Privacy notice

Effective September 11, 2026

Who is responsible

Sonsoles RKT, SL operates this pilot and is the data controller. Contact: sonsolesrkt@gmail.com. Registered office: C/ Bernardo Lopez Garcia 18, Bajo, 03013 Alicante, Spain.

What we collect

We collect your work email, timed baseline, reason for not using shop management software, uploaded quote requests, the extracted checklist, your corrections, product events, and model cost. Do not upload payment-card data, government identifiers, health information, or information you do not have the right to process.

Why and for how long

We process this data to provide and evaluate the pilot under our agreement with you. Original files are normally deleted immediately after processing. Failed deletions are retried automatically, with a maximum retention target of 24 hours. Confirmed checklist results and operational metrics remain while your pilot account is active, then are deleted from the live system within 30 days after account deletion unless law requires longer retention. Encrypted backups expire within 90 days and are not restored except for disaster recovery.

Processors and transfers

Cloudflare delivers the website and API. Hetzner hosts the application and database in Germany. Amazon Web Services stores encrypted disaster-recovery backups for up to 90 days. GitLab deploys the application without receiving quote content. OpenAI or xAI may process extracted request text in the United States. API content is not used for model training unless we explicitly opt in. Provider safety logs may retain content for up to 30 days; xAI is used for real requests only if its data-retention setting shown in the pilot record is acceptable at that time.

Your choices

You may request access, correction, export, or deletion by using the contact above. You may withdraw from the pilot at any time. You may also complain to the Spanish Data Protection Agency.

Security

Access uses a private high-entropy link. Files are type-checked and malware-scanned. Raw content is excluded from application logs. The tool proposes fields; a person must confirm them before relying on the result.