Legal
Privacy Policy
Last updated 2026-08-05
1. Who is responsible for your data
This website is operated by [To be confirmed — registered legal entity name] ([To be confirmed — legal form]), trading as Companido, registered office [To be confirmed — registered office address], registration number [To be confirmed — company registration number] ([To be confirmed — commercial register]), VAT number [To be confirmed — VAT identification number].
For anything in this policy you can write to hello@cloudsource.es. Data protection officer: [To be confirmed — data protection officer, if one is appointed].
2. What this policy covers
This policy covers the public website at cloudsource.es — the pages you are reading now, and the early-access application form. It does not describe the separate customer application, which is governed by the agreement with each business that uses it.
3. Controller and processor — two different roles
Companido acts in two distinct capacities, and it matters which one applies to you:
- As controller — for visitors to this website and for people who submit the early-access form. We decide what is collected here and why. That is the relationship this policy describes.
- As processor — when a business uses the Companido platform, the conversations and customer records it handles belong to that business. It decides the purposes; we act on its instructions under a separate agreement. If you spoke to a business that uses us and want to exercise a right over that data, the business is your first point of contact.
4. What we collect on this website
If you only read the pages
Nothing about you is stored in your browser except your own cookie choice, and only once you have made one. There is no analytics, no advertising and no profiling on this site. See the Cookie Policy for the complete, generated inventory.
Our web server produces standard technical logs of requests, which include the requesting IP address, the time, the path requested and the browser's user-agent string. These exist to operate and secure the service — to serve pages, to keep the site available, and to detect abuse.
If you apply for early access
We collect what you type into the form:
- Email address — required, because it is how we reply.
- Business name, country, type of business, and the challenge you selected — optional, and used only to understand who is applying.
-
A record of the consent wording you were shown (version
2026-07-v1) and the moment you submitted, so we can show what you actually agreed to.
If you open the chat
Where the on-site chat is available, it starts only when you open it deliberately. What you type is processed to produce a reply and is stored as a conversation. The chat on this website is a demonstration answering for a fictional business — please do not enter real personal details, and nothing arranged in it is a real appointment.
5. Why we process it, and on what basis
| What | Why | Legal basis |
|---|---|---|
| Serving the website | To deliver the pages you request and keep them working | Legitimate interests — operating a website you asked to view |
| Server and security logs | Availability, troubleshooting, abuse and rate-limit enforcement | Legitimate interests — securing the service |
| Your early-access application | To assess it and reply to you | Steps taken at your request prior to a possible contract |
| Product updates by email | To tell you about early access and product progress | Your consent, given on the form — withdrawable at any time |
| Your cookie choice | To honour the decision you made and not ask again | Strictly necessary — see the Cookie Policy |
6. Who else sees it
We do not sell personal data, and we do not share it for advertising. Data is handled on infrastructure we operate, and by the providers needed to run it.
Subprocessors: [To be confirmed — list of subprocessors]
Hosting and data location: [To be confirmed — data residency / hosting regions]
International transfers, and the safeguards relied on for any that occur, are part of the same open point and will be stated here once the list above is settled. We are not claiming today that no transfer occurs — we are saying it has not yet been documented to a standard worth publishing.
7. How long we keep it
Retention periods: [To be confirmed — retention periods per data category]
Retention is deliberately left open rather than filled with a plausible-looking number. If you want your application deleted before that is settled, ask us and we will delete it.
8. Your rights
Under the EU General Data Protection Regulation you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, and receive it in a portable form. Where we rely on consent, you can withdraw it at any time — that does not affect what we did before you withdrew it.
To exercise any of these, email hello@cloudsource.es. You also have the right to complain to a data protection supervisory authority. The competent authority for us: [To be confirmed — competent supervisory authority]. You may in any case complain to the authority in the country where you live or work.
9. Marketing email
If you consented on the application form, we may email you about early access and product progress. Every message carries a way to unsubscribe, and you can also just reply and ask. We do not pass your address to anyone else for their own marketing.
10. Security
The site is served over HTTPS with a strict content security policy, and the platform is built to keep each business's data separated. No description of security measures is a guarantee against every possible incident, and this policy does not offer one.
11. Changes to this policy
When this document changes materially we will update the date at the top. Where a change introduces a genuinely new purpose for cookies or storage, the consent banner will ask you again — it will not quietly re-interpret a decision you already made.