Privacy
policy.
What data we collect, what we use it for and how you can exercise your rights.
Data controller
- Controller: Marc Hurtado (KAIRO AI).
- Address: 07010 Palma de Mallorca, Illes Balears, Spain.
- Email: info@kairoai.es.
What data we collect
The data you give us in the form on this website and, to protect it against abuse, an identifier calculated from the IP address of your connection (the IP address itself is not stored). Please do not include sensitive data (health, beliefs and the like): we do not need it.
- Analysis form: name, company, email, phone (optional), team size (optional), what you tell us about where time is lost, and the language of the page, so that we can reply in that language.
- Where you came from: the page you entered through, the domain of the referring website and, if you came from an ad, its campaign. This tells us which channels work.
- If you book the call in the calendar: the data you enter in Calendly (name, email and anything you add).
- If you write to us by email or WhatsApp: whatever you send us.
- If you accept analytics cookies: website usage data (pages viewed and forms sent), without your name or email.
Purpose and legal basis
We use your data to respond to your request, prepare the diagnostic call and, if you ask us to, send you a proposal. We do not use it to send you advertising.
The legal basis is your consent, which you give by ticking the box on the form or by accepting analytics cookies (Art. 6(1)(a) GDPR), and the taking of pre-contractual steps at your request (Art. 6(1)(b) GDPR). You can withdraw your consent at any time by writing to info@kairoai.es; for cookies, you can also use “Cookie settings” in the footer.
How long we keep it
For as long as we are dealing with your request. If we do not end up working together, we delete it 12 months after our last contact. If you become a client, for the duration of the relationship and, afterwards, for the periods required by law (for example, 6 years for accounting records, under Article 30 of the Spanish Commercial Code, Código de Comercio).
Who else processes it
We do not disclose your data to anyone, unless required by law. For the website and email to work, the following providers process it on our behalf (data processors), under contract and solely for that purpose:
- Lovable Labs Incorporated (website hosting and aggregate visit counts). It is based in the US and applies the European Commission’s standard contractual clauses.
- Hostinger (email for info@kairoai.es), with mailboxes held in the European Union (France or Germany).
- Supabase (the database where form requests are stored), with the data held in the European Union (Frankfurt).
- Resend (sending the notification of your request and the confirmation email). It processes data in the US under the European Commission’s standard contractual clauses, and participates in the EU-US Data Privacy Framework.
- Google Ireland Limited (Google Analytics 4), only if you accept analytics cookies. It may process data in the US: Google LLC is certified under the EU-US Data Privacy Framework.
- Calendly LLC (booking the call), only if you open the calendar. It processes data in the US: it is certified under the EU-US Data Privacy Framework and, should that cease to apply, relies on standard contractual clauses.
- WhatsApp Ireland Limited, only if you choose to write to us on WhatsApp.
Your rights
You can request access to, rectification or erasure of your data, object to its processing, ask for its processing to be restricted or ask us to provide it to you in a portable format. Write to us at info@kairoai.es stating which right you wish to exercise; we will reply within one month.
If you believe we have not handled your data properly, you can lodge a complaint with the Agencia Española de Protección de Datos (Spanish Data Protection Agency) at aepd.es.
Minors
This website is aimed at businesses. We do not knowingly collect data from children under the age of 14.
Last updated: 10 November 2026