Privacy Policy

1. Information We Collect

At Mente Neural, we are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) and the Spanish Ley Orgánica de Protección de Datos (LOPD, Organic Law on Data Protection).

1.1 Personal Data

We collect the following data when you use our services:

• Identification data: First name, surname, email address, phone number
• Professional data: Company name, job title, industry
• Browsing data: IP address, browser type, operating system, pages visited
• Project data: Information relating to the AI projects you entrust to us

1.2 Automatically Collected Information

We automatically collect certain information through cookies and similar technologies to improve your experience. Please see our Cookie Policy for more details.

2. Purposes of Processing

We use your data to:

• Manage your registration and user account on our platform
• Provide the AI development services you have contracted
• Respond to your enquiries and requests for information
• Send you marketing communications about our services (if you have given your consent)
• Improve our services through analysis of usage and behaviour
• Comply with legal and tax obligations
• Detect and prevent fraud and misuse
• Manage invoicing and payments

3. Legal Basis for Processing

The processing of your personal data is based on:

• Performance of a contract: To provide the services requested
• Consent: To send marketing communications and use non-essential cookies
• Legitimate interest: To improve our services and analyse usage
• Legal obligation: To comply with tax and accounting regulations

4. Recipients of the Data

Your data may be disclosed to:

• Service providers: Hosting (AWS, Azure), analytics tools (Google Analytics), email services
• Payment platforms: Stripe and PayPal for payment processing
• Public authorities: Where required by law
• Professional advisers: Lawyers, auditors and consultants bound by a duty of confidentiality

We do not sell or transfer your personal data to third parties for commercial purposes.

5. International Transfers

Some of our service providers are located outside the European Economic Area (EEA). In such cases, we ensure that these transfers comply with the GDPR by means of:

• Standard contractual clauses approved by the European Commission
• Certification under the EU-US Data Privacy Framework
• Appropriate safeguards recognised by data protection authorities

6. Data Retention

We will keep your personal data for as long as necessary to fulfil the purposes described:

• Active client data: For the duration of the contractual relationship and for up to 6 years afterwards to meet tax obligations
• Contact data: Until you request its erasure or withdraw your consent
• Browsing data: 24 months from the last interaction
• Billing data: 10 years, in accordance with Spanish tax regulations

7. Your Rights

Under the GDPR, you have the right to:

• Access: Obtain confirmation as to whether we process your data and access it
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request the deletion of your data (the ‘right to be forgotten’)
• Restriction: Request the restriction of processing
• Portability: Receive your data in a structured format and transmit it to another controller
• Objection: Object to the processing of your data
• Withdrawal of consent: Withdraw your consent at any time
• Not to be subject to automated decision-making: Including profiling

To exercise these rights, send an email to privacidad@menteneural.com enclosing a copy of your Spanish ID card (DNI) or an equivalent document.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD) if you believe we have not handled your rights properly.

8. Data Security

We implement appropriate technical and organisational measures to protect your data:

• SSL/TLS encryption for data transmission
• Encryption of sensitive data in databases
• Role-based access controls
• Regular security audits
• Periodic backups
• Incident response protocols
• Ongoing staff training in data protection

9. Minors

Our services are not intended for people under 18. We do not knowingly collect data from minors. If you are a parent or guardian and believe that your child has provided us with personal data, please contact us so that we can delete it.

10. Changes

We reserve the right to amend this Privacy Policy. Changes will take effect from their publication on this page. We recommend that you review this policy periodically. If we make substantial changes, we will notify you by email or by means of a prominent notice on our website.