Privacy policy
Last updated: 24 October 2026
This is an English translation provided for convenience. In case of discrepancy, the Spanish version prevails.
Data controller
Diego Meijide Garcia (AGENCIA RSE) · Tax ID (NIF) 47381046B
Plaza Agramar 3, 15172 Oleiros (A Coruña), Spain
hola@agenciarse.com
What data we process and why
| When | Data | Purpose | Legal basis |
|---|---|---|---|
| You use the project assistant | Messages, project brief (type, goals, budget, deadline, references), files you upload and the contact details you give us | Understanding your project and sending you a proposal | Your request: pre-contractual measures (Art. 6(1)(b) GDPR) |
| You reply by voice | Audio of your message | Transcribing it into text. The audio is not stored | Your request (Art. 6(1)(b) GDPR) |
| You ask us to call you | Name, phone number and preferred time slot | Calling you to discuss the project | Your request (Art. 6(1)(b) GDPR) |
| You purchase a plan or service | Billing and contact details, and the access credentials needed for the service | Providing the service, invoicing and supporting you | Contract (Art. 6(1)(b)) and tax obligations (Art. 6(1)(c) GDPR) |
| You email us | The data in your message | Replying to you | Your request or our legitimate interest in responding to you (Art. 6(1)(f) GDPR) |
| You open the assistant | Technical data from the anti-bot check (IP address, browser) | Protecting the assistant against abuse | Legitimate interest in security (Art. 6(1)(f) GDPR) |
We do not ask for sensitive data (health, beliefs, bank details, passwords, ID documents). If you include it in the chat, we will not use it and you can ask us to delete it.
The assistant uses artificial intelligence
The assistant is an AI, not a person. It asks you questions and summarises your project in a brief. It does not make decisions that have legal effects on you: the proposal and the price are prepared and reviewed by a member of the team.
Who else has access to your data
We do not sell or disclose your data. To provide the service, we use providers that process it on our behalf (processors), under a contract and with safeguards:
- Cloudflare, Inc.: hosting of the website and the assistant, anti-bot verification (Turnstile), voice transcription and storage of conversations and files.
- Mammouth AI: platform through which the assistant uses the artificial intelligence model. It receives the conversation to generate each answer.
- Xiaomi (MiMo): backup artificial intelligence model, used only if the main one does not respond. It processes data on servers in the Netherlands (EU).
- Anthropic, PBC: artificial intelligence model (Claude) that generates the assistant's answers. It does not use your conversations to train its models.
- SiteGround Spain, S.L.: hosting of the shop and the WordPress client area, and email.
- Stripe Payments Europe, Ltd.: card payments in the shop. Card details are processed directly by Stripe; we neither see nor store them.
We also disclose data to the Spanish Tax Agency (Agencia Tributaria) and other public authorities when required by law.
Transfers outside the European Union
Cloudflare, Anthropic and Stripe (through its parent company) are based in or process data in the United States. These transfers are covered by the EU-US Data Privacy Framework or, failing that, by standard contractual clauses approved by the European Commission.
How long we keep it
- Assistant conversations, briefs and files: for a maximum of 12 months. If you go on to hire us, they become part of the project file.
- Voice audio: not stored; only the transcribed text, as part of the conversation.
- Clients: for as long as the relationship lasts and, afterwards, for the periods required by law (up to 6 years for accounting and tax records).
Your rights
You can request access to, rectification, erasure and portability of your data, object to its processing or ask for its processing to be restricted, by writing to hola@agenciarse.com. We will reply within one month.
If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD) (aepd.es).
Security
Communications are encrypted (HTTPS), the files you upload can only be accessed through signed links that expire, and access to data is limited to those who need it to provide the service.
Cookies
See the cookie policy.