Privacy Policy

Last updated: October 22, 2025

At Clara Assistant we take the privacy and protection of your personal data very seriously. This policy explains how we collect, use, store and protect your information in accordance with the General Data Protection Regulation (GDPR) of the European Union.

1. Data controller

2. Data we collect

We only collect the minimum data necessary to provide the virtual assistant service:

• Registration data: name, email, company name, CIF/NIF (for billing)
• Billing data: billing address, payment method (processed by Stripe)
• Service usage data: customer conversations with Clara, assistant configuration, usage statistics
• Technical data: IP address, browser type, access data (logs)

3. Purpose of processing

We use your personal data to:

• Service provision: configure and maintain your Clara virtual assistant
• Customer management: communication, technical support, service notifications
• Billing and payments: issuing invoices, managing monthly payments
• Legal compliance: tax and accounting obligations
• Service improvement: usage analysis to optimize Clara's performance

4. Legal basis

The legal basis for processing your data is:

• User consent: by registering and accepting this privacy policy
• Contract performance: necessary to provide the contracted service
• Compliance with legal obligations: tax and accounting regulations

5. Data retention

We retain your personal data only for the time necessary to:

• Provide the service while you keep your account active
• Comply with legal obligations (billing: 4 years according to Spanish regulations)
• Resolve claims or disputes

When you cancel your account, we will delete all your personal data within a maximum period of 30 days, except those we must retain by legal obligation.

6. Data recipients

Your data may be communicated to:

• Stripe: payment processor (complies with PCI-DSS and GDPR)
• AWS (Amazon Web Services): server hosting in the European Union
• Public administrations: when legally required (AEAT, etc.)

Important: Clara Assistant does NOT sell, rent or share your data with third parties for commercial purposes.

7. Hosting and security

All data is hosted on servers located in the European Union (eu-west-1 region, Ireland) through AWS, guaranteeing:

• Full compliance with GDPR
• Data encryption in transit (HTTPS/TLS) and at rest
• Automatic backups
• Physical and logical security measures according to ISO 27001 standards

8. Your rights (GDPR)

As a user, you have the right to:

• Access: know what data of yours we have stored
• Rectification: correct inaccurate or incomplete data
• Deletion: delete your data (right to be forgotten)
• Portability: receive your data in a structured and readable format
• Objection: object to the processing of your data
• Restriction: request the restriction of processing

To exercise any of these rights, send an email to contacto@claraassistant.com indicating your request and attaching a copy of your ID.

You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) if you consider that we have violated your rights.

9. End customer data (Clara users)

When you use Clara Assistant to serve your own customers:

• You are the data controller of your customers' data
• Clara Assistant acts as data processor
• It is your responsibility to inform your customers about the use of Clara and obtain their consent if necessary
• Clara should only manage public data. Private or confidential data should not be uploaded. This is the responsibility of the contractor.

10. Cookies

This website uses technical and analytical cookies. For more information, see our Cookie Policy.

11. Changes to the privacy policy

We reserve the right to update this privacy policy. Any changes will be communicated through the registered email and published on this page with the new update date.

12. Contact

For any questions or inquiries about this privacy policy, you can contact us at: