Privacy Policy

1. Who we are

This website is operated by Ausavia, a one-person AI consultancy based in Catalunya, Spain. Ausavia is the data controller for information collected through ausavia.com.

Contact: hello@ausavia.com. We respond within 30 days.

2. What we collect and why

The whiteboard on the home page ("Tell us your case")
What you type there (your trade, what repeats, how often) is sent to Anthropic's Claude model, which only picks which of our services fits; the facts and prices you see come from our own list. We keep that text, the language and a scrambled code made from your IP address (a salted hash, not the address itself, used only to limit abuse) for 90 days. If you tap "I'm interested" and leave your email, we also keep your answers and your email to send you a proposal and reply, for 12 months, unless you become a client. Nothing is sent to you or anyone else automatically: a person reads every request first. Please do not type other people's personal data (your clients' names, phones). We also keep a short log of each turn on the whiteboard, to see what helps and to stop misuse: the date, the language, the kind of answer, what it cost us, whether you tapped "I'm interested" and a code made from that IP hash (not your IP). The log is kept 12 months. What you typed stays in it 90 days, or 12 months if you tap "I'm interested" and agree.

Analytics (consent required)
If you accept cookies, Google Analytics 4 collects anonymised usage data: pages visited, time on site, general location (country/city), device type and browser. GA4 does not store IP addresses. We never send Google what you type on the whiteboard, your name or your email. No personal identifiers collected. GA4 does not load if you decline.

Contact form and email enquiries
When you contact us via the site form or directly by email, we receive your email address and message content. We use this solely to respond to your enquiry. We do not add you to any mailing list without separate explicit consent.

Newsletter and course waitlist signups
If you sign up for updates or the course waitlist, we collect your email address. We use it to send the content you requested. You can unsubscribe at any time via the link in every email. We use a third-party email service to manage these lists (see section 5).

Server logs (necessary, no consent required)
Our hosting provider (Aruba.it, Italy) automatically logs IP addresses and request timestamps for security and stability. Retained for a maximum of 30 days.

3. Cookies

• Strictly necessary: ausavia_consent stores your cookie preference. No tracking. Expires after 6 months.
• Strictly necessary: av_v is a random security code set only when you use the whiteboard, so one visitor can't flood it. No tracking, not shared. Expires after 30 days.
• Analytics (consent required): Google Analytics sets _ga and _ga_* cookies only after you accept. They expire after 2 years.

4. Legal basis

• Whiteboard and proposals: Steps you ask for before a possible contract (Article 6(1)(b) GDPR); your email, with your consent (Article 6(1)(a) GDPR).
• Analytics: Consent (Article 6(1)(a) GDPR).
• Contact enquiries: Legitimate interests (Article 6(1)(f) GDPR).
• Newsletter / waitlist: Consent (Article 6(1)(a) GDPR). Withdrawable at any time.
• Server logs: Legitimate interests (secure operation of the site).

5. Third-party processors

• Anthropic (Anthropic, PBC, US): reads the whiteboard text to pick the matching service. Under Anthropic's commercial terms it does not use this data to train its models. Anthropic Privacy Policy
• Google Analytics 4: analytics if consented. Google LLC, US. Protected by Standard Contractual Clauses. Google Privacy Policy
• Email service provider: a third-party email delivery platform used to manage newsletter and course waitlist communications. The provider processes email addresses for sending purposes only.
• Google Fonts: typography served from Google servers. Google Fonts Privacy FAQ
• Aruba.it: web hosting, Italy. Aruba Privacy Policy

We do not use advertising networks or social media tracking pixels.

6. Data retention

• Analytics: 14 months in Google Analytics, then auto-deleted.
• Whiteboard: what you typed, 90 days; requests with your email, 12 months.
• Whiteboard log: one line per turn (date, language, kind of answer, cost, a code that is not your IP), 12 months; the text you typed in it, 90 days, or 12 months with your consent.
• Contact emails: Retained as long as reasonably necessary, then deleted.
• Newsletter list: Until you unsubscribe or request deletion.
• Server logs: Maximum 30 days.
• Cookie preference: 6 months in your browser.

7. International transfers

Google Analytics data is processed by Google LLC in the United States. This transfer is protected by Standard Contractual Clauses approved by the European Commission. The whiteboard text is processed by Anthropic, PBC in the United States, protected by the Standard Contractual Clauses in Anthropic's data processing terms. No other international data transfers occur.

8. Your rights

Email hello@ausavia.com to exercise any right. EU/EEA residents may also contact the Spanish Data Protection Authority (AEPD) or their local supervisory authority.

9. Changes to this policy

We update this policy as the site evolves. The date at the top reflects the latest revision. Continued use of the site after changes constitutes acceptance.