Privacy Policy
At Urboros we handle personal data with minimal friction and maximum transparency. This page explains what data we collect, what we use it for, where it is stored, and how you can exercise your rights.
1. Data controller
Controller: Urboros (hereinafter, «Urboros» or «we»).
Address: Barcelona, Spain.
Contact email: info@urboros.com.
To be updated with full legal name, tax ID, and registered address once the operating company is incorporated.
2. Data we collect and purposes
| Source | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, email, message, sector (optional) | To answer your inquiry and, if you accept, continue the commercial conversation. | Consent (Art. 6.1.a GDPR). |
| Call booking (Calendly / Google Meet) | Name, email, time, any notes you add | To schedule the session and send you a reminder. | Pre-contractual measures (Art. 6.1.b GDPR). |
| Urbi chatbot | Messages you write during the conversation | To assist you in real time and, if we detect a hot lead, notify the sales team. | Legitimate interest (Art. 6.1.f GDPR). |
| Web analytics (Vercel Analytics) | Truncated IP, user agent, visited path, referrer | To understand which pages perform and improve the site. We do not use advertising tracking cookies. | Legitimate interest (Art. 6.1.f GDPR). |
3. Retention periods
- Commercial inquiries without closing: 12 months from the last contact.
- Active clients: for the duration of the relationship + 6 years (tax obligations).
- Chatbot conversations: 30 days in operational logs, then anonymized.
- Analytics data: 13 months maximum.
4. Data processors
We work with providers that comply with the GDPR (Regulation (EU) 2016/679) and that host data within the EU or under the European Commission's Standard Contractual Clauses:
- Vercel Inc. — website hosting and analytics (EU servers by default).
- Google LLC — engine for the Urbi chatbot (Gemini API via Google AI Studio). Your messages are not used to train models when accessed through the paid API.
- Resend Inc. — transactional email delivery (contact form notifications).
- Calendly LLC and/or Google LLC — meeting scheduling.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction, portability, and withdrawal of consent at any time by writing to info@urboros.com with the subject «GDPR». If you are not satisfied with our response, you can file a complaint with the Spanish Data Protection Agency (AEPD) (aepd.es).
6. Automated decisions
The Urbi chatbot classifies whether a conversation is a «hot lead» using an automated model. That classification is used only to decide whether a team member should reach out to you sooner. It produces no legal or contractual effects on you, and you can always request human intervention by replying «I want to speak with a person».
7. Changes to this policy
If there are material changes, we will give notice on the home page at least 15 days before they take effect.
This text is our best informational effort. It does not replace legal advice. If you plan to integrate Urboros as a data processor in your own company, we will sign the corresponding DPA at no cost.