy
If we change this policy we will publish the new version here with its date. If the change matters to customers, we will tell them by email or in the application.