LEGLegal

Privacy Policy

Last updated: 8 May 2026

Automatia BCN (“we”, “us”) operates automatiabcn.com and the ABS self-hosted AI orchestrator. This policy describes what personal data we collect, why we collect it, and the rights you have over it. We are based in Barcelona, Spain, and process data in line with the EU GDPR.

1. Data we collect

Form submissions on /contact and /start (name, email, project description) — sent to us via Resend.

Stripe customer details when you purchase ABS, MCP Suite, or any other product (email, billing country, last-4 of card via Stripe — we never see full card numbers).

Server logs from Vercel and Cloudflare (IP address, user-agent, request path) retained for up to 30 days for abuse prevention.

License activation events from the ABS Cloudflare Worker (jti, customer email, activation timestamp) stored in Cloudflare Workers KV.

We do not run analytics that profile individuals. We do not sell or rent personal data.

2. How we use your data

To deliver the service you asked for (replying to a contact form, fulfilling a Stripe purchase, issuing or revoking a license).

To send transactional email (purchase confirmation, license delivery, refund notice).

To prevent fraud, abuse, and license sharing across pirated copies.

To comply with our legal obligations (tax records for purchases, anti-fraud reporting).

3. Third-party processors

We share the minimum data necessary with the following processors. All are GDPR-compliant under either EU adequacy decisions or Standard Contractual Clauses.

Stripe (Ireland) — payment processing, subscription billing, refunds.
Resend (USA, SCC) — transactional email delivery.
Cloudflare (USA, SCC) — license activation API and edge caching.
Vercel (USA, SCC) — site hosting and serverless functions.
Anthropic (USA, SCC) — AI inference, only when you message our /asistan or /builder chat assistants. Conversations are not used to train models.

4. Your rights

You have the right to access, rectify, delete, restrict, port, and object to processing of your personal data. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD, www.aepd.es). To exercise any of these rights, email founder@automatiabcn.com from the address associated with your data and we will reply within 30 days.

5. Cookies

We use only the cookies strictly required to operate the site (locale preference, cookie-consent acknowledgement, Stripe checkout session). No third-party advertising or cross-site tracking cookies are set. We do not run Google Analytics, Meta Pixel, or any similar profiling tag.

6. Retention

Form submissions: 24 months from last contact, then deleted.

Stripe records: 7 years (Spanish tax law requirement).

Server logs: up to 30 days.

License activation events: for the lifetime of the license, plus 12 months after revoke for audit.

7. Contact

Data Controller: Automatia BCN, Barcelona, Spain. Email: founder@automatiabcn.com.