Privacy policy
At Urboros we process personal data with minimal friction and maximum transparency. This page explains what data we collect, what we use it for, where it is stored and how you can exercise your rights.
1. Data controller
Controller: Urboros (hereinafter, «Urboros» or «we»).
Address: Barcelona, Spain.
Contact email: info@urboros.com.
Pending update with the full company name, tax ID and registered address once the operating company is incorporated.
2. Data we collect and purpose
| Channel | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | Name, email, message, sector (optional) | Reply to your enquiry and, if you accept, keep the commercial conversation going. | Consent (art. 6.1.a GDPR). |
| Call booking (Calendly / Google Meet) | Name, email, time, data you add in notes | Schedule the session and send you the reminder. | Performance of pre-contractual measures (art. 6.1.b GDPR). |
| Urbi chatbot | Messages you type during the conversation | Assist you in real time and, if we detect a hot lead, notify the sales team. | Legitimate interest (art. 6.1.f GDPR). |
| Web analytics (Vercel Analytics) | Truncated IP, user agent, visited path, referer | Understand which pages work and improve the site. We do not use advertising tracking cookies. | Legitimate interest (art. 6.1.f GDPR). |
3. Retention periods
- Commercial enquiries without closing: 12 months from the last contact.
- Active clients: for the duration of the relationship + 6 years (tax obligations).
- Chatbot conversations: 30 days in operational logs, then anonymised.
- Analytics data: 13 months maximum.
4. Data processors
We work with providers that comply with the GDPR and that host data in the EU or under the European Commission's standard contractual clauses:
- Vercel Inc. — website hosting and analytics (EU servers by default).
- Google LLC — engine for the Urbi chatbot (Gemini API via Google AI Studio). It does not use your messages to train models when accessed via the paid API.
- Resend Inc. — transactional email delivery (form notifications).
- Calendly LLC and/or Google LLC — meeting scheduling.
5. Your rights
You can exercise at any time your rights of access, rectification, erasure, objection, restriction, portability and withdrawal of consent by writing to info@urboros.com with the subject «GDPR». If you are not satisfied, you can file a complaint with the Spanish Data Protection Agency (aepd.es).
6. Automated decisions
The Urbi chatbot classifies whether a conversation is a «hot lead» using an automated model. That classification only serves to decide whether a member of the team writes to you sooner. It produces no legal or contractual effects on you, and you can always request human intervention by replying «I want to talk to a person».
7. Changes to this policy
If there are material changes we will give notice on the home page at least 15 days before they take effect.
This text is our best informational effort. It does not replace legal advice. If you are going to integrate Urboros as a data processor in your own company, we will sign the corresponding agreement (DPA) at no cost.