Legal
Privacy notice
This notice explains how Sicreto Labs LLC handles personal data of visitors to sicreto.ai and people who contact us. It is written for visitors in the European Economic Area and the UK, under the GDPR.
1. Who we are
The controller is Sicreto Labs LLC, a company organised in the United States, with its team in Andalucía, Spain. Contact: hello@sicreto.ai. We have not appointed a data protection officer.
2. What we collect
- When you email us or message us on LinkedIn: your name, email address, organisation, and whatever you choose to tell us.
- When you visit this website: our hosting provider, Vercel Inc., processes technical data such as your IP address, browser type, requested page and time, in server logs needed to deliver and secure the site.
This site has no forms, no accounts, no advertising and no analytics. We do not set cookies and we do not load third-party fonts or scripts, so no cookie banner is shown.
3. Why we use it, and on what basis
- To reply to your enquiry and discuss a possible pilot: steps at your request before entering a contract, and our legitimate interest in running our business (Article 6(1)(b) and (f) GDPR).
- To keep the website secure and working: legitimate interest (Article 6(1)(f)).
- To meet legal, tax and accounting duties if we later do business: legal obligation (Article 6(1)(c)).
We do not sell personal data and we do not use it for automated decision-making.
4. Who receives it
Our email provider and hosting provider (Vercel Inc.) act as our processors. If you contact us through LinkedIn, LinkedIn handles that message under its own privacy policy. We share data with professional advisers where needed.
5. Transfers outside the EEA
Our company and some providers are based in the United States. Where personal data is transferred outside the EEA or the UK, we rely on the EU-US Data Privacy Framework where the recipient is certified, or on Standard Contractual Clauses.
6. How long we keep it
Enquiry correspondence is kept while we are in contact and for up to 24 months after the last exchange, unless a contract follows, in which case we keep it for the period the law requires. Server logs are kept by our hosting provider for a short period under its own settings.
7. Your rights
You can ask us for access to, correction or deletion of your personal data, restriction or objection to its use, and a copy in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to hello@sicreto.ai. You can also complain to a supervisory authority, for example the Agencia Española de Protección de Datos (aepd.es) or the authority where you live.
8. Data in our products
Personal data in our consented-video work is handled under separate consent notices and data processing agreements, described on our Trust page. It is not collected through this website.
9. Changes
We will update this notice and its date when our practices change.