Privacy policy
This policy explains how ADAO Development S.L., trading as ADAO Tech (“ADAO Tech”, “we”, “us”), handles personal data when you visit adaotech.ai or contact us about our services. We collect as little as we can, we don’t sell data, and we don’t use advertising trackers.
1. Who is responsible for your data
The data controller is:
- ADAO Development S.L., trading as ADAO Tech
- Email: legal@adaotech.ai
2. What we collect
When you send us a brief through the contact form: your name, work email, company (optional), the type of project you select, and the text of your brief.
When you email us directly: your email address and whatever you choose to include in the message.
When you browse the site: our hosting and security provider processes technical data that every web request carries, such as your IP address, browser and device type, and the pages requested. We use it to deliver the site and protect it from abuse.
Website analytics (only as described in section 7): if you accept analytics cookies, we use PostHog to understand how the site is used: pages viewed, clicks on links and buttons, approximate country, device and browser type, page speed, and technical errors. If you reject them, we only count visits anonymously, without cookies and without identifying you. We don’t record your screen or what you type into forms, and we never send form contents to analytics.
We don’t ask for special categories of data (such as health or political opinions). Please don’t include them in a brief.
3. Why we use it, and on what legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Reply to your enquiry and discuss a possible project | Contact form and email data | Steps taken at your request before entering into a contract (Art. 6(1)(b)) |
| Keep the site and the form secure and free of spam | Technical data, anti-spam check | Our legitimate interest in protecting our services (Art. 6(1)(f)) |
| Understand how the site is used and improve it, with analytics cookies | Analytics data (section 7) | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Count visits anonymously if you reject cookies | Aggregate, cookieless analytics | Our legitimate interest in running a usable website (Art. 6(1)(f)) |
| Comply with legal obligations, such as tax or accounting rules, if you become a client | Contract and billing data | Legal obligation (Art. 6(1)(c)) |
We don’t send marketing emails. If that ever changes, we’ll only do it with your explicit consent.
4. Who we share it with
We use a small number of service providers (processors) who handle data only on our instructions and under data processing agreements:
- Cloudflare, Inc.: website hosting and delivery, security, spam protection for the contact form (Turnstile), storage of form submissions, and delivery of form notifications to our inbox.
- PostHog Inc.: website analytics and error reports, hosted in the European Union. Data reaches PostHog through our own domain.
We may also disclose data to public authorities when the law requires it, or to professional advisers (such as lawyers or accountants) who are bound by confidentiality. We never sell personal data.
5. International transfers
We prefer EU-based processing. Where a provider processes data outside the European Economic Area, the transfer is protected by an adequacy decision (such as the EU–US Data Privacy Framework) or by the European Commission’s Standard Contractual Clauses.
6. How long we keep it
- Contact form submissions: deleted from our form database after 90 days. If the conversation continues by email, the messages are kept for as long as needed to manage the relationship.
- If you become a client: contract and billing records are kept for the periods required by Spanish tax and commercial law (generally six years).
- Analytics: kept in PostHog only as long as needed to analyse how the site is used. Data from visitors who rejected cookies identifies no one.
- Technical and security logs: kept for short periods by our hosting provider, then deleted.
7. Cookies and local storage
When you first visit, we ask whether you accept analytics cookies. Accepting and rejecting are equally easy, and you can change your choice at any time with Cookie settings at the bottom of every page.
If you accept: PostHog sets a first-party cookie and a matching browser storage entry (named ph_…_posthog) to recognise your visits over time. They last up to 12 months unless you delete them or withdraw consent.
If you reject (or haven’t chosen yet): no analytics cookies are set. After a rejection, PostHog only counts visits anonymously, using a short-lived identifier calculated on its servers that doesn’t identify you.
The site also stores a few small preferences in your browser that are never sent to us: your cookie choice, whether you’ve paused the site’s animations, and whether you’ve already seen the intro animation in this browser session.
The anti-spam check on the contact form may set a strictly necessary cookie to tell people from bots.
8. Your rights
You can ask us at any time to:
- access the personal data we hold about you;
- correct it if it’s inaccurate;
- delete it;
- restrict or object to how we process it;
- receive it in a portable format.
Write to legal@adaotech.ai. We’ll reply within one month. If you believe we haven’t handled your data properly, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (www.aepd.es).
9. Security
We protect data with encryption in transit (HTTPS), access controls, and providers that meet recognised security standards. No method of transmission or storage is completely secure, but we work to keep risks low and to act quickly if something goes wrong.
10. Changes to this policy
We may update this policy when our services or the law change. The date at the top shows the latest version. If a change is significant, we’ll make it clear on the site.
11. Contact
Questions about this policy or your data: legal@adaotech.ai.