Privacy policy

1. Data controller

• Controller: AHORRANEXUM TELECOM S.L. (Nertel)
• Tax ID (NIF): B22629083
• Address: Pasaje Flabiol, 12, 17257 Torroella de Montgrí (Girona), Spain
• Privacy contact: info@nertel.ai

2. What data we process

• Contact form: your name, your email address and the message you write.
• Conversation with Nertus, by voice or in writing: what you say or write and its transcript, and any details you choose to give us during the conversation, such as your name, phone number, company or industry. Voice conversations are recorded.
• Email verification to keep talking by voice: your email address.
• Voice usage limit: a random browser identifier, stored in a cookie, and an encrypted digest of your IP address that cannot be turned back into the address.
• Browsing: we measure use of the website in aggregate and without cookies. The visit identifier only lasts while the tab is open and does not include your name, email, phone number or company.

We do not ask for special categories of data. If you give us someone else’s details, you must have their permission.

3. Why we use it and on what legal basis

• Answering your enquiry and, if you ask, preparing a demonstration or a proposal: your consent and steps taken at your request before entering into a contract (Art. 6(1)(a) and 6(1)(b) GDPR).
• Showing you in the conversation with Nertus how an agent would work in your business: providing the service you request when you start the conversation (Art. 6(1)(b) GDPR).
• Notifying the sales team when you leave your details for us to contact you: your consent (Art. 6(1)(a) GDPR).
• Applying the voice usage limit and preventing abuse: our legitimate interest in protecting the service (Art. 6(1)(f) GDPR).
• Measuring use of the website in aggregate to improve it: our legitimate interest (Art. 6(1)(f) GDPR).
• Managing our relationship with clients: performance of the contract (Art. 6(1)(b) GDPR).

We do not make automated decisions that produce legal effects concerning you, nor do we build profiles. We do not send commercial communications without your consent.

4. How long we keep it

• Enquiries and contact details: for as long as needed to handle your request and, afterwards, restricted for the statutory periods during which liability may arise.
• Voice recordings of the conversation with Nertus: 90 days.
• Voice usage limit data: deleted automatically after one week; the browser cookie expires after 30 days.
• Clients: for the duration of the contractual relationship and, afterwards, for the applicable statutory periods.

5. Recipients

We do not sell your data. To provide the service, it is processed on our behalf by providers acting as data processors, under contract and bound by confidentiality:

• website hosting;
• database and lead management;
• speech recognition and synthesis;
• processing of written conversations;
• automation of notifications to the sales team, by email and messaging;
• email delivery;
• aggregate measurement of website use.

We will only disclose data to authorities, judges and courts where the law requires it.

6. International transfers

The website, the database and the automation are hosted in the European Union. Speech recognition and synthesis and the processing of written conversations are provided by suppliers that process data in the United States. These transfers rely on the safeguards provided for in the GDPR: the provider’s certification under the EU-US Data Privacy Framework or the standard contractual clauses approved by the European Commission.

7. Use of Google data

When a client company or a member of our team connects their Google account to our automation platform (see Google integrations), we process only this data:

• Gmail: the recipient, subject and content of the emails the automation sends on the user’s behalf. We do not read, sort or delete any email in the mailbox.
• Google Calendar: the events in the user’s calendars —title, date, time, attendees and description— to create, view and change appointments and reminders.

• Purpose: running the automations the user has set up, and nothing else.
• Retention: the data is used while each run lasts; the platform’s technical logs, which may hold a copy, are deleted automatically after 14 days.
• Who we share it with: no one. The platform runs on our own servers in the European Union, and we would only disclose the data to an authority if the law required it.
• Nertel’s role: for the data of a client company’s customers, Nertel acts as that company’s data processor.

We do not sell or transfer this data to third parties, we do not use it for advertising and we do not use it to train artificial intelligence models.

Nertel's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

The full policy is available at Google API Services User Data Policy.

8. Your rights

You may at any time and free of charge exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw any consent you have given, by writing to info@nertel.ai. If we need to confirm your identity, we will only ask for the information strictly necessary to do so.

If you believe we have not handled your request properly, you may lodge a complaint with the Spanish Data Protection Agency (AEPD).

9. Social media

Nertel has social media profiles. If you interact with them, we will process the data you post or send us only to reply to you and manage the community, on the basis of your consent. Each social network also processes your data under its own policy, for which Nertel is not responsible.

What you post on our profiles can be seen by other users. We may remove content that breaks the law or the platform’s rules.

10. Security

We apply technical and organisational measures appropriate to the risk to protect data, such as encrypting communications with the website (HTTPS), restricting access to systems and automatically deleting data that is no longer needed.

11. Changes to this policy

We may update this policy when our processing or the law changes. The date of the last update is shown at the top.