Privacy policy

Last updated: 11 October 2026

This is an English translation of our Spanish privacy policy. If the two versions differ, the Spanish version prevails.

1. Who is responsible for your data

The controller of the personal data processed through this website (yameveo.com) is:

Yameveo S.L.
NIF: B65893919
Registered office (domicilio social): C/ Calabria, 171, 5º 3ª, 08015 Barcelona, Spain
Registro Mercantil de Barcelona, Tomo 43393, Folio 140, Hoja B-429154
Email: hello@yameveo.com

We have not appointed a data protection officer, because none of the cases in Article 37 GDPR or Article 34 LOPDGDD applies to us. For anything related to your data, write to the address above.

2. Applicable law

  • Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR)
  • Ley Orgánica 3/2018, de 5 de diciembre, de Protección de Datos Personales y garantía de los derechos digitales (LOPDGDD)
  • Ley 34/2002, de 11 de julio, de servicios de la sociedad de la información y de comercio electrónico (LSSI-CE), for cookies and similar technologies

You can browse this website without giving us any personal information, and we do not offer visitor accounts. Personal data is processed in the four situations below.

3.1 Server logs

The web server records each request it receives: your IP address, the date and time, the address requested, the response status, the referring page and your browser’s user-agent string. We use these logs only to keep the website secure and working: to detect attacks and abuse, and to diagnose errors. We do not use them to analyse traffic or to build profiles.

Legal basis: our legitimate interest in the security and operation of the website (Article 6(1)(f) GDPR).

3.2 AI chat assistant

This website offers an optional chat assistant. It is an artificial intelligence system, not a person, and the chat window says so next to the input field. Using it is entirely up to you.

If you open the chat and send a message:

  • The text you write and the assistant’s replies are sent to Anthropic PBC (United States), whose language model generates the replies. We do not store the content of conversations on our servers.
  • Your IP address, a random session identifier, timestamps and the number of messages and tokens used are stored on the chat server to apply usage and rate limits, which prevent abuse and control cost. This data is not sent to Anthropic and is not linked to your identity.

Please do not write sensitive personal data, passwords or confidential third-party information in the chat. The assistant can make mistakes: its answers are not binding offers and are not legal, security or financial advice. It takes no decisions about you.

Legal basis: our legitimate interest in answering questions about our services and in protecting the service from abuse (Article 6(1)(f) GDPR). You can object at any time (Article 21 GDPR), simply by not using the chat or by writing to us.

3.3 Website statistics

We measure visits with our own statistics tool, which runs on the web server itself. It uses no cookies, stores nothing on your device and never saves your IP address.

For each page view we record the page address and title, the referring site, any campaign parameters in the link you followed, your device type, browser, operating system and country, and the time. To count unique visitors without identifying anyone, we compute a one-way code from your IP address with its last part removed, your browser’s user-agent string, the current date and a secret key. The code cannot be reversed to recover your IP address. Because the date is part of it, it changes every day, so a visitor who returns the next day cannot be linked to the earlier visit.

Your country is looked up in a database of public IP address ranges kept on the web server. Your IP address is not sent to anyone for this.

Legal basis: our legitimate interest in knowing which content is useful (Article 6(1)(f) GDPR). The measures above are designed so that this interest does not override your rights.

3.4 Contact form and email

If you use the contact form or write to us, we process your name, email address, company or organisation (if you give it), the topic you choose and your message, in order to answer you and, if you ask for one, to prepare a proposal. The form sends your message to us by email. The website does not keep a copy in its database. To limit automated abuse, the website keeps a counter derived from your IP address with its last part removed, for one hour.

Legal basis: steps taken at your request before a possible contract (Article 6(1)(b) GDPR). For the anti-abuse counter, our legitimate interest in protecting the form (Article 6(1)(f) GDPR).

4. Cookies and similar technologies

This website does not set cookies for visitors. There are no analytics, advertising or preference cookies, and no third-party content that sets its own: fonts and all other files are served from this website’s own server. WordPress sets technical cookies only for administrators who log in.

Only one item is ever stored in your browser, and only if you open the AI chat: a random session identifier, kept in your browser’s sessionStorage, which links the messages of that one conversation. It is created when you open the chat, never when a page loads. Your browser deletes it when you close the tab, and it is not used for statistics, advertising or tracking. Because it is strictly necessary to provide a service you have expressly requested, it does not require consent under Article 22.2 LSSI-CE.

As no cookies requiring consent are used, this website does not show a cookie banner.

5. Who receives your data

We do not sell your data or share it with anyone for their own purposes. The following entities process data on our behalf, as data processors, under processing agreements that meet Article 28 GDPR:

  • Yameveo EOOD (Burgas, Bulgaria), our sister company, runs the hosting of this website and the AI chat service for us. With our authorisation it uses two sub-processors:
    • Hetzner Online GmbH (Germany), which provides the servers. The website, its logs, the statistics and the chat’s usage records are stored in Germany.
    • Anthropic PBC (United States), which provides the language model behind the AI chat. It receives only the text of chat conversations.
  • Google (Google Workspace), our email provider. It carries and stores messages sent through the contact form or written to us.
  • Resend (Plus Five Five, Inc., United States), the service that delivers contact form messages to our mailbox. It keeps a copy of each message for 30 days.

We will also disclose data to public authorities, courts or the AEPD where the law requires it.

6. International transfers

Three of the providers above may process data in the United States:

  • Anthropic PBC, 548 Market Street, San Francisco, California. The transfer relies on the Standard Contractual Clauses adopted by the European Commission in Implementing Decision (EU) 2021/914 (Article 46(2)(c) GDPR), which form part of Anthropic’s Data Processing Addendum. Under the commercial terms that apply to the chat service, Anthropic does not use chat content to train its models and deletes inputs and outputs within 30 days, unless it has to keep them longer to investigate a breach of its usage policies.
  • Google. Google LLC is certified under the EU-U.S. Data Privacy Framework, which the European Commission recognised as adequate in Implementing Decision (EU) 2023/1795 (Article 45 GDPR). Google’s data processing terms also include the Standard Contractual Clauses.
  • Resend (Plus Five Five, Inc.), 2261 Market Street #5039, San Francisco, California. It stores data in the United States. The transfer relies on the Standard Contractual Clauses adopted by the European Commission in Implementing Decision (EU) 2021/914 (Article 46(2)(c) GDPR), which form part of Resend’s Data Processing Agreement. Resend also participates in the EU-U.S. Data Privacy Framework.

All other data stays in the European Union: Yameveo EOOD is in Bulgaria and the servers are in Germany.

7. How long we keep it

Data Retention
Server logs 15 days at most, then deleted automatically
AI chat usage records (IP address, session identifier) 30 days, then deleted automatically
AI chat conversation content Not stored by us. Deleted by Anthropic within 30 days
Chat session identifier in your browser Until you close the tab
Statistics: individual page views (daily-changing code, no IP address) 90 days. After that only daily totals remain, which contain no personal data
Contact form anti-abuse counter 1 hour
Copy of contact form messages held by Resend 30 days, then deleted by Resend
Enquiries sent by form or email Up to six years, the period for which Article 30 of the Spanish Commercial Code requires us to keep business correspondence. Then deleted

8. Your rights

You can ask us at any time for access to your personal data, its rectification or erasure, the restriction of its processing or its portability, and you can object to its processing (Articles 15 to 22 GDPR and 12 to 18 LOPDGDD). Write to hello@yameveo.com, saying which right you want to exercise. If we cannot otherwise be sure that a request comes from you, we may ask you to prove your identity. We will reply within one month (Article 12(3) GDPR).

What we can find in practice: server logs and statistics are not linked to anyone’s identity, and the statistics are designed so that they cannot be. In most cases we therefore cannot tell your records apart from anyone else’s (Article 11 GDPR). For the AI chat, we can find and delete your records if you send us your session identifier, which you can read in your browser’s sessionStorage under the key ym_session_id while the tab is still open. In any case they are deleted after 30 days. If you want conversation content held by Anthropic deleted, tell us and we will pass the request on.

9. Complaints

If you believe we have processed your data unlawfully, you can lodge a complaint with the Spanish data protection authority:

Agencia Española de Protección de Datos (AEPD)
C/ Jorge Juan, 6, 28001 Madrid, Spain
www.aepd.es

We would appreciate the chance to resolve your concern first. Write to us at hello@yameveo.com.

10. Changes to this policy

We will update this policy whenever the way we process data changes. The date at the top shows the current version.