Privacy policy
Updated 25 October 2026. This explains data processing at CAP Consultor, a free personal initiative with no incorporated company.
Privacy contact
The person running the project manages enquiries. Contact contact@capconsultor.eu or +34 669 802 256 about your personal data.
Contact form
We collect your name and email and optionally your business name and message to answer your enquiry. Processing relies on consent (GDPR Article 6(1)(a)), which you can withdraw by email. We record the consent date and policy version. We do not send advertising or sell your data.
AI assistant
The optional chat is enabled through preferences. Your messages and session history are sent to OpenAI to generate answers. CAP does not save new conversations or automatically extract contacts. The visible history disappears on reload or when the assistant is disabled. Do not share sensitive data, passwords or confidential information. Answers may be wrong and do not replace professional advice.
Technical data and security
Vercel and infrastructure providers receive technical data such as IP addresses and connection logs. To prevent abuse, temporary counters use HMAC-derived identifiers rather than storing IP addresses in the counters. They expire within 24 hours. This relies on our legitimate interest in protecting the service (GDPR Article 6(1)(f)).
Providers and international transfers
Providers include Vercel (hosting), Supabase (contact database in Ireland), the email provider used to handle enquiries and OpenAI when you use the chat. Contact notifications may use Resend depending on email configuration. Some providers may process data outside the EEA; processing is not guaranteed to remain entirely in the EU. Applicable GDPR safeguards, including adequacy decisions or standard contractual clauses, must apply as appropriate.
Retention
Enquiries are retained while being handled, for up to 24 months after the last contact, unless legal obligations or claims require longer retention. Historical records remain subject to your rights and you may request deletion. OpenAI and infrastructure providers also apply their own technical retention periods under their data-processing terms.
Your rights
Email contact@capconsultor.eu to request access, correction, deletion, restriction, objection or portability where applicable, or withdraw consent. Withdrawal does not affect earlier processing. We do not make decisions with legal effects solely through automated processing. You may complain to the Spanish Data Protection Agency (aepd.es).
Children and local storage
This website is intended for adults. Do not use the form or chat if you are under 14. The cookie policy explains local storage and how to change your choice.