Privacy PolicyPolítica de Privacidad

2. What Data We Collect (Datos que Recopilamos)

We may collect the following categories of personal data:

• Conversation data: Messages and content you submit through our AI chat interface, which may include personal information related to your immigration situation.
• Session data: An anonymous session identifier generated automatically each time you use the platform. We do not link this to your identity unless you choose to contact us.
• Technical data: Browser type, device type, operating system, and general usage patterns collected automatically.
• Cookie preferences: Your consent choice stored locally in your browser.

3. Legal Basis for Processing (Base Jurídica)

We process your data on the following legal grounds under Article 6 GDPR:

• Contractual necessity (Art. 6.1.b): Processing your messages is necessary to provide you with the AI-assisted legal concierge service.
• Legitimate interest (Art. 6.1.f): Improving the platform and ensuring security.
• Consent (Art. 6.1.a): For any processing beyond service delivery, where required.

4. Third-Party Processors (Encargados del Tratamiento)

To provide our service, website-originated chat requests are transmitted to the language-model backend configured for the REGLAPP service. The final public-facing subprocessors list, including infrastructure and model providers, will be published here before public launch and kept aligned with the live stack.

We do not sell your personal data to third parties. This section is intentionally kept generic until the final production vendor list is frozen and verified for publication.

• Language-model backend: Chat messages are forwarded from this website to the configured REGLAPP backend endpoint for processing and response generation.
• Hosting and infrastructure providers: The final named list of website hosting, storage, logging, and infrastructure subprocessors will be inserted here before public launch.
• Additional service providers: Any future analytics, support, or operational subprocessors will be disclosed in this section before they are enabled in production.

5. International Data Transfers (Transferencias Internacionales)

Depending on the final production configuration, some service providers used to process chat requests may be located outside the European Economic Area (EEA). The final list of international transfers and the safeguards used for each provider will be inserted here before public launch.

• Named providers and jurisdictions: To be completed before public launch.
• Applicable safeguards: To be completed before public launch (for example, SCCs and/or another lawful transfer mechanism where required).

6. Retention Periods (Plazos de Conservación)

Until the final retention schedule is published, users should avoid submitting unnecessary sensitive or special-category personal data through the public chat.

• Chat session data: Retention period to be confirmed and published before public launch.
• Cookie preferences: Until you clear your browser data.
• Technical logs: Up to 90 days for security and debugging purposes.

7. Your Rights (Sus Derechos)

Under GDPR and LOPD-GDD, you have the following rights:

To exercise your rights, contact us at hello@artbot.es. You also have the right to lodge a complaint with the Spanish Data Protection Authority: Agencia Española de Protección de Datos (AEPD), www.aepd.es.

• Access (Art. 15): Request a copy of your personal data.
• Rectification (Art. 16): Correct inaccurate data.
• Erasure (Art. 17): Request deletion of your data (right to be forgotten).
• Restriction (Art. 18): Request restricted processing.
• Portability (Art. 20): Receive your data in a machine-readable format.
• Objection (Art. 21): Object to processing based on legitimate interest.

8. Automated Decision-Making (Decisiones Automatizadas)

Our platform uses artificial intelligence to assist with legal queries and generate informational responses. No fully automated decisions with legal or similarly significant effects are made solely by the AI. All case assessments involving legal consequences are reviewed by qualified professionals.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify users of material changes by updating the date at the top of this page.