Privacy · Commercial requests to Sofia
Controller: Cristina Sofia Boboc, self-employed individual (autónoma), NIE Y2602843Q, trading as BOB-AI. Professional address: Calle Segunda Transversal Galván 3, 38550 Arafo, Santa Cruz de Tenerife, Canary Islands, Spain. Contact: bob.ai.agency@gmail.com.
Purpose and legal basis
With your consent (GDPR Article 6.1.a), we record your name, company, contact details, needs, software and requested service, together with your statements in the conversation, to respond to your request for a proposal, technical check or demo. No marketing use. Providing these details is optional; without them we cannot contact you, but you may continue the conversation.
Recipients and protection
Only authorised BOB-AI administrators can access the CRM. A notification containing request details is sent to management. Lovable Cloud and email services provide storage and sending; the AI service processes chat messages to generate responses. We do not share your data with other visitors or client companies. No decisions with legal effects based solely on automated processing are envisaged. If you use voice dictation, the conversion to text is performed by your own browser's recognition service; BOB-AI does not record or store audio files.
Retention
New requests are initially retained for 90 days from registration, with periodic review and deletion on expiry. The controller may change retention for new requests according to purpose and applicable obligations: the effective period is shown before submission. A subsequent contractual relationship requires a separate assessment of data and retention obligations. Chat not linked to a request remains in the device browser for 30 days. For visitors without accounts, an essential cookie identifies the session for 30 days; pseudonymous technical identifiers protect access without creating an account. Management must handle mailbox notification copies and backups consistently.
Your rights
You may request access, rectification, deletion, restriction and portability where applicable, and withdraw consent at any time by writing to the contact above. Withdrawal does not affect the lawfulness of earlier processing. You may complain to the competent supervisory authority, the AEPD in Spain.
Version: sofia-leads-2026-10-25. For transfers outside the EEA, the controller must verify applicable safeguards, provider agreements and GDPR contractual clauses before opening the service to the public.