← Volver al inicio

Privacy Policy

Last updated: September 2026

1. Data controller

Identity: Ramon Saleta-Piersanti Besga

Trade name: Autonomix AI Labs

Tax ID (NIF): ESB88713128

Registered address: C/ Pons i Gallarza 44, 4º A, 07004, Palma (Illes Balears), Spain

Contact email: info@autonomix-ai-labs.dev

2. What data we collect and how

Through the contact form on the Website, we collect the following personal data voluntarily provided by the user:

  • Name
  • Email address
  • Phone number

If you message us on WhatsApp, or authorise us in the form to message you on that channel, we also process your WhatsApp number, your profile name and the content of the messages and files we exchange (text, voice notes, images, videos or documents).

If you talk to our voice assistant, we process your voice and the transcript of the conversation.

We do not collect specially protected data (special categories under Art. 9 GDPR). We do not take decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR). Section 4 explains how we use artificial intelligence.

3. Purposes of processing

The data provided is processed for the following purposes:

  • Handling your business inquiry: answering questions about our automation services, including through our artificial intelligence assistant.
  • WhatsApp notices about your request: messaging you to book the appointment and remind you of it, only if you have authorised it by ticking the corresponding box in the form, and answering the messages you send us on that channel.
  • Organising commercial follow-up: preparing internal summaries of your relationship with us so that the person attending to you has the context (see section 4).
  • Sending commercial communications: keeping you informed about news, use cases and automation strategies, provided you have expressly consented to receive them.
  • Managing the contractual relationship: if you hire our services, managing the contract and the obligations arising from it.

4. Use of artificial intelligence

We use artificial intelligence systems to assist you better and faster. In every case you can ask to be attended by a person.

  • WhatsApp assistant: an AI assistant may reply to your messages, answer questions about our services and manage your appointment (check it, or cancel it if you confirm). We tell you so in its first message. If you ask, or if your question requires it, it hands the conversation over to a member of our team.
  • Voice assistant: if you talk to it, it tells you at the start that it is an AI assistant and that the conversation is processed and may be recorded.
  • Voice note transcription: the voice notes you send us on WhatsApp may be converted into text so that we can attend to them.
  • Internal summaries: we use AI to prepare a summary of your relationship with us (messages, emails we have sent you and whether you opened them, appointments and attendance) with a suggestion on how to follow up. This is profiling without legal effects: it is a support tool, and the decision is always taken by a person. Your email address and phone number are not sent to prepare it. You can object at any time.

These systems run on AI providers acting as data processors (see section 7).

5. Legal basis for processing

The processing of data is based on:

  • Art. 6.1.a GDPR — Consent: for sending commercial communications, processing contact form data and sending WhatsApp notices.
  • Art. 6.1.b GDPR — Performance of a contract or pre-contractual steps at your request: to answer the questions you send us, through any channel, and where a contractual relationship exists between the parties.
  • Art. 6.1.c GDPR — Legal obligation: for compliance with accounting, tax or other legal obligations.
  • Art. 6.1.f GDPR — Legitimate interest: to prepare the internal commercial follow-up summaries described in section 4. You can object at any time.

You can withdraw your consent at any time by emailing info@autonomix-ai-labs.dev. For WhatsApp notices, you can also reply STOP to any of our messages.

6. Data retention

Data will be kept for as long as necessary to handle the request or while the business relationship remains in force. Once it ends, data will be kept duly blocked for the applicable legal limitation periods (generally 6 years for commercial obligations). After those periods, it will be permanently deleted.

If the processing is based solely on consent, the data will be deleted when you withdraw it.

Files you send us on WhatsApp (voice notes, images, videos or documents) are deleted from our systems 90 days after we receive them, unless they are needed for the business relationship.

The internal follow-up summary (section 4) is replaced every time it is updated and is deleted together with your data. The transcript of a voice note is kept with the message it belongs to.

7. Recipients and international transfers

Data is not disclosed to third parties, except where legally required or in the following cases:

  • Data processors: Hostinger International Ltd. (server infrastructure provider, with a datacenter located in France, EU), which hosts the controller's own data management systems. A data processing agreement under Art. 28 GDPR is in place with this provider.
  • Meta Platforms Ireland Ltd. (WhatsApp Business Platform): to send and receive WhatsApp messages when you message us on that channel or have authorised us to message you. It acts as a data processor.
  • OpenAI Ireland Ltd.: provider of the artificial intelligence models behind the WhatsApp assistant, voice note transcription and internal summaries. It acts as a data processor.
  • Eleven Labs Inc.: provider of the voice assistant. It acts as a data processor.
  • Google Cloud EMEA Limited (Google Workspace): email, appointment calendar and video calls. It acts as a data processor.
  • Legal obligation: where required by law or by a competent authority.

Some of these providers may process data outside the European Economic Area, always with appropriate safeguards:

  • Meta Platforms, Inc., Google LLC and Eleven Labs Inc. (USA): participants in the EU-U.S. Data Privacy Framework, covered by the European Commission adequacy decision of 10 July 2023 (Art. 45 GDPR).
  • OpenAI (USA): transfers by OpenAI Ireland Ltd. to other entities of its group or to its sub-processors outside the EEA rely on the standard contractual clauses approved by the European Commission (Art. 46.2.c GDPR).

8. Your rights

Under the GDPR and the Spanish LOPDGDD, you can exercise the following rights by sending a request to info@autonomix-ai-labs.dev, stating the right you wish to exercise and attaching a copy of a document proving your identity:

  • Access: know what data we process about you.
  • Rectification: correct inaccurate or incomplete data.
  • Erasure: request the deletion of your data.
  • Objection: object to the processing of your data.
  • Restriction: restrict processing in certain cases.
  • Portability: receive your data in a structured format.

We will respond within one month of receiving your request, extendable in complex cases.

In addition, whenever an AI assistant is attending to you, you can ask at any time to be attended by a person.

9. Complaints to the supervisory authority

If you believe the processing of your data breaches current regulations, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):

www.aepd.es — C/ Jorge Juan, 6, 28001 Madrid

10. Data security

We adopt appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including measures against unauthorized or unlawful processing and against accidental loss, destruction or damage (Art. 32 GDPR).