Privacy policy
Controller: Carlos Andrés García Madariaga (DivAI), tax ID 38881208F, Calle Berguedà 4, Pta. A, 08338 Premià de Dalt (Barcelona), Spain · [email protected].
This policy explains how we handle the data of people who visit the website, write to us, try the sample assistant or sign up for DivAI. If you are a customer of a business that uses DivAI (for example, a patient of a clinic), that business decides about your data: its information is at the link its assistant gives you (docs.divai.es/{business}/privacidad). DivAI only processes it on the business’s behalf.
| What we do | What data | Legal basis | How long |
|---|---|---|---|
| Answer the contact form (including the "Sign me up" list for calls) | Name, business, phone, town, message, language, IP | You ask us to (pre-contractual steps) | 12 months from the last contact if you do not sign up |
| Let you try the sample assistant on WhatsApp | WhatsApp number, name, email, test messages and appointments | You ask us to by writing | 90 days, or earlier if you write BAJA |
| Contact local businesses to present DivAI | Business name, contact person, public address and phone, visit notes | Legitimate interest in presenting the service, only in person or by phone | 12 months without contact, or until you object |
| Onboard and serve client businesses | Business and representative details, contract acceptance (name, ID number, date, IP) | Contract | For the duration, and 5 years afterwards for possible claims |
| Invoicing and payment | Company name, tax ID, address, bank account (direct debit) | Contract and legal obligation | 6 years (commercial and tax law) |
| Measure website visits | Aggregated technical data, no cookies | Legitimate interest | As set by Cloudflare Web Analytics |
We do not send marketing by email or WhatsApp to anyone who has not asked for it. We do not make automated decisions about you.
Recipients. We do not share data with third parties except where required by law (tax authority, courts) or with the accounting firm that keeps our books. Technology providers working for us under data processing agreements: Cloudflare (website), Railway and Supabase (server and database, in the EU), Resend and Zoho (email), Meta (WhatsApp), Anthropic and OpenAI (AI for the sample assistant) and the direct-debit payment provider. Full list: Providers.
International transfers. Some providers are in the United States. Transfers rely on the EU-US Data Privacy Framework or on the European Commission’s standard contractual clauses.
Your rights. You can request access, rectification, erasure, objection, restriction and portability, and withdraw your consent, by writing to [email protected]. We will reply within one month at most. If you believe we have not handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es).
Cookies. This website does not use advertising or tracking cookies, our own or third-party, so we do not ask for your consent. We count visits with Cloudflare Web Analytics, which sets no cookies and does not identify visitors. Our hosting provider, Cloudflare, may use technical cookies to protect the website against attacks; these are necessary for it to work and do not require consent. If we ever add cookies that do require consent, we will ask before setting them.
Last updated: 4 October 2026 · privacidad-divai-v2