Skip to main content
Language: English
Call the demo

Privacy policy

Last updated: 1 November 2026

This is a translation for your convenience. If there is any difference, the Spanish version prevails.

1. Data controller

In accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), and Spanish Organic Law 3/2018, of 5 December, on the protection of personal data and guarantee of digital rights (LOPDGDD), we inform you that the controller of the personal data collected through this website is:

Controller
Koldo Asueta Etxegibel y Otro, C.B.
Trade name
Konai
Privacy contact
legal@konai.es

The owner’s other identification details, including its address, are in the legal notice.

2. Data we process

We only process the data you give us directly or that is generated when you use the website and the phone demo:

  • Contact form: your name, email address, the name and size of your company, what you would like to improve, your role in the company, the text of your query and, if you provide them, your company’s tax ID (CIF) and when it suits you to talk.
  • Emails you send us: your address and the content of the message and, where applicable, of any attachments.
  • Phone demo: the number you call from and the recording and transcript of the conversation with the artificial intelligence agent. At the start of the call, the agent tells you that it is an artificial intelligence assistant, that the call is recorded to assist you and improve the service, and that this policy is available at konai.es/privacidad.
  • Prospective client record: only if, at the end of the call, you agree to us contacting you. In that case we note your phone number and, if you tell us, your name and company, as well as the reason for the call, a summary of the conversation and our assessment of how we can help you, with the date and the version of the notice you heard. If you do not agree, we do not keep any record.
  • Technical browsing data: what the server needs to show you the website, such as your IP address, the type of browser and the page requested. When you send the form or request the demo number, your IP address is also used to limit the number of requests: it is not stored in plain text and is deleted after 10 minutes.
  • Bot check: only when you send the form or request the demo number, a verification service checks that it is being done by a person and not by an automated program. To do so, it analyses technical data about your connection and browser, such as your IP address and browser type. It is not used to identify you or for any other purpose.
  • Website usage data: the page you visit, the page you come from, the type of browser and device, the country and loading times. They are measured without cookies, without storing anything in your browser, and are only used in aggregate, without identifying you.

We do not ask for special categories of data. Please do not include them in your messages or in the conversation with the demo agent.

The website and the demo are aimed at businesses and professionals. We do not knowingly process data of children under 14.

3. Purposes

  • Answering your query received through the form or by email, confirming by email that we have received it and, if you ask us to, preparing and sending you a service proposal.
  • Handling your call to the phone demo andreviewing conversations to improve the service.
  • Assessing how we can help you and contacting you afterwards, only if at the end of the call you expressly tell us that you want us to contact you.
  • Ensuring the security and operation of the website and protecting it against automated use, such as the automated sending of forms or the automated retrieval of the demo number.
  • Understanding how the website is used, with aggregate visit statistics, to improve its content and performance.

We do not send you marketing communications or call you without your express consent, and we never make cold contacts. We do not build profiles for advertising purposes.

4. Legal bases

  • Form and email: your consent (article 6.1.a GDPR), which you give when sending your query and may withdraw at any time, without affecting the lawfulness of prior processing. When you ask us for a proposal, taking pre-contractual steps at your request (article 6.1.b GDPR).
  • Website security, including the bot check: our legitimate interest in protecting the website and its systems against misuse and automated use (article 6.1.f GDPR).
  • Usage statistics: our legitimate interest in knowing, in aggregate and without identifying you, how the website is used in order to improve it (article 6.1.f GDPR). You can object by writing to us or by blocking the measurement in your browser.
  • Phone demo: to handle the call, your consent, which you give by continuing the call after the notice (article 6.1.a GDPR). To review conversations and improve the service, our legitimate interest (article 6.1.f GDPR). You can object to this review during the call, by telling the agent, or later, by writing to us, and ask us for our balancing test for this legitimate interest at legal@konai.es.
  • Prospective client record and later marketing contacts: your express consent (article 6.1.a GDPR), which you give by answering yes when the agent asks you, at the end of the call, whether you want us to contact you. You can withdraw it at any time.

The data requested in the form is necessary to answer your query. If you do not provide it, we will not be able to reply through that channel, although you can always email us directly.

5. Retention periods

  • Contact form and emails: at most 24 months from the last contact.
  • Phone demo: the audio and transcript of each call are kept for 14 calendar days and are deleted after that period.
  • Prospective client record: 12 months from the last contact, after which it is deleted. The audio and full transcript of the conversation are kept only for the 14 days stated above.
  • If we sign a contract: the data needed for the relationship is kept while it lasts and, afterwards, for the limitation periods of any legal liabilities that may arise from it.

Technical server logs are kept for as long as strictly necessary to ensure the security of the website. The record that limits form submissions and demo number requests is deleted after 10 minutes. If a form submission fails, the error log, which may include the data sent, is kept only for as long as needed to fix it. Usage statistics are aggregated and do not identify you.

Once these periods have passed, the data is deleted or, where required by law, kept blocked and available to the competent authorities for the limitation period of any possible liabilities.

6. Recipients and processors

We do not share your data with third parties, except where required by law. To provide our services we use providers that process data on our behalf, as processors, in the following categories:

  • Telephony.
  • Voice agent platform, including its voice, transcription and artificial intelligence services.
  • Website hosting and delivery, including cookie-free usage measurement and bot checks.
  • Process automation platforms, such as sending the contact form or recording prospective client records.
  • Artificial intelligence services that summarise demo calls.
  • Cloud spreadsheets, where we keep the register of prospective clients.
  • Email and office software.

In accordance with article 28 GDPR, processors may only process the data following our instructions, with adequate safeguards and to provide the service entrusted to them. The bot check service also processes some of that technical data on its own account, as a controller, to keep its own service secure.

7. International transfers

Some of our providers may process personal data outside the European Economic Area, mainly in the United States. In that case, the transfer is based on the European Commission’s adequacy decision for companies that participate in the EU-U.S. Data Privacy Framework or on the standard contractual clauses approved by the European Commission. You can ask for information about these safeguards by writing to legal@konai.es.

8. Your rights

In relation to your personal data, you can exercise the rights of:

  • Access: to know whether we process your data and obtain a copy.
  • Rectification: to correct inaccurate data or complete incomplete data.
  • Erasure: to ask us to delete your data when it is no longer needed or you withdraw your consent, among other cases.
  • Objection: to object to processing based on our legitimate interest. In the phone demo, you can also do so during the call itself, by telling the agent.
  • Restriction: to ask us to keep your data without processing it, in the cases provided for in article 18 GDPR.
  • Portability: to receive the data you have given us in a structured, commonly used format, or to have us send it to another controller.
  • Withdrawal of consent at any time, without affecting the lawfulness of prior processing.
  • Not being subject to automated decisions that produce legal effects concerning you or similarly significantly affect you. We do not take decisions of this kind.

How to exercise them

Write to us at legal@konai.es, stating the right you wish to exercise. If we have reasonable doubts about your identity, we may ask you for additional information to confirm it.

Exercising your rights is free of charge. We will reply within one month of receiving the request, which may be extended by two further months where necessary given its complexity or the number of requests, in which case we will inform you of the extension within the first month (article 12.3 GDPR).

9. Complaint to the supervisory authority

If you consider that the processing of your data does not comply with the regulations, you can lodge a complaint with the Spanish Data Protection Agency (AEPD), C/ Jorge Juan, 6, 28001 Madrid, or through its electronic office at aepd.es. We would be grateful if you let us know first at legal@konai.es, so we can try to resolve it.

10. Security measures

In accordance with article 32 GDPR, we apply technical and organisational measures appropriate to the risk to ensure the confidentiality, integrity and availability of the data and to prevent its loss, alteration or unauthorised access. These include:

  • Access to the data limited to the two partners.
  • Two-factor authentication on accounts.
  • Backups.
  • Encryption of communications in transit.

11. Artificial intelligence

In the phone demo, you are answered by Ane, an artificial intelligence agent. At the start of the call it tells you that it is an artificial intelligence assistant and that the call is recorded. If at the end you agree to us contacting you, a summary of the conversation is prepared that we use to assess how we can help you: that assessment is only used to decide what to offer you and never produces legal effects concerning you or similarly significantly affects you. We do not take decisions based solely on automated processing that produce legal effects concerning you.

12. Accuracy of data

You guarantee that the data you give us is true and belongs to you, and you undertake to let us know of any change. If you give us data about other people, you must have their permission and inform them of the content of this policy.

13. Changes to this policy

We may update this policy to adapt it to changes in the law or in our processing. The version in force is the one published on this page, with its date of update.