Privacy policy

How we process your personal data on blacknodusai.com, in accordance with Regulation (EU) 2016/679 (GDPR) and Spain's data protection law (LOPDGDD). This English translation is provided for convenience; in case of any discrepancy, the Spanish version prevails.

1. Data controller

The controller of your data is:

• Owner: Vicente Bueno Benito
• DNI (Spanish ID): 46075222N
• Address: Camí Bovalar, 46138 Rafelbuñol (Valencia), España
• Contact email: admin@blacknodusai.com
• Website: https://blacknodusai.com

Black Nodus AI is the trade name under which the owner operates. When the business is incorporated as a company, this information will be updated with the corresponding company name and tax ID (CIF).

2. What data we collect and where from

We only process the data you give us voluntarily, mainly through the website's chat assistant or when you email us:

• Contact data: name, email address and, optionally, phone number and your company's name.
• Data about your inquiry: your sector or type of business, the need you describe and the content of the conversation.
• Minimal technical data: IP address and browsing data needed for the site to work and stay secure (for example, the anti-bot check).

We do not collect special categories of data, and our services are not aimed at minors.

3. What we use your data for and on what legal basis

• Handling your inquiry and contacting you to prepare an assessment or quote. Legal basis: your consent when you provide the data, and taking pre-contractual steps at your request (Art. 6(1)(a) and 6(1)(b) GDPR).
• Sales management and follow-up of the interest you have shown (keeping your contact in our CRM). Legal basis: consent and legitimate interest in managing the relationship (Art. 6(1)(f) GDPR).
• Site security and prevention of abuse/fraud. Legal basis: legitimate interest.

4. Recipients and processors

We do not sell or transfer your data to third parties. To provide the service we rely on providers acting as processors, with the safeguards required by the GDPR:

• HubSpot (the CRM where we keep your contact). European instance; HubSpot, Inc. adheres to the standard contractual clauses and transfer frameworks in force.
• OpenAI (processes the chat assistant conversation). Our contract is with OpenAI Ireland Ltd., which acts as processor. Processing may take place on servers located outside the EEA (see section 5). By contract, content sent through its API is not used to train its models and is kept for up to 30 days for abuse detection, after which it is deleted.
• Cloudflare (the "Turnstile" anti-bot check on the form/chat).
• OVH (site hosting on our own server, data centers in the EU).

Data will only be disclosed to authorities where there is a legal obligation.

5. International transfers

The site hosting and the CRM are in the European Union. The chat assistant conversation is processed with OpenAI and may be handled on servers located in the United States. That transfer is covered by the standard contractual clauses approved by the European Commission, included in the data processing agreement signed with the provider. Other providers (for example, HubSpot or Cloudflare) may process data outside the EEA with the same safeguards or under adequacy decisions.

If you prefer your data not to leave the EEA, don't use the assistant and email us directly at admin@blacknodusai.com: email and the CRM stay in the European Union.

6. How long we keep your data

We keep your data for as long as the business relationship or the interest shown lasts and, after it ends, for the periods required by law. If you ask us to delete it, we will, unless we are legally required to keep it.

7. Your rights

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, and withdraw the consent you have given, by writing to admin@blacknodusai.com (put "Data protection" in the subject line). If you believe we have not handled your request properly, you may file a complaint with the Spanish Data Protection Agency (AEPD) (www.aepd.es).

8. Cookies and similar technologies

This site does not use advertising cookies or third-party tracking cookies. Only the technologies strictly necessary for operation and security are used (for example, Cloudflare's anti-bot check and font loading). We do not build profiles from your browsing.

9. Changes to this policy

We may update this policy to reflect changes in the law or the service. We will always publish the current version on this page, with its update date.