Privacy Policy
Last updated: October 2026
1. Data Controller
The controller of the personal data collected through this website and JaegerFlow services is:
- Owner
- Steven Morantes
- Tax ID (NIF)
- PENDIENTE
- [email protected]
2. Data We Collect
We collect the following types of personal data:
- Full name, email address, and phone number — when you complete a contact, diagnosis, or proposal request form
- Company name and industry — to personalize our commercial proposal
- Browsing data — pages visited, time on page, device and browser, via analytics cookies
- Conversation history — when you interact with our AI agents or human team via WhatsApp, chat web, or email
- Billing data — name, address, and payment method when you hire a service
- Platform access credentials — only when the project requires integration with your systems (WhatsApp Business API, Meta, Google, etc.)
We do not collect sensitive data such as health information, ethnic origin, religious beliefs, or biometric data.
3. Purpose of Processing
We use your data exclusively to:
- Respond to your inquiries and prepare personalized proposals
- Execute contracted services and manage the project
- Improve website performance and user experience
- Send project-related communications — never unsolicited advertising without your prior consent
4. Tools and Sub-Processors
To deliver our services we use the following tools that may process your data as sub-processors under confidentiality agreements:
- Server hosting (European Union) — private server hosting our systems and data
- Website deployment and hosting
- Security, content delivery network and DDoS protection
- Artificial intelligence model providers — natural language processing in AI agents
- Meta (WhatsApp) — client and lead communication
- Automation and customer-support platforms — conversation and workflow management
7. Your Rights
Under applicable law, you have the following rights over your personal data:
- Access — request a copy of the data we hold about you
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — limit processing while a dispute is resolved
- Portability — receive your data in a structured, machine-readable format
To exercise any of these rights, write to [email protected]. We will respond within a maximum of 30 days.
6. International Transfers
Some of our sub-processors (including Meta and artificial intelligence providers) process data outside the European Economic Area. In these cases we apply appropriate safeguards under GDPR, including standard contractual clauses approved by the European Commission.
8. Data Retention
We retain your data for as long as necessary to provide the service and comply with legal obligations. Inactive client data is deleted after 2 years of inactivity, unless legally required to be retained.
| Tipo de dato | Período de retención |
|---|---|
| Datos de contacto | 2 años desde última interacción |
| Datos de proyecto | 5 años desde finalización del proyecto |
| Datos de facturación | 7 años por obligaciones fiscales |
Infrastructure and Data Hosting
Data managed through our services is hosted on a virtual private server (VPS) located within the European Union. Processing is carried out in accordance with the General Data Protection Regulation (GDPR).
- VPS hosted in the European Union.
- Data processing in accordance with the GDPR.
- Third-party providers integrated by the client (e.g. Meta or AI models) process data under their own policies.
For legal enquiries about data processing, write to [email protected]