Privacy Policy

1. Who We Are

avely.ai is an AI transformation consultancy operated by avely.ai S.L., registered in Spain (CIF: [pending registration]). Our registered address is [registered address].

avely.ai helps organizations redesign operations, workflows, and decision systems using artificial intelligence. We act as a data controller for the personal data collected through this website.

For questions about this policy or your personal data, contact us at: privacy@avely.ai

2. Data We Collect

We collect only the data necessary to respond to your inquiries and provide our services. This may include:

• Name and professional contact details submitted via our contact form
• Company name and role, where provided
• Message content submitted through our contact form
• Technical data such as IP address, browser type, and device information (collected automatically via server logs)
• reCAPTCHA interaction data, processed by Google to prevent spam (see Google's Privacy Policy)

We do not collect sensitive personal data (e.g., health, biometric, or financial data) through this website.

3. How We Use Your Data

We use your data to:

• Respond to your inquiries and consultation requests
• Provide, maintain, and improve our services
• Communicate with you about our services when you have expressed interest
• Ensure the security and proper functioning of our website
• Comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

• Consent (Art. 6(1)(a)): When you submit our contact form, you explicitly consent to the processing of your data for the purpose of responding to your inquiry. You may withdraw consent at any time.
• Legitimate interest (Art. 6(1)(f)): We process technical data (server logs, IP addresses) to maintain the security and performance of our website. Our legitimate interest is balanced against your rights and does not override your fundamental freedoms.
• Legal obligation (Art. 6(1)(c)): We may process data when required to comply with applicable laws, regulations, or legal proceedings.

5. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Contact form submissions: Retained for up to 12 months after your last interaction with us, unless a business relationship is established, in which case data is retained for the duration of the relationship plus any legally required period.
• Server logs: Automatically deleted after 90 days.
• Contractual data: Retained for the duration of the contract plus the legally required retention period under applicable commercial and tax law (typically 6 years in Spain).

When data is no longer needed, it is securely deleted or anonymized.

6. Data Sharing

We do not sell, rent, or trade your personal data. We may share data with the following categories of recipients, only to the extent necessary:

• Form processing: Formspree, Inc. (USA) — processes contact form submissions on our behalf
• Anti-spam: Google LLC (USA) — provides reCAPTCHA to prevent automated abuse
• Hosting: GitHub, Inc. (USA) — hosts our website via GitHub Pages
• Legal authorities: When required by law, court order, or regulatory request

All third-party processors are bound by data processing agreements and are required to handle your data in accordance with applicable data protection laws.

7. International Transfers

Some of our service providers are based in the United States. When your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, including:

• EU-U.S. Data Privacy Framework certification of the recipient
• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by the European Commission, where applicable

You may request a copy of the safeguards in place by contacting us at privacy@avely.ai.

8. Your Rights

Under the General Data Protection Regulation (GDPR) and applicable Spanish data protection law (LOPDGDD), you have the following rights:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your data when it is no longer necessary for the purposes collected
• Restriction: Request that we limit the processing of your data in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interest
• Withdraw consent: Withdraw your consent at any time, without affecting the lawfulness of processing carried out before withdrawal

To exercise any of these rights, contact us at privacy@avely.ai. We will respond within 30 days.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es or with any other competent supervisory authority.

9. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (TLS/HTTPS), access controls, and regular security reviews. No system is completely secure; if you suspect any unauthorized access to your data, please contact us immediately.

10. Cookies

We use only essential cookies required for this website to function. We do not use tracking or advertising cookies. See our Cookie Policy for details.

11. Changes to This Policy

We may update this policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page reflects the most recent revision. We encourage you to review this page periodically. Continued use of our website after changes constitutes acceptance of the updated policy.