Vector Norte

Legal information

Privacy policy

Last updated: September 2026

At Vector Norte we handle the personal data you give us on a simple principle: we ask for the minimum, we use it only for what you gave it to us for, and we tell you plainly. Here is the detail.

This is a courtesy translation. Vector Norte is established in Spain and the Spanish version is the legally binding one.

1. Who is the data controller?

2. What data do we process, and where does it come from?

Only the data you give us yourself, voluntarily, through the contact form, by writing to us by email or by using our demo assistants:

  • Identification and contact data: name and email address.
  • Professional data: your company name, if you choose to give it (optional field).
  • The content of your enquiry: whatever you tell us in the message. We recommend not including confidential information or special categories of data in that field.
  • Technical security data: the form's anti-spam system processes your IP address and browser data to verify that you are a person and not a robot.

If you try our demo assistants by phone or on WhatsApp, we also process:

  • By phone: your phone number, the call recording and its transcript. We tell you at the start of the call that it is being recorded.
  • On WhatsApp: your phone number, your WhatsApp profile name and the content of the messages you exchange with the assistant.
  • If you book, change or cancel a demo appointment: the name you give us, the service you choose and the date and time of the appointment.

We do not collect data from minors and we do not buy databases from third parties. All the information comes directly from you.

3. What do we use your data for, and on what legal basis?

Purpose Legal basis (Art. 6 GDPR)
Answering your enquiry and continuing the exchange of messages that follows from it. Your consent, given by ticking the box on the form (Art. 6(1)(a)).
Attending to you through our demo assistants by phone or WhatsApp and managing the test appointments you request. Your consent, given by calling or messaging our assistants after being informed (Art. 6(1)(a)).
Preparing and sending you a service proposal if you ask for one. Pre-contractual measures taken at your request (Art. 6(1)(b)).
Protecting the form against automated submissions and abuse. Legitimate interest in keeping the site secure (Art. 6(1)(f)).
Meeting legal, tax and accounting obligations if we end up working together. Legal obligation (Art. 6(1)(c)).

We do not send marketing communications to people who simply write to us, and we do not pass your data to third parties so they can sell you their products.

4. How long do we keep it?

  • Conversations, recordings and transcripts from the demo assistants: a maximum of 90 days, unless you ask us to delete them sooner. Demo appointments are deleted 30 days after their date.
  • If your enquiry does not lead to a commercial relationship, we keep the message for a maximum of one year and then delete it.
  • If we do end up working together, the data is kept for the duration of the relationship and, afterwards, for the applicable statutory limitation periods (generally up to six years under Spanish commercial and tax law).
  • If you withdraw your consent, we stop processing it immediately, unless we have to keep it blocked in order to deal with possible legal liabilities.

5. Who else has access to your data?

We do not sell or transfer your data. We do work with technology providers who, as processors, access it in order to provide us with their service, always under contract and only on our instructions:

  • Web hosting provider: DonDominio (Spain), which stores the site and its technical logs.
  • Web3Forms (Sylvix LLC): handles the contact form submission and delivers your message to us by email.
  • hCaptcha (Intuition Machines, Inc.): the form's anti-robot verification system. It processes your IP address and interaction data for the sole purpose of telling people apart from automated programs.
  • Email provider: DonDominio (Spain), where we receive and keep your message.
  • Meta Platforms Ireland Ltd.: WhatsApp Business messaging service for the WhatsApp assistant.
  • Vapi: voice assistant platform for the calls.
  • Anthropic: artificial intelligence model that interprets your messages and generates the assistants' replies.
  • Cal.com: calendar and demo appointment management.
  • Zadarma: telephone operator that receives the calls.
  • Automation server provider: the server where the automations that connect all of the above services run.

In addition, your data may be disclosed to courts, tribunals and public authorities where there is a legal obligation to do so.

6. International data transfers

Some of the providers listed above are established outside the European Economic Area, mainly in the United States. In those cases, transfers are made under the safeguards set out in Chapter V of the GDPR: European Commission adequacy decisions, the provider's adherence to the EU-US Data Privacy Framework, or standard contractual clauses, as applicable to each provider. You can ask us about the safeguards in place by writing to info@vectornorte.com.

7. Do we use artificial intelligence?

Yes. Our demo assistants use artificial intelligence to understand what you say or write, reply to you and manage test appointments. We do not make automated decisions that produce legal effects concerning you or that significantly affect you. At any time, you can ask for a person to assist you by writing to info@vectornorte.com.

8. What rights do you have?

You may exercise the following rights at any time, free of charge:

  • Access: find out what data of yours we process.
  • Rectification: correct anything that is inaccurate.
  • Erasure: ask us to delete it when it is no longer needed.
  • Objection: object to processing based on legitimate interest.
  • Restriction: ask us to suspend processing while a complaint is resolved.
  • Portability: receive your data in a structured, commonly used format.
  • Withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

To exercise them, write to info@vectornorte.com stating which right you wish to exercise and attaching a copy of a document proving your identity. We will reply within one month at the latest.

If you believe we have not handled your request properly, you have the right to lodge a complaint with the Spanish Data Protection Agency (C/ Jorge Juan, 6, 28001 Madrid — www.aepd.es).

9. How do I ask you to delete my data?

If you want us to delete the data linked to your phone number or email address — including your conversations with our WhatsApp or voice assistants — email info@vectornorte.com with the subject "Delete my data" and tell us the phone number or email address in question. We will delete them within 30 days at the latest and let you know once it is done, except for any data the law requires us to keep blocked.

10. What if I am a customer of a company that uses Vector Norte assistants?

When we set up assistants for other companies, that company is the controller of your data. Vector Norte acts as a processor: it processes the data only on that company's instructions and under a contract that complies with Article 28 of the GDPR. To exercise your rights, contact that company; if you write to us instead, we will pass your request on to them.

11. Cookies and similar technologies

This site uses no first-party cookies for analytics, advertising or tracking. We do not use Google Analytics, there are no social media pixels, and the fonts are hosted on our own server, so simply browsing the site generates no requests to third parties. You choose the language with the switcher in the header, and nothing is stored on your device to remember it.

The only exception is the hCaptcha anti-spam system, which may store technical information in your browser when you interact with the contact form. This storage is strictly necessary for the security of the service and is activated only if you start filling in the form: if you just read the site, it is never loaded.

12. Information security

We apply appropriate technical and organisational measures to protect your data: HTTPS encryption, strict browser security policies, least-privilege access within our team, and periodic review of the providers we use. No system is infallible, but we work to keep the risk as low as possible.

13. Changes to this policy

We may update this policy to reflect legislative developments or changes to our services. The version in force will always be the one published on this page, with its last updated date shown above.

← Back to the main page