Privacy policy

Name or company name: [TODO].

Tax ID (NIF/CIF): [TODO].

Address: [TODO: full postal address], Vigo, Spain.

Email: hello@zeroone.es.

We are not required to appoint a Data Protection Officer. Any question about your data can be sent to the email above.

Project form: company, role, number of employees, estimated budget, timeline, project description, name, email and phone.

Form security check: when you send the form, Cloudflare Turnstile checks that a person is sending it and not an automated program. To do so it processes technical data from your browser and your IP address, only to detect bots; it does not read what you type. If the check fails, your request still reaches us, flagged for review. More in the Turnstile privacy addendum: https://www.cloudflare.com/turnstile-privacy-policy/

Emails and calls: the information you share with us, and the name, email and time you choose when booking a call through Cal.com.

AI assistant, only if you use it: the messages in the conversation, as explained below.

Clients: contact, billing and project data needed to deliver the work.

Browsing: technical data the hosting provider needs to serve and protect the site (IP address, browser, pages requested), and an aggregated count of visits that uses no cookies and does not identify you (Vercel Web Analytics).

We do not ask for special categories of data. Please don't include them in the form.

If the estimated budget is under €10,000, the form points you to Zero One Pymes, our service for smaller projects. We still keep your request so we can reply.

This has no legal effect on you and does not affect you significantly: a person on the team reads every request, and you can write to hello@zeroone.es if you think your project fits here.

If you use the AI assistant on the site, the messages you write and its replies are sent to Anthropic PBC, which provides the AI model (Claude), to generate each answer. We use them only to answer you and, if you ask for it, to prepare your brief.

We do not store the conversation. It stays in your browser for the rest of your visit (session storage) and is deleted when you close the tab or start a new chat. Anthropic processes it as our service provider under its commercial terms; its privacy policy explains how long it keeps API data. [TODO: confirm the data processing addendum with Anthropic.]

To prevent abuse we count the messages each visitor sends per day, using a one-way hash of the IP address that cannot be turned back into it. The count is deleted at the end of the day.

Legal basis: steps you ask for before a possible contract (art. 6.1.b GDPR) and our legitimate interest in keeping the service secure (art. 6.1.f GDPR).

Please don't share sensitive data in the chat. The assistant is an AI and can make mistakes: any quote, date or commitment is always confirmed by our team.

Requests that don't become a project: 12 months from our last contact.

Client data: for as long as the relationship lasts, then for the periods required by law (for example, six years for accounting records under article 30 of the Spanish Commercial Code).

Hosting logs: for the short period the provider needs for security.

Analytics: only aggregated data that does not identify you.

We use processors bound by data processing agreements: Vercel Inc. (hosting and visit analytics), Cal.com (call booking), Resend (emailing us each request), Cloudflare, Inc. (Turnstile, the form's anti-spam check), Anthropic PBC (the AI model behind the site assistant, only if you use it), [TODO: the tool receiving the lead webhook] and [TODO: email provider].

We never sell your data. We will share it with public authorities only when the law requires it.

Some providers are based in the United States. Transfers rely on the EU-US Data Privacy Framework adequacy decision of 10 July 2023 or, where it does not apply, on the European Commission's Standard Contractual Clauses.

You can access, rectify or erase your data, ask us to restrict or stop processing it, receive it in a portable format and withdraw any consent at any time, without affecting what was done before.

Write to hello@zeroone.es with "Data protection" in the subject. We may ask you to prove your identity. We reply within one month.

If you think we have not respected your rights, you can complain to the Spanish Data Protection Agency (AEPD), www.aepd.es.

We do not use cookies that need your consent. The cookie policy lists what the site stores in your browser and why.

This website is aimed at businesses. We do not knowingly collect data from people under 14.

We apply technical and organisational measures appropriate to the risk, including encrypted connections and access limited to the people who need it.

We do not take decisions based solely on automated processing, nor build profiles about you.

We may update this policy when the law or our services change. The date at the top always shows the latest version.