Privacy policy

Data controller

Rubén Jarne Cabañero, self-employed, trading as T800 Labs. His tax ID and address are in the legal notice. For anything about your data: hola@t800labs.com.

If you write through the form

What data

Your name, your email and your message, plus the page and network you are writing from. I don't store your IP.

What for

To reply and prepare the assessment or quote you ask for.

Legal basis

Pre-contractual steps at your request (art. 6.1.b GDPR).

How long

12 months in the database, where it is deleted automatically. The notification sent to my email stays there until I delete it; if you ask me to, I will. If we end up working together, whatever belongs to the job is kept as long as tax and commercial law require (art. 6.1.c).

Who is involved

Google: Cloud SQL in the europe-west1 region (Belgium) to store it, and Gmail, from Google Workspace, to notify me.

To stop abuse, the form counts the day's submissions using a fingerprint of the IP that changes every day and can't be reversed. It is deleted daily (legitimate interest in security, art. 6.1.f).

If you write on WhatsApp or by email

What data

Your number or email, your profile name and whatever you tell me, voice notes included.

What for

To reply and prepare the assessment or quote you ask for.

Legal basis

Pre-contractual steps at your request (art. 6.1.b GDPR).

How long

There is no automatic deletion: they stay in the conversation until I delete them. If you ask me to, I will.

Who is involved

Meta (WhatsApp), under its policy, and Google (Gmail). To prepare the assessment reply I use an AI assistant, Claude, from Anthropic (USA), and I check it before sending.

That's why I ask you to hide your clients' personal data if you send me a real example.

If you use the voice-note quote demo

What data

The voice note or text you send. It is a demo with access by code and a fictitious price list: don't include real people's data.

What for

To prepare a sample draft as a PDF and return it to you.

Legal basis

Pre-contractual steps at your request (art. 6.1.b GDPR).

How long

T800 Labs doesn't store the voice note, the transcript or the PDF. It does keep a technical record of each draft, with no content: timings, cost, model and number of lines. According to Google, it doesn't train on this data without permission and may keep it briefly for caching and to detect abuse.

Who is involved

The AI is Gemini on Google Vertex AI, in the EU multi-region. If you use the demo through Telegram, your messages also go through Telegram, and I keep your chat identifier so it stays signed up.

When you visit the website

My own measurement

I count visits and clicks with daily counters: which event, which page, which network and campaign the link comes from and which button. I don't store your IP, an identifier or anything that could tell you apart. This isn't personal data. It is kept for 25 months. The IP is used briefly, in memory, to stop anyone firing events non-stop.

Server logs

The website runs on Google Cloud Run, in the europe-west1 region (Belgium). Google Cloud logs each request (IP, browser, page and time) so the service works and stays secure. By default they are deleted after 30 days. Legal basis: legitimate interest in security (art. 6.1.f GDPR).

No third-party analytics

No Google Analytics, no social media pixels and no cookies. I explain this in the cookie policy.

Transfers outside the European Economic Area

The website's database and server are in the EU, and the demo's AI runs in the EU. But some providers process or may process data outside it:

• Meta (WhatsApp): contracted with its Irish entity, with transfers to the USA under standard contractual clauses, according to its policy. Not writing on WhatsApp avoids this transfer: you have the form and email.
• Google (Workspace and Google Cloud): Google LLC may access data from the USA. It takes part in the EU-US Data Privacy Framework (Implementing Decision (EU) 2023/1795) and applies standard contractual clauses (Implementing Decision (EU) 2021/914).
• Anthropic (USA): what you tell me for the assessment, when I use its assistant.
• Telegram: only if you use the demo through Telegram. Its messages go through infrastructure outside the EEA. It is optional: not using it avoids this transfer.

What I don't do

I don't sell your data or share it for commercial purposes. I only share it with the providers above and with the authorities if the law requires it. I don't take automated decisions that affect you: I check the replies myself.

Your rights

You can access your data, rectify or erase it, restrict or object to its processing and ask for portability. Write to hola@t800labs.com saying which right you want to exercise; I reply within one month (art. 12.3 GDPR). If you think I haven't respected them, you can complain to the Spanish Data Protection Agency.