Privacy Policy

Controller

Qold AI — operated by NamelyDigital — Maurice Kumar C/ Esperanza 17, 3B, 07590 Capdepera, Illes Balears, Spain Email: hello@qold.ai · Phone: +34 631 400 042 NIF: ESY6376024R

What we process

Contact form: the details you submit — your name and email, optionally company and phone, your inquiry details (the reason, budget range, timeframe and category you select), your message, and the consent you give — are sent to our server, stored in our database and also emailed to us, solely to handle your inquiry. Legal basis: your explicit consent (Art. 6(1)(a) GDPR) and pre-contractual steps (Art. 6(1)(b) GDPR). Lead records in our database are deleted automatically after 12 months — or earlier on request — unless statutory retention applies.

Server logs: our hosting provider records technical access data (IP address, timestamp, requested URL) for security and operation (Art. 6(1)(f) GDPR). Logs are deleted on a regular schedule.

Analytics: Google Analytics 4 runs only after your consent (Art. 6(1)(a) GDPR) with IP anonymisation. You can withdraw consent at any time via “Cookie settings” in the footer.

Business clients & client portal

If we enter a business relationship, we process the data needed to deliver and invoice our services: your company and contact details, project notes, the email correspondence we send you from our system (recorded in a send log for our records), and — where a client-portal account is created for you — your login email plus the project updates, documents, contracts and invoices we make available to you there. Legal bases: performance of the contract (Art. 6(1)(b) GDPR) and our legitimate interest in orderly project and billing administration (Art. 6(1)(f) GDPR). Tax and commercial law require us to retain invoices and related records for the statutory periods (generally up to 6 years). Portal accounts and their files are stored by Supabase (Auth, Storage; eu-central-1) on our behalf, access is restricted to you, and we delete them once the business relationship ends and no retention duty remains.

Partner & affiliate applications

If you apply to become a partner or affiliate, we process the details you submit — company/brand name, contact name, email, optionally phone and website, and your pitch — to review your application. Legal basis: pre-contractual steps (Art. 6(1)(b) GDPR) and, where you're approved, performance of the resulting partner/affiliate agreement. If your application is rejected, we delete these records within 6 months unless you ask us to remove them sooner. If approved, the data becomes part of the partner/affiliate portal account described above (project/commission tracking, invoice uploads for affiliates), retained for the duration of that relationship plus applicable statutory periods.

Recipients

Processors in the EU: our hosting provider, and Supabase (PostgreSQL, Auth, Storage; eu-central-1) which stores contact-form submissions, client records and portal files on our behalf under a data-processing agreement. Email delivery (our correspondence and portal invitations) runs through our mail server. Spam protection: Cloudflare (Turnstile) when you submit the form. Only with consent: Google Ireland Ltd. (Google Analytics). If we send you a Stripe payment link for an invoice, we transmit the invoice title and number to Stripe Payments Europe, Ltd. (Ireland) to generate that link, before you ever visit Stripe's page; if you then choose to pay via that link, Stripe processes the payment details (card/bank) you enter directly on its own page — we never see or store those, only the resulting payment status. Transfers to third countries within the Google/Cloudflare/Stripe services rely on EU standard contractual clauses.

Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, plus the right to withdraw consent at any time. Contact: hello@qold.ai.

You may lodge a complaint with the Spanish supervisory authority (AEPD, www.aepd.es).

No automated decision-making

No profiling or automated decision-making takes place on this website.