Privacy Policy
Last updated: March 2026
1. Data controller
- Name: Pedro Aldea Mas (trading as "Zero Ops")
- Tax ID (NIF): 51134547G
- Address: Calle Samaria 10, 1.º Izq., Madrid, Spain
- Email: hola@zeroops.es
2. Data we collect and purposes
| Data | Purpose |
|---|---|
| Chat messages | Provide AI-assisted consultation |
| Name, company, email | Contact you about your inquiry |
| Preferred meeting slot | Schedule a consultation call |
| Conversation transcript | Analyze your operational challenge and email a summary to our team |
| IP address, user-agent | Server security and abuse prevention |
3. AI processing disclosure
Your chat messages are processed by Google Gemini (Google LLC, USA) to generate real-time responses. Additionally, after several chat exchanges, the conversation is automatically analyzed by Google Gemini to extract contact information (name, company, email) and understand your operational challenge (industry, urgency, metrics). This processing is necessary for the chat service to function and to prepare our consultation.
4. Subprocessors
| Subprocessor | Purpose | Location |
|---|---|---|
| Google LLC (Gemini API) | AI chat and lead extraction | USA |
| Supabase Inc. | Lead data storage | USA (AWS) |
| Resend Inc. | Email notifications | USA |
| Vercel Inc. | Hosting, serverless functions, web analytics | USA (edge) |
5. Legal basis
- Consent (Art. 6(1)(a) GDPR): For submitting contact details and AI processing when using the chat.
- Legitimate interest (Art. 6(1)(f) GDPR): For basic chat interaction and service improvement.
6. International data transfers
Your data may be transferred to the USA through the subprocessors listed above. These transfers are covered by the EU-US Data Privacy Framework and the European Commission's Standard Contractual Clauses.
7. Data retention
- Lead data in Supabase: 24 months, after which it is deleted.
- Vercel logs: Vercel retains server logs for up to 30 days.
8. Your rights
You may exercise the following rights by writing to hola@zeroops.es:
- Access to your personal data
- Rectification of inaccurate data
- Erasure ("right to be forgotten")
- Restriction of processing
- Data portability
- Objection to processing
- Withdrawal of consent at any time
We will respond to your request within 30 days.
9. Supervisory authority
If you believe your data is not being processed in compliance with applicable regulations, you may file a complaint with:
Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan 6, 28001 Madrid, Spain
www.aepd.es
10. Web analytics
We use Vercel Web Analytics, a privacy-friendly analytics service that does not use cookies, does not collect personal data, and is GDPR compliant without requiring consent.
11. Cookies and local storage
For more information, see our Cookie Policy.