Privacy policy and contact

Language note. This is a courtesy translation. Savia IA operates under Spanish law and the Spanish version of this policy is the legally binding one. If the two texts differ, the Spanish text prevails.

Controller: Robert Nicuta («Savia IA», «we»), with a professional address for notifications at Carrer de Jaume I, 31, 07860 Sant Francesc de Formentera, Illes Balears (Spain). You can write to us at hola@saviaia.es about anything to do with this site or your data.

What data this site collects

Very little, and deliberately so. Browsing the site requires giving us no data at all: we use no first-party or third-party cookies, and no analytics or advertising tools. The typefaces are served from this same domain, so your visit generates no requests to Google Fonts or any other tracking service. There are three forms, and none of them collects anything until you decide to send it: the knowledge loss calculator, the demo and clarity session booking forms, and the extended script on the blog. The details of each are below.

Hosting is provided by Vercel which, like any hosting provider, generates technical server logs (IP address, date and page requested) needed to serve the site and protect it from abuse. Those logs are processed by Vercel under its own privacy policy and we do not use them to identify you.

If you calculate your invisible tax

The calculator runs entirely in your browser: you can answer the test and see the calculation without giving us any data. Only when you request the report and tick the consent box is the form data sent.

What is sent: name, email, company, number of employees and role, along with your answers to the test and the figures you entered for the calculation (key people, estimated costs, hours and waiting times).
What for: to email you the report you asked for and, if your result fits what we do, to write to you offering the clarity session. No transfer to third parties, and no advertising for anyone else.
And if you also tick the second box: we store your details in a contact list to send you Savia IA news: features and guides. It is optional and does not gate the report: if you don't tick it, you get your report all the same and you join no list. Each of those emails carries an unsubscribe link, and you can also unsubscribe by writing to us.
Legal basis: your consent. These are two separate consents, one for the report and one for the news, and you can withdraw either at any time without that affecting anything already sent.
Who receives it: the form is processed on Vercel (hosting and execution of the function that generates the email) and delivery is carried out by Resend, the transactional email provider, which processes delivery on infrastructure located in the European Union (Ireland) and has a data processing agreement in place. Both are US companies acting as processors, with the international transfer mechanisms provided for in Chapter V of the GDPR.
How long it is kept: if you only request the report, the data travels in the email we receive and stays in our inbox; we delete it when the conversation ends without follow-up and, at most, one year after your last contact. If you ticked the second box, it also remains in the Resend contact list until you unsubscribe or ask us to delete it.

If you book a demo or a clarity session

What is sent: name, email, company, company size and, if you write it, what you would like to solve or ask. For the demo, and for the session if you give it, also your company's website.
What for: to prepare the call and, if you don't end up booking, to write to you once to offer another slot. You join no list.
The demo: to prepare it we only use information your company already publishes on its website. We neither ask for nor use internal documents.
The calendar: after the form, the Cal.com calendar opens with your name, email and company already filled in. What you book there is handled by Cal.com under its own privacy policy.
Legal basis, who receives it and how long it is kept: the same as for the calculator. The basis is your consent, Vercel and Resend process it as processors, and it stays in our inbox until the conversation ends without follow-up, at most one year after your last contact.

If you request the extended script from the blog

Only your email is sent, and only to send you the script you asked for. You join no list. The legal basis, who receives it and how long it is kept are the same as for the calculator.

If you email us

If you contact us at hola@saviaia.es, we will use your address and the content of your message solely to reply to you and follow up on the conversation. We do not pass that data to third parties and we do not use it to send you communications you have not asked for. The inbox is hosted by Zoho Mail in its European Union data centres, and the notifications from the three forms arrive there too.

Your rights (GDPR)

Data processing on this site complies with the General Data Protection Regulation (GDPR). You can exercise your rights of access, rectification, erasure, objection and restriction at any time by writing to the contact email. If you believe we have not handled a request properly, you can complain to the Spanish Data Protection Agency (AEPD).

Savia IA, the product

If your company uses the Savia IA application, data processing has two clearly separated parts:

Account data. Name, email, company, account activity and billing details of the people who use Savia IA. Savia IA processes this as controller, in order to provide the service, handle billing and communicate with you; the basis is performance of the contract and it is kept for as long as the account exists. Payments are processed by Stripe; Savia IA does not store card numbers.
Your company's content. The documents, conversations, records and knowledge your company uploads to or generates in Savia IA. There your company is the controller and Savia IA acts as processor: we process it only to provide the service, under the data processing agreement (DPA). We do not use that content to train AI models.

Security, in short: each company is isolated across two independent layers verified by automated tests; within the company, each department has its own space; employee and client records do not pass through the semantic search (every access, including from the chat, checks the exact permission on the server); relevant activity is audited, including our own support; and when the contract ends we delete everything completely and verifiably. The providers involved and the international transfers are detailed in the DPA; the service conditions, in the Terms.

Contact

Email: hola@saviaia.es
LinkedIn: Savia IA and Robert Nicuta