RKIVE AI

RKIVE AI

🔒 Privacy Policy

RkiveAI España S.L.
Effective Date: July 17, 2025

1. Introduction

RkiveAI España S.L. (“RkiveAI”, “we”, “us”, or “our”) is committed to protecting the privacy and security of personal data you share with us. This Privacy Policy explains:

By using any of our services (the “Services”), you agree to the collection and use of your personal data as described here. If you do not agree with any part of this policy, please do not use our Services.

2. Who We Are & Contact Details

Data Controller:

RkiveAI España S.L.
Attn: Data Protection Officer
Paseo de la Castellana 91, Planta 4, Puerta 1. Madrid, Spain. 28046.

If you have any questions about this Privacy Policy or wish to exercise your data protection rights, you can contact our Data Protection Officer (DPO) at legal@rkiveai.com.

If you remain unsatisfied after contacting us, you have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD):

AEPD
C/Jorge Juan, 6, 28001 Madrid, Spain
🌐 https://www.aepd.es

3. Definitions

4. Information We Collect

We collect and process various categories of personal data in order to provide, maintain, improve, and secure our Services. Broadly, we group these into:

  1. Account & Profile Data
  2. User-Generated Content
  3. Technical, Usage & Device Data
  4. Communications & Support Data

4.1 Account & Profile Data (Collected Directly)

When you register or update your account, we may collect:

Legal bases: Performance of a contract (to create and manage your account); Legitimate interest (to prevent fraud, enforce Terms).

4.2 User-Generated Content & Uploaded Files

When you use our AI features, you may upload or enter:

Legal bases: Performance of a contract (to deliver the AI service you requested); Legitimate interest (to improve the service, troubleshoot).

4.3 Technical, Usage & Device Data (Automatically Collected)

Our systems (and third-party analytics providers) automatically collect:

Legal bases: Legitimate interest (to maintain, secure, and improve our Services, and to prevent abuse); Consent (for cookies and marketing tracking).

4.4 Communications & Support Data

If you contact us (e.g., support tickets, emails, chat transcripts):

Legal bases: Performance of a contract (to provide support); Legitimate interest (to improve support, resolve disputes).

5. How We Use Your Personal Data

5.1 To Provide & Improve the Services

Legal bases: Performance of a contract; Legitimate interest (service quality, security).

5.2 Billing, Payments & Refunds

Legal bases: Performance of a contract; Compliance with legal obligations (tax law).

5.3 Communications & Marketing

Legal bases:

5.4 Research & Development

Legal bases: Legitimate interest (product enhancement).

6. Data Sharing & Disclosure

We do not sell or rent your personal data. We share data only as described below or with your explicit consent.

6.1 Service Providers & Subprocessors

We engage third parties to perform certain functions on our behalf, including:

Before granting access to your data, we ensure that each service provider:

6.2 Legal & Compliance Obligations

We may disclose personal data if required by law, regulation, or valid subpoena or court order. This includes:

6.3 Business Transfers

If RkiveAI is involved in a merger, acquisition, or sale of assets, personal data may be transferred to the acquiring party. We will notify you before your data is transferred and becomes subject to a different privacy policy.

6.4 Aggregated & Anonymized Data

We may share aggregated, anonymized, or de-identified data with partners, investors, or the public (e.g., usage statistics, performance metrics) so long as no individual can be identified.

7. International Data Transfers

All customer data is stored and processed primarily on servers located in the European Union. If we ever transfer data outside the EU/EEA (e.g., to support providers in other regions), we will do so only under appropriate safeguards, such as:

  1. ✅ Standard Contractual Clauses (SCCs): Approved by the European Commission.
  2. ✅ Binding Corporate Rules (BCRs): Where applicable within our corporate group.
  3. ✅ Adequacy decisions: If a country is recognized by the EU as providing adequate protection.

We will inform you in advance if we ever rely on such transfers and what mechanisms we use.

8. Data Retention

We retain your personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Below is a general overview; exact retention periods depend on context:

CategoryRetention Period
Account & Profile DataDuration of your active account + up to 3 years after account closure
Billing & Transaction RecordsAt least 10 years (required by tax and financial regulations in Spain/EU)
Support & Communications LogsUp to 5 years, unless subject to a longer legal hold
Usage & Analytics (anonymized)Up to 5 years (or until data is fully anonymized)
Security & Audit LogsIndefinitely, to detect and investigate fraud or abuse

After the retention period ends, we will securely delete or anonymize the data.

9. Cookies & Tracking Technologies

We use cookies, web beacons, and similar technologies to recognize your browser or device, remember preferences, and help us understand site usage. You can control cookie settings via your browser; however, disabling certain cookies may affect service functionality.

9.1 Types of Cookies We Use

  1. 🍪 Essential (Strictly Necessary) Cookies
    • Required for basic site functionality (e.g., account authentication, shopping cart).
    • Cannot be disabled if you want to use the core Services.
  2. 📈 Performance & Analytics Cookies
    • Collect anonymized data on how you use our Services (e.g., page visits, feature usage).
    • Help us optimize speed and user experience.
    • Generally set by third-party analytics providers.
  3. 🎯 Functional Cookies
    • Remember your preferences (e.g., language, region) to personalize your experience.
  4. 📢 Advertising & Marketing Cookies (if enabled)
    • Track your browsing behavior across websites to serve more relevant ads (when you have consented).
    • You can opt out of these.

When you first visit, we display a cookie banner explaining these categories and asking for your consent (where required by law). You can manage consent at any time through your account settings or by clearing cookies in your browser.

10. Security Measures

We implement industry-standard administrative, technical, and physical safeguards to protect personal data, including:

Despite these measures, no system can be 100% secure. You acknowledge and accept the residual risks when transmitting personal data over the internet.

11. Your Rights Under GDPR

If you are located in the European Union or the UK, you have the following rights regarding your personal data. To exercise any of these rights, please contact us at legal@rkiveai.com. We will respond within one month (or as required by law).

  1. 📥 Right of Access. You can request a copy of the personal data we hold about you and certain details about our processing.
  2. ✏️ Right to Rectification. You can ask us to correct inaccurate or incomplete data (e.g., update your email if it changed).
  3. 🗑️ Right to Erasure (Right to Be Forgotten). You can request deletion of your personal data when it’s no longer needed for its original purpose, except where we have a legal obligation to retain it (e.g., tax records).
  4. ⏸️ Right to Restriction of Processing. You can request that we temporarily stop processing your data (e.g., contest accuracy) while we verify it.
  5. 📤 Right to Data Portability. You can request a copy of your data in a structured, machine-readable format (e.g., JSON or CSV) to transmit to another controller.
  6. 🚫 Right to Object. Where we process your data based on legitimate interest, you can object, and we must stop unless we can demonstrate compelling legitimate grounds. You also have the right to opt out of direct marketing at any time.
  7. 🔓 Right to Withdraw Consent. If we rely on your consent (e.g., for marketing emails or non-essential cookies), you may withdraw consent at any time. Withdrawal will not affect processing that occurred before you withdrew.
  8. 📣 Right to Lodge a Complaint. You can file a complaint with a supervisory authority—e.g., the Spanish Data Protection Agency (AEPD)—if you believe our processing violates applicable law.

12. Children’s Privacy

Our Services are not directed at children under 18 years of age. We do not knowingly collect personal data from anyone under 18. If we learn that we have unintentionally collected data from a minor, we will delete it as soon as possible. If you believe that a minor has provided us with personal data, please contact us at legal@rkiveai.com.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do:

Your continued use of the Services after the Effective Date constitutes acceptance of the revised Privacy Policy. If you do not agree with any changes, you must stop using the Services and may request account deletion as described below.

14. How to Delete Your Account & Data

If you wish to have all personal data deleted:
🔗 https://www.rkiveai.com/en/data-deletion

15. Third-Party Links & External Sites

Our Services may contain links to third-party websites, plug-ins, or services that we do not control. Once you click on a third-party link, you will be subject to that third party’s privacy policy. We encourage you to read the privacy notices of any sites you visit. We are not responsible for the content or practices of external sites.

16. International Users

If you are accessing our Services from outside the European Economic Area (EEA), note that we transfer and store data within the EEA. By using the Services, you consent to the transfer of your information to the EEA and acknowledge that EU data protection laws may differ from those where you reside. We rely on appropriate safeguards (e.g., Standard Contractual Clauses) if any personal data is transferred outside the EEA.

17. Miscellaneous

18. Global Privacy Notice

RkiveAI España S.L. (“we,” “us,” or “our”) is headquartered in Madrid, Spain, and primarily processes data under the EU GDPR. Because we serve users worldwide, this notice explains your rights if you are located in other jurisdictions:

  1. European Economic Area (EEA) / UK:

    • Your rights are described in Section 11 (“Your Rights Under GDPR”) of our Privacy Policy.
    • We rely on standard contractual clauses (SCCs) to transfer data outside the EEA.

  2. California (CCPA/CPRA)

    • We do not sell or share your personal information for cross-context behavioral advertising.
    • California residents have the right to request:
      1. The categories of personal data we’ve collected and the purposes for which we use it.
      2. Deletion of personal data (subject to legal retention obligations).
      3. Opt-out of any future sale or sharing (if that ever occurs).
    • To exercise these rights, email legal@rkiveai.com with “CCPA Request” in the subject line. We will verify your California residency and respond within 45 days.

  3. Brazil (LGPD)

    • We collect personal data to provide and improve our AI services. We may share it with third-party subprocessors (e.g., AWS, Stripe, Google Analytics) under binding data-processing agreements.
    • Brazilian residents have the right to confirm processing, access, correct, delete, or port their personal data, and to withdraw consent at any time.
    • To submit an LGPD request, email legal@rkiveai.com with “LGPD Request” in the subject line. We will verify your identity or residency and respond within 15 days.

  4. Other Jurisdictions:

    • If your local law grants additional rights (e.g., South Africa’s POPIA, Japan’s APPI), you may exercise them by emailing legal@rkiveai.com.
    • We will verify your location and respond within the shorter of your local statutory timeframe or 30 days.

How to Contact Us for Any International Request:

If we need to share your data with third-party vendors (e.g., AWS, payment processors) outside your region, we rely on appropriate safeguards (Standard Contractual Clauses, adequacy decisions, or Binding Corporate Rules) to ensure an adequate level of protection.

By continuing to use our Services, you acknowledge that you have read and understood this Policy and agree to be bound by its terms.