Privacy Policy

1. Data Controller

2. Personal Data Processed

Repplia may process the following categories of personal data:

• Identification data: first name and last name.
• Contact data: email address.
• Professional data: company or business.
• Metadata and technical data: date and time of request, technical session identifiers, IP address, browser/device and minimum security logs.
• Data derived from using the demonstration service. Recordings and/or transcriptions of interactions. They are automatically deleted within a maximum of 7 days and are subject to PII suppression/anonymization techniques where possible.

3. Purposes of Processing

The purposes are:

• Managing information and contact requests.
• Responding to and managing communications received.
• Providing access to and use of the AI assistant demo.
• Improving the quality and technical performance of the assistant and website (including debugging).
• Ensuring security, preventing misuse and detecting technical incidents.
• Website usage measurement and analytics (analytical cookies), only if accepted by the user.
• Complying with applicable legal obligations.

Data will not be used for unsolicited mass advertising communications. If recurring commercial communications are implemented in the future, corresponding consent will be requested or opt-out mechanisms will be provided in accordance with applicable regulations.

4. Legal Basis

The legal bases that legitimize the processing are:

• User consent: When voluntarily providing their email or interacting with the demo.
• Pre-contractual measures: When requesting information for potential engagement.
• Legitimate interest: To ensure website security, prevent fraud/abuse and make technical improvements.
• Compliance with legal obligations.

5. Demo Recordings and Transcriptions

During the use of the demonstration:

• Voice interactions may be recorded.
• Automatic transcriptions are generated using natural language processing and artificial intelligence systems.

To minimize risks, suppression and exclusion techniques for personally identifiable data are applied where possible, reducing information directly linked to the user.

Recordings and transcriptions are retained for a maximum period of 30 days, for the following purposes:

• Technical evaluation and service improvement.
• Quality control.
• Aggregated statistical analysis.
• Error and incident detection.

No automated decisions with legal effects on the user or profiling with significant impact are carried out.

6. Retention Periods

After these periods, data will be securely deleted or anonymized.

7. Recipients and Service Providers (Processors)

Repplia may rely on technology providers specialized in:

• Web infrastructure and hosting.
• Natural language processing and artificial intelligence.
• Process automation and technical management.
• Technology support services.

These providers act as data processors in accordance with Article 28 of the GDPR and only process data following Repplia's instructions and under appropriate contractual guarantees.

Personal data is not shared with third parties for commercial purposes.

8. User Rights

You may exercise the rights of access, rectification, erasure, objection, restriction of processing and portability, as well as withdraw your consent at any time.

• To exercise them: Write to: info@repplia.com (the same email defined in Section 1).
• Verification: In case of reasonable doubt about your identity, we may request minimal and proportional additional information to verify it.

10. Security Measures

We apply appropriate technical and organizational measures to protect personal data. These measures include, but are not limited to: access control, communication encryption (TLS), principle of least privilege and scheduled deletion.

11. Use of Cookies

The website uses necessary technical cookies and, if accepted by the user, analytical cookies for measurement. Users can consult detailed information and manage their consent in the Cookie Policy available on the site.

12. Modifications

We may update this Privacy Policy to adapt it to regulatory changes or functional changes to the service. The current version will be published on this page.