Privacy policy.

Coverso CC SL is a company registered in Catalonia, Spain, with CIF B19725985 and registered office at Carrer Sant Joan 3, Peralada, 17491, Girona, Spain (“Coverso”, “we”). We are the data controller for personal data processed through coverso.io and in our client engagements.

For anything in this policy, write to hola@coverso.io.

• ·Enquiry form: your name, email, company (optional) and message.
• ·Call booking: your name, email, the slot you pick, and an optional note.
• ·AI chat: the messages you type. If you ask us to pass your details to a human and say yes when asked, the contact details you provide.
• ·Technical: our hosting provider keeps short-lived server logs (IP address, user agent) for security and operations.

We set one functional cookie, to remember your language. No advertising cookies, no analytics cookies, no tracking pixels.

• ·Answering enquiries and booked calls: Art. 6(1)(b) GDPR (steps prior to a contract) and Art. 6(1)(f) (our legitimate interest in replying to people who write to us).
• ·Operating and securing the site: Art. 6(1)(f).
• ·Forwarding your details from the AI chat: Art. 6(1)(a), your consent, asked for explicitly in the conversation.
• ·Client engagements: Art. 6(1)(b), performance of the services agreement.

• ·Enquiries and call requests are stored in a managed Postgres database and delivered to us by email. We keep them for up to 24 months after our last contact with you, then delete them.
• ·AI chat messages are processed to generate a reply. We do not store chat transcripts in our database.
• ·If an enquiry becomes a client engagement, we keep the records the engagement produces for its duration plus the retention periods Spanish commercial and tax law requires.

We use a small number of providers to run this site and our services. Each receives only what its job needs:

• ·Vercel: hosting and serverless infrastructure.
• ·Managed Postgres (Vercel Postgres / Neon): storage for enquiries and call requests.
• ·Resend: transactional email delivery.
• ·Anthropic (with OpenAI as fallback): generating replies in the AI chat.
• ·Google: advertising platform services, used in client campaign management.

Some of the providers above process data in the United States. Where they do, transfers rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses. Data from EU visitors is hosted in the EU wherever the provider offers it.

In our client work we access data through third-party advertising platforms (for example the Google Ads API) under authorisation from the client whose account it is.

• ·That data is used solely to manage and report on the advertising of the account it came from.
• ·It is never combined with data from other advertisers or other accounts.
• ·It is never sold, rented or shared with third parties.
• ·It is never used to train models, ours or anyone else’s.
• ·Access ends when the client revokes it or the engagement ends.

Under the EU GDPR you can ask us for access to your data, its rectification or erasure, restriction of processing, portability, and you can object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time.

To exercise any of these, email hola@coverso.io. We respond within one month. You can also lodge a complaint with the Agencia Española de Protección de Datos (aepd.es) or your local supervisory authority.

When this policy changes, we update this page and the date at the top. The date is the record.