Privacy Policy and Data Protection
1. Data Controller
The data controller for personal data collected through this website is AM Kairos Consulting Ltd, trading as QuiroAds, based in Spain. You can contact us at hola@heycai.ai.
2. Data We Collect
We only collect data necessary to provide the service:
- Full name
- Email address and phone number
- Clinic name and basic details
- HeyCAi platform usage data (messages processed, actions executed)
- Billing data (managed by our payment processor, never stored directly)
3. Purpose of Processing
- Providing the HeyCAi service and its features
- Account-related and service communications
- Billing and subscription management
- Technical support and customer service
- Product improvement (anonymized data)
- Compliance with legal obligations
4. Legal Basis
Processing of your data is based on the execution of the service contract (Art. 6.1.b GDPR), compliance with legal obligations (Art. 6.1.c GDPR) and, where applicable, your explicit consent (Art. 6.1.a GDPR).
5. Data Retention
We retain your data while you maintain an active account with us, and for the time necessary to comply with legal obligations. After cancellation, data is deleted within a maximum of 90 days, unless the law requires a longer retention period.
6. Recipients
We do not sell or share your data with third parties. We work with sub-processors who act under confidentiality agreements and data processing agreements (DPA), including:
- Cloud infrastructure providers (hosted in the European Union)
- Messaging platforms (WhatsApp / Meta Platforms), under their own policies
- PCI-DSS certified payment processors
7. Your Rights (GDPR)
As a user, you have the right to:
- Access — request a copy of your personal data
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion of your data ("right to be forgotten")
- Restriction — restrict processing in certain circumstances
- Portability — receive your data in a structured, machine-readable format
- Objection — object to processing based on legitimate interest
To exercise any of these rights, write to us at privacidad@heycai.ai. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD).
8. Cookies
This website only uses essential technical cookies for its operation. We do not use tracking or advertising cookies.
9. Contact
For any questions about privacy or data protection, contact our data protection officer at privacidad@heycai.ai.