Privacy notice
Effective September 12, 2026
Who is responsible
Sonsoles RKT, SL is the data controller for the Quote preflight pilot. NIF: B10910040. Registered office: C/ Bernardo López García 18, Bajo, 03013 Alicante, Spain. Contact: [email protected].
What we collect
We collect your work email, timed baseline, reason for not using shop management software, uploaded quote requests, the extracted checklist, your corrections, product events, and model cost. Your browser stores the private pilot access credential until you sign out or it expires. We do not use advertising or marketing cookies.
Do not upload payment-card data, government identifiers, health information, or information you do not have the right to process.
Why we process it
We process account and request data to provide and evaluate the pilot under our agreement with you. We process security and operational events to protect the service and understand whether it works, based on our legitimate interests in securing and improving the pilot. We may also process information where necessary to comply with law.
How long we keep it
Original files are normally deleted immediately after processing. Failed deletions are retried automatically, with a maximum retention target of 24 hours. To support the promised concierge correction, we retain an extracted-text working copy after masking common email, US phone, web-link, and long-number patterns. It is available only to the authorized operator and is erased on the first operator review, your confirmation, account deletion, or automatically after four days, whichever comes first. When you delete your account, we erase your email, files, extracted text, citations, questions, and checklist content from the live system. We keep only pseudonymous categorical and timing metrics needed to evaluate Gates A–C until no later than 90 days after the experiment closes. Encrypted backups expire within 90 days and are not restored except for disaster recovery.
Processors and transfers
Cloudflare delivers the website and API. Hetzner hosts the application and database in Germany. Amazon Web Services stores encrypted disaster-recovery backups for up to 90 days. GitLab deploys the application without receiving quote content. OpenAI processes extracted request text in the United States. xAI is not enabled for real pilot requests.
API content is not used for model training unless we explicitly opt in. Provider safety logs may retain content for up to 30 days.
Your rights
You may request access, correction, deletion, restriction, portability, or objection by emailing the address above. You may withdraw from the pilot at any time. Where processing is needed to provide the pilot, deletion or objection may mean we can no longer provide access. You may complain to the Spanish Data Protection Agency.
Security
Access uses a private high-entropy link. Files are type-checked and malware-scanned. Raw content is excluded from application logs. The tool proposes fields; a person must confirm them before relying on the result.
Other legal information
Company registration details and website ownership information are available in the legal notice.