Privacy policy and contact
Language note. This is a courtesy translation. Savia operates under Spanish law and the Spanish version of this policy is the legally binding one. If the two texts differ, the Spanish text prevails.
Controller: Robert Nicuta, with a professional address for notifications at Carrer de Jaume I, 31, 07860 Sant Francesc de Formentera, Illes Balears (Spain). You can write to me at contacto@robertnicuta.com about anything to do with this site or your data.
What data this site collects
Very little, and deliberately so. Browsing the site requires giving me no data at all: I use no first-party or third-party cookies, and no analytics or advertising tools. The typefaces are served from this same domain, so your visit generates no requests to Google Fonts or any other tracking service. The only form on the site is the knowledge loss calculator, and it collects data only if you decide to request your report.
Hosting is provided by Vercel which, like any hosting provider, generates technical server logs (IP address, date and page requested) needed to serve the site and protect it from abuse. Those logs are processed by Vercel under its own privacy policy and I do not use them to identify you.
If you calculate your invisible tax
The calculator runs entirely in your browser: you can answer the test and see the calculation without giving me any data. Only when you request the report and tick the consent box is the form data sent.
- What is sent: name, email, company, number of employees and role, along with your answers to the test and the figures you entered for the calculation (key people, estimated costs, hours and waiting times).
- What for: to email you the report you asked for and, if your result fits what I do, to write to you offering the clarity session. No transfer to third parties, and no advertising for anyone else.
- And if you also tick the second box: I store your details in a contact list to let you know when the Savia app is available and to share product news. It is optional and does not gate the report: if you don't tick it, you get your report all the same and you join no list. Each of those emails carries an unsubscribe link, and you can also unsubscribe by writing to me.
- Legal basis: your consent. These are two separate consents, one for the report and one for the news, and you can withdraw either at any time without that affecting anything already sent.
- Who receives it: the form is processed on Vercel (hosting and execution of the function that generates the email) and delivery is carried out by Resend, the transactional email provider, which processes delivery on infrastructure located in the European Union (Ireland) and has a data processing agreement in place. Both are US companies acting as processors, with the international transfer mechanisms provided for in Chapter V of the GDPR.
- How long it is kept: if you only request the report, the data travels in the email I receive and stays in my inbox; I delete it when the conversation ends without follow-up and, at most, one year after your last contact. If you ticked the second box, it also remains in the Resend contact list until you unsubscribe or ask me to delete it.
If you email me
If you contact me at contacto@robertnicuta.com, I will use your address and the content of your message solely to reply to you and follow up on the conversation. I do not pass that data to third parties and I do not use it to send you communications you have not asked for.
Your rights (GDPR)
Data processing on this site complies with the General Data Protection Regulation (GDPR). You can exercise your rights of access, rectification, erasure, objection and restriction at any time by writing to the contact email. If you believe I have not handled a request properly, you can complain to the Spanish Data Protection Agency (AEPD).
Savia, the product
If your company uses the Savia application, data processing has two clearly separated parts:
- Account data. Name, email, company, account activity and billing details of the people who use Savia. Savia processes this as controller, in order to provide the service, handle billing and communicate with you; the basis is performance of the contract and it is kept for as long as the account exists. Payments are processed by Stripe; Savia does not store card numbers.
- Your company's content. The documents, conversations, records and knowledge your company uploads to or generates in Savia. There your company is the controller and Savia acts as processor: we process it only to provide the service, under the data processing agreement (DPA). We do not use that content to train AI models.
Security, in short: each company is isolated across two independent layers verified by automated tests; within the company, each department has its own space; employees' sensitive data does not pass through the semantic search (every access checks the exact permission on the server); relevant activity is audited, including our own support; and when the contract ends we delete everything completely and verifiably. The providers involved and the international transfers are detailed in the DPA; the service conditions, in the Terms.
Contact
Email: contacto@robertnicuta.com
LinkedIn: Robert Nicuta