Privacy policy

Last updated: 6 November 2026

This policy explains how PalAgent (Alex Armengou Parrado, Riera d'en Nofre 2 D, P03 A, 08970 Sant Joan Despí, Barcelona, Spain) handles personal data when you visit this website or use our services.

1. Who is responsible

For data about website visitors and our own customers we are the data controller. For conversations between an AI agent and our customers' end users we act as data processor on our customer's behalf.

2. Data we collect

  • Contact and account data: name, email, company, billing address and tax number.
  • Payment data: payment status and invoice records. Card details are handled by our payment provider; we never see or store full card numbers.
  • Messages: what you send us through the contact form, email or phone.
  • Service data: content you provide to configure your agent and the conversations it handles.
  • Technical data: IP address, browser type and pages visited, in server logs.

3. Why we use it and legal basis

To answer enquiries and provide the Service (contract), to issue invoices and meet tax obligations (legal obligation), to keep the Service secure and improve it (legitimate interest) and, where required, on the basis of your consent.

4. AI processing

Conversations are processed by AI models to generate answers. We do not use our customers' content or conversations to train models for other customers, and we do not sell personal data.

5. Sharing and transfers

We share data only with providers that help us run the Service (hosting, AI model providers, email and payment processing), under data processing agreements. Where data is transferred outside the European Economic Area we rely on adequacy decisions or Standard Contractual Clauses.

6. Retention

Customer data is kept while the contract lasts and afterwards for the periods required by tax and commercial law. Contact form messages are kept for up to 12 months. Conversation data is deleted according to the retention period chosen by our customer or on termination.

7. Your rights

You can request access, rectification, erasure, restriction, portability and objection, and withdraw consent at any time, by writing to support@palagent.online. You may also complain to the Spanish Data Protection Agency (AEPD, www.aepd.es).

8. Security and changes

We apply technical and organisational measures such as encryption in transit and access controls. We may update this policy and will publish the new version on this page.