Skip to Content

Privacy Policy

Last updated: May 8, 2026


1. Data Controller

AI-ZAR (hereinafter, “AI-ZAR”, “we”) is the data controller for personal data collected through the website ai-zar.es.


2. Data We Collect

We process the following personal data:

  • Contact data: name, email, company and message when you fill out the contact form.
  • Browsing data: IP address, browser, pages visited and duration (via analytics cookies with consent).
  • Client data: in implementation projects, we access your Odoo, WhatsApp Business and Drive data strictly to deliver the contracted service.


3. Purposes and Legal Basis

  • Handling inquiries — pre-contractual execution / legitimate interest.
  • Service delivery — contract execution.
  • Product improvement — legitimate interest, aggregated and anonymized data.
  • Legal compliance — tax, accounting and regulatory obligations.


4. AI Commitments

We do NOT train AI models with your data. Client data is never used as a training dataset for our own or third-party LLMs.

  • Inferences are made by calling Anthropic (Claude) and OpenAI (GPT) APIs, under their respective zero-data-retention policies.
  • We configure our agents not to store prompts or responses beyond the necessary flow.
  • Sensitive data is masked before any external call where possible.


5. Where We Store Data

  • Primary infrastructure in the European Union (GDPR compliant).
  • Encrypted in transit (TLS 1.3) and at rest (AES-256).
  • Backups with a maximum retention of 30 days.


6. Processors and Sub-processors

We work with GDPR-compliant providers with whom we have signed Data Processing Agreements (DPA):

  • Anthropic (Claude API) — AI inference processing.
  • OpenAI (GPT API) — AI inference processing.
  • Odoo S.A. — Odoo platform hosting.
  • IONOS — domain hosting.
  • Google (Workspace / Drive) — collaboration and document backups.


7. Retention Period

  • Contact data: up to 2 years after the last interaction.
  • Contractual data: during the relationship + legal periods (up to 6 years for tax obligations).
  • Browsing data: 14 months (analytics cookies).


8. Your Rights

You have the right to access, rectification, erasure, objection, restriction and portability of your data. You may also withdraw consent at any time.

To exercise these rights, write to us at hola@ai-zar.es. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD) at aepd.es.


9. Cookies

We use only technical cookies (necessary for operation) and, with your consent, analytics cookies (Plausible Analytics, privacy-friendly and without profiling).

We do not use advertising cookies or share data with social networks.


10. Changes to This Policy

We may update this policy when regulations or our services change. We will notify you by email or on this site when changes are significant.


Questions? Write to us at hola@ai-zar.es — we reply within 24 hours.