Privacy Notice

1. What we collect

Depending on what you choose to provide, we may collect:

• your name;
• your role or job title;
• your company name;
• the content of your chatbot messages and responses;
• information about your inquiry or business needs;
• technical and usage data such as timestamp, browser or device metadata, and an IP-derived hash or similar abuse-prevention signal;
• booking-related details if you schedule a meeting;
• your email address, but only if you choose to be contacted or a follow-up flow requires it.

2. Why we process your information

We process this information to:

• provide and operate the Chatbot;
• understand and respond to your inquiry;
• route business requests and follow-up communications;
• protect the service against spam, fraud, abuse, and security threats;
• improve our services and internal processes;
• manage scheduling and contact workflows where offered.

3. Legal basis

Where required by applicable law, we process your information on the basis of your consent, which you provide by sending a message after seeing the notice under the chat input, with links to the Terms of Use and this Privacy Notice.

For users in the EEA or UK, this may include consent under Article 6(1)(a) GDPR.

Where applicable, we may also process limited technical data where necessary for security and service operation.

4. Chat transcripts

Chat transcripts are stored and may be read by Álvaro Velasco to handle inquiries, improve operations, and protect the service from abuse. Business inquiries are assessed to help prioritise follow-up, with a conversation summary prepared after about three minutes without a new message or when a visitor requests contact or confirms a booking. Transcript copies may also be sent to Slack.

5. Retention

The live chat session lasts 24 hours. Chat transcripts and lead records are retained for 90 days from the last message, unless a longer retention period is required by law, needed for security or dispute handling, or you request deletion earlier where applicable. Copies in Slack follow the workspace retention settings.

Cal.com processes meeting bookings. The site retains the booking identifier, time and link to the associated conversation for 120 days; it does not copy the attendee name, email address or topic into that booking record.

6. Subprocessors and third parties

We may use third-party providers to host and operate the Chatbot and related workflows, including:

• Vercel for hosting and server infrastructure;
• Upstash for session storage and related data storage;
• Anthropic for AI processing of chatbot messages;
• Cal.com for meeting scheduling, if booking is enabled;
• Resend for email delivery;
• Slack for transcript copies and inquiry notifications;
• Cloudflare Turnstile for bot protection, if enabled.

Some of these providers may process data outside your country. In particular, chatbot content may be processed by Anthropic in the United States. Where required, we rely on appropriate safeguards for cross-border transfers.

7. Data minimization

We aim to minimize collection. We do not collect email addresses unless you choose to be contacted or a follow-up flow requires it. Conversations are never sold.

8. Your rights

Depending on your location, you may have rights to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent.

To make a request, contact: alvaro@albruv.com

If technically necessary, we may ask you to provide a session identifier or other information to help locate your data.

9. Deletion requests

You may request deletion of your chatbot data by contacting alvaro@albruv.com. If available, you may also use any deletion mechanism specifically provided in the service.

10. Changes

We may update this Privacy Notice from time to time. The latest version will be posted with the updated date above.

11. Contact

For privacy questions or data requests, contact:

Email: alvaro@albruv.com