Your data is part of the system. We protect it by design.

Data we process

• Identification and contact details: name, company, email, telephone number and website.
• Professional information: industry, processes, tools, team, problems, objectives and priorities you choose to describe.
• Diagnostic content: answers, comments, confirmations and documents you voluntarily provide.
• Business and service information: proposals, communications, tasks, decisions, requests and project follow-up.
• Technical and security data: date, time, IP address, browser, access, session and incident logs.
• Public-site navigation: pages and general actions, only if you accept optional analytics.

We do not need passwords, bank details, special-category data or unnecessary personal information about third parties. Do not include them in your answers or documents.

Purposes and legal bases

• Responding to your request, preparing the diagnostic and drafting a proposal: steps requested before entering into a contract.
• Creating private access, onboarding and delivering an agreed service: performance of a contract.
• Handling enquiries and professional communications: pre-contractual steps, contract or legitimate interests, depending on context.
• Protecting accounts and systems against fraud, abuse and unauthorised access: our legitimate interest in service security.
• Meeting tax, accounting and other statutory requirements: compliance with legal obligations.
• Measuring public-site navigation through Google Analytics: your consent, which you may withdraw at any time.

Requesting a diagnostic does not subscribe you to advertising. Unrelated marketing requires its own legal basis and will include a simple way to object or unsubscribe.

Diagnostic, AI and human review

We use AI to help organise your answers, analyse content you provide and prepare preliminary drafts. AI can make mistakes and does not by itself create a contract, final price or obligation for either party.

A person reviews conclusions before scope or commercial terms are approved. We do not make solely automated decisions that produce legal or similarly significant effects for you.

If you authorise website reading, we process only the public page you specify. Dictation, when you activate it and your browser supports it, uses your browser’s voice service.

Providers and recipients

We do not sell personal data. Providers may process it to operate the service under their data protection terms and agreements:

• Netlify: hosting, server functions and database.
• Zoho: professional email.
• Anthropic: artificial intelligence assistance.
• Google Analytics: optional public-site measurement after consent.

We may also disclose information to public authorities, courts, advisers or auditors where required by law or necessary to bring, exercise or defend legal claims.

International transfers

Some providers may process information outside the European Economic Area. Where they do, we use a valid mechanism such as an adequacy decision, the EU-U.S. Data Privacy Framework where applicable, or Standard Contractual Clauses together with any appropriate supplementary safeguards.

Retention

• Unsaved study: kept in the browser tab for up to 24 hours.
• Temporary AI jobs: expire after one hour.
• Private-area session: up to 30 days unless you sign out, access is revoked or a security incident requires earlier termination.
• Contacts who do not become clients: up to 12 months after the last interaction unless deletion is requested earlier.
• Client data: throughout the relationship and subsequently restricted for applicable statutory, tax and contractual periods.

You can remove documents from your study, subject to any restricted copies that must be kept by law or to defend legal claims.

Your rights

You may request access, correction, deletion, objection, restriction and portability where applicable, and withdraw consent without affecting earlier lawful processing. Email hola@inteqia.com. We may request proportionate additional information to verify your identity.

You may also lodge a complaint with the Spanish Data Protection Agency.

Security, children and changes

We use access controls, encryption in transit, temporary links and separation between organisations. No measure removes all risk; tell us immediately if you detect unauthorised access.

The service is intended for businesses and professionals, not children. We will update this policy when our processing, providers or legal requirements change materially.