Privacy Policy

Last updated: October 2026

01

1. Data Controller

The controller of the personal data collected through this website and JaegerFlow services is:

Owner
Steven Morantes
Tax ID (NIF)
PENDIENTE
02

2. Data We Collect

We collect the following types of personal data:

  • Full name, email address, and phone number — when you complete a contact, diagnosis, or proposal request form
  • Company name and industry — to personalize our commercial proposal
  • Browsing data — pages visited, time on page, device and browser, via analytics cookies
  • Conversation history — when you interact with our AI agents or human team via WhatsApp, chat web, or email
  • Billing data — name, address, and payment method when you hire a service
  • Platform access credentials — only when the project requires integration with your systems (WhatsApp Business API, Meta, Google, etc.)

We do not collect sensitive data such as health information, ethnic origin, religious beliefs, or biometric data.

03

3. Purpose of Processing

We use your data exclusively to:

  • Respond to your inquiries and prepare personalized proposals
  • Execute contracted services and manage the project
  • Improve website performance and user experience
  • Send project-related communications — never unsolicited advertising without your prior consent
04

4. Tools and Sub-Processors

To deliver our services we use the following tools that may process your data as sub-processors under confidentiality agreements:

  • Server hosting (European Union) — private server hosting our systems and data
  • Website deployment and hosting
  • Security, content delivery network and DDoS protection
  • Artificial intelligence model providers — natural language processing in AI agents
  • Meta (WhatsApp) — client and lead communication
  • Automation and customer-support platforms — conversation and workflow management
05

7. Your Rights

Under applicable law, you have the following rights over your personal data:

  • Access — request a copy of the data we hold about you
  • Rectification — correct inaccurate or incomplete data
  • Erasure — request deletion of your data ("right to be forgotten")
  • Restriction — limit processing while a dispute is resolved
  • Portability — receive your data in a structured, machine-readable format

To exercise any of these rights, write to [email protected]. We will respond within a maximum of 30 days.

06

6. International Transfers

Some of our sub-processors (including Meta and artificial intelligence providers) process data outside the European Economic Area. In these cases we apply appropriate safeguards under GDPR, including standard contractual clauses approved by the European Commission.

07

8. Data Retention

We retain your data for as long as necessary to provide the service and comply with legal obligations. Inactive client data is deleted after 2 years of inactivity, unless legally required to be retained.

Tipo de datoPeríodo de retención
Datos de contacto2 años desde última interacción
Datos de proyecto5 años desde finalización del proyecto
Datos de facturación7 años por obligaciones fiscales
08

Infrastructure and Data Hosting

Data managed through our services is hosted on a virtual private server (VPS) located within the European Union. Processing is carried out in accordance with the General Data Protection Regulation (GDPR).

  • VPS hosted in the European Union.
  • Data processing in accordance with the GDPR.
  • Third-party providers integrated by the client (e.g. Meta or AI models) process data under their own policies.

For legal enquiries about data processing, write to [email protected]