Privacy Policy

This privacy policy informs about the processing of personal data carried out by BUDDYBEAM, S.L. through the website buddybeam.app.

1. DATA CONTROLLER

2. DATA WE PROCESS

Data collected through the website

Contact form:

• First and last name
• Email address
• Message or inquiry

Browsing data:

• IP address
• Browser and device type
• Pages visited and time spent
• Cookies (according to our cookie policy)

Data collected through the conversational avatar

The avatar is a virtual assistant based on artificial intelligence. It is not a real person. When you interact with the avatar, the following data is collected:

• Session metadata: IP address, session start time, duration, and number of conversation turns.
• Technical session identifier (fingerprint): a pseudonymized identifier generated from technical browser parameters (language, screen resolution, timezone) used exclusively for session management and abuse prevention. This identifier does not allow direct personal identification.
• Conversation content: text transcripts of the conversation are retained for as long as necessary for quality control and, with your consent, to improve and train (fine-tuning) our own artificial intelligence models. Where possible, they are anonymized by disassociating them from your session.
• Audio data: the voice recording is processed for speech-to-text conversion and to hold the conversation. With your consent, the audio is also retained for the purpose of improving and training our own artificial intelligence models. Once processed, the audio is irreversibly anonymized, disassociated from your session, technical identifier and IP address, so that the resulting material no longer constitutes personal data.

3. PURPOSES OF PROCESSING

4. DATA RETENTION

• Commercial inquiries: up to 12 months from the last communication.
• Browsing data: as indicated in the cookie policy.
• Avatar session metadata (IP, time, duration, turns): 90 days from the session date.
• Avatar conversation transcripts: retained for as long as necessary for quality control and for the training (fine-tuning) of our models, in accordance with the consent given. Once irreversibly anonymized, they no longer constitute personal data.
• Audio data: in identifiable form, retained only for the time strictly necessary to process and subsequently anonymize it. Once irreversibly anonymized, it no longer constitutes personal data and may be kept without time limit as training material for our models.

5. DATA RECIPIENTS

Data is not transferred to third parties except:

• Strictly necessary service providers (for example, email) acting as data processors under signed data processing agreements. Voice, transcription and language-model processing is NOT delegated to any third party.
• Legal obligation: when required by competent authorities.

All data is processed and stored on BUDDYBEAM, S.L.'s own servers located in Spain. All artificial intelligence processing (speech recognition, transcription and language models) runs entirely on our own infrastructure, with no cloud services or third-party providers.

6. AUTOMATED DECISION-MAKING

The avatar generates responses using artificial intelligence language models. These responses are informational only and do not produce legal effects or similarly significant impacts on users. No automated decisions with legal or significant effects are made based on your interaction data (Art. 22 GDPR).

7. DATA SUBJECT RIGHTS

You may exercise the following rights:

• Access: know what data we process about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data.
• Objection: object to the processing of your data.
• Restriction: request that processing be limited.
• Portability: receive your data in a structured format.
• Withdraw consent: at any time.

How to exercise your rights:

Send a request to dpo@buddybeam.app indicating the right you wish to exercise and providing a copy of your identity document.

Complaint to the supervisory authority:

If you believe the processing does not comply with regulations, you may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. SECURITY MEASURES

We have implemented technical and organizational measures to protect your data:

• Encrypted connections via HTTPS/TLS protocol
• Own servers located in Spain
• Restricted access control
• Staff confidentiality policies
• Anonymization of the transcripts and audio used for model training

9. MODIFICATIONS

BUDDYBEAM, S.L. reserves the right to modify this privacy policy to adapt it to legislative or jurisprudential developments, as well as industry practices. In such cases, changes will be announced on this page with reasonable advance notice before their implementation. We recommend reviewing this policy periodically.

10. CONTACT

For any data protection inquiries:

BUDDYBEAM, S.L.
Email: dpo@buddybeam.app
Address: Carrer del Pare Palau, N.º 5, Izquierda, Entresuelo 3, 43001 – Tarragona, Spain