Privacy Policy

1. Data controller

Claudia Dalmau, Tax ID 45541443V, with address in Barcelona (Spain) and contact at info@aibookingassistant.app, is the controller responsible for the processing of personal data collected through the aibookingassistant.app website and the AI Booking Assistant platform.

2. Purposes of processing

We process your personal data for the following purposes:

• Providing the booking management service you have contracted.
• Billing, collections and compliance with tax obligations.
• Operational communication (reminders, confirmations, incidents).
• Fraud prevention and protection of the community of professionals.
• Service improvement and aggregated statistical analysis.
• Sending commercial communications about the service itself (only if you have given express consent).

3. Data we process

We collect and process the following data:

• Identification: name, surname, email, phone.
• Tax data: tax ID, billing address.
• Banking: IBAN or card details (processed by the payment provider).
• Operational: booking history, ratings, messages with the bot.
• Technical: IP, device, browser, access logs.

4. Legal basis

• Performance of contract to provide you with the service (art. 6.1.b GDPR).
• Legal obligation for billing and accounting (art. 6.1.c GDPR).
• Legitimate interest for fraud prevention and security (art. 6.1.f GDPR).
• Consent for commercial communications and analytics cookies (art. 6.1.a GDPR).

5. Data retention

We keep your data for as long as the contractual relationship lasts. Once your account is cancelled, we keep the data blocked for the legally required period (up to 6 years for commercial documentation, according to the Spanish Commercial Code). Operational data is definitively deleted 30 days after cancellation.

6. Recipients and processors

Your data is only shared with processors strictly necessary to provide the service:

• Cloud infrastructure providers in the European Union.
• Payment processors authorized by European regulations.
• Messaging providers (WhatsApp Business API, Telegram Bot API).
• Aggregated and anonymized analytics tools.

We do not carry out international data transfers outside the European Economic Area unless with the appropriate safeguards provided for in the GDPR.

7. Your rights

You can exercise at any time your rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw the consent given, by sending an email to info@aibookingassistant.app with a copy of your ID document.

If you consider that the processing of your data does not comply with the regulations, you have the right to file a complaint with the Spanish Data Protection Agency (AEPD): www.aepd.es.

8. Security

We apply appropriate technical and organizational measures to guarantee data security, including TLS 1.3 encryption in transit, AES-256 encryption at rest, role-based access control, encrypted daily backups and periodic security audits.