Legal
Privacy policy
How we process personal data when you contact Ingenia, use the site assistant, or browse with analytics enabled.
Last updated:
Data controller
The data controller is the owner identified in this site's legal notice.
You can write to the published contact email to exercise your rights or ask privacy questions.
Processing we carry out
We process personal data depending on the services you use on the site:
- Contact form: name, company, email, service interest, project summary, and optional fields (budget, urgency, stage, source).
- Chat assistant: conversation messages, language, technical session identifier, and partially masked IP address to limit abuse.
- Analytics (consent only): navigation events, pages visited, and interactions with CTAs or sections.
- Error monitoring: technical failure information (stack traces and request context) to maintain site stability.
Purpose and legal basis
We handle commercial requests and maintain the conversation related to a potential project.
- Contact form: pre-contractual measures and explicit consent when submitting the form.
- Chat: legitimate interest in answering inquiries and protecting the service from automated abuse.
- Qualified chat leads: legitimate interest in internal commercial follow-up when the conversation shows project intent.
- Analytics: user consent, managed through the cookie banner and preference center.
- Errors and security: legitimate interest in diagnosing incidents and improving site reliability.
Recipients and processors
We do not sell personal data. We only share information with providers that help us operate the site:
- Resend: email delivery for contact form submissions and qualified chat leads.
- Google (Gemini): generation of conversational assistant responses.
- Upstash (Redis): usage limits on public APIs and notification deduplication.
- PostHog and Vercel Analytics: usage measurement when you have accepted analytics cookies.
- Sentry: technical error capture on client and server.
International transfers
Some providers may process data outside the European Economic Area, particularly in the United States.
Where applicable, we rely on appropriate safeguards such as standard contractual clauses or other mechanisms recognized by data protection law.
Retention periods
We keep data for as long as needed to handle your request, maintain an ongoing commercial relationship, or meet legal obligations.
Technical security and rate-limiting records are kept for short, proportionate periods.
Your rights
You may request access, rectification, erasure, restriction, objection, or portability by writing to the contact email.
If you believe we have not handled your request correctly, you may file a complaint with the Spanish Data Protection Agency.