Privacy policy

This policy explains which personal data we process, for what purpose, for how long and what your rights are. It applies to the kerix.cat website, the «Let’s talk» form and the public demo of Kèrix (app.kerix.cat).

Data controller

• Controller: Oriol Testart i Riumalló, self-employed professional
• NIF (Tax ID): 41590266X
• Address: C/ La Farga, 5, 17401 Arbúcies (Girona), Spain
• Email for any privacy matter: hola@kerix.cat

Which data we process and why

If you write to us with the «Let’s talk» form

• Data: name, company, email, phone (if you give it), team size, what you are interested in, your message, language, date and time, and your consent.
• Purpose: to reply to you, prepare a proposal and, if you wish, arrange a meeting.
• Legal basis: your consent (article 6.1.a GDPR), which you can withdraw at any time.
• Retention: if you do not become a customer, we delete it at the latest 2 years after the last contact, or earlier if you ask us to.

If you enter the public demo

• Data: name, email, language, date and time, and your consent to us contacting you.
• Purpose: to give you access to the demo, send you a welcome email and write to you about Kèrix.
• Legal basis: your consent, which you can withdraw at any time.
• Retention: at the latest 2 years after the last contact, or earlier if you ask us to.

The demo is read-only and uses invented data: nothing you type in it is saved.

If you email us

• Data: whatever you send us.
• Purpose: to reply to you.
• Legal basis: your consent when writing to us and, if you are already a customer, the contract.
• Retention: as long as needed to handle your request and, at most, 1 year afterwards.

Website analytics

Only if you accept it in the cookie banner, we use Google Analytics to learn, in aggregate, how many visits the website receives and which pages are viewed. If you reject it or do not answer, it is not loaded and nothing is sent to Google. The legal basis is your consent. We explain it in the cookie policy.

Security

The server logs technical data such as the browser and the time of requests to protect the website from abuse and attacks. The IP address is not stored: only an encrypted fingerprint (HMAC) used to limit repeated form submissions. The legal basis is our legitimate interest in keeping the service secure. Logs are kept for as short a time as possible.

Data in customers’ installations

Kèrix is installed on each customer company’s server, or on its hardware. The data the agents handle there (contacts, invoices, conversations, integration keys) stays in that installation, and the customer company is its controller.

• We have no access to that data unless the customer gives it to us.
• If a customer asks us to install or maintain it with access to their server, we act as a processor (article 28 GDPR), under a contract and only for that purpose.
• The AI model that processes the conversations is chosen by the customer: a provider (OpenAI, Anthropic or OpenRouter) with their own key and terms, or a local model running on their hardware.
• If you work at a customer company and want to exercise your rights over that data, contact your company. If you write to us, we will pass your request on to them.

Who we entrust data to

We do not share data with third parties unless required by law. To run this website and the demo we work with these providers, which process data on our behalf:

Provider	Purpose	Where
Dinahosting, S.L.	Hosting of the website, the demo and email	Spain
Google LLC	Google Analytics, only with your consent	United States

Transfers to the United States are made with the safeguards of the GDPR: the provider’s participation in the EU-U.S. Data Privacy Framework or the European Commission’s standard contractual clauses.

Your rights

You can ask to access, rectify or erase your data, object to or restrict its processing, port it to another service, and withdraw your consent at any time. Write to hola@kerix.cat stating what you are asking for. We will reply within one month at the latest.

If you believe we have not handled your data properly, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).

Security

We apply technical and organisational measures to protect the data: encrypted connections, restricted access and logs without personal data.

Minors

Kèrix is aimed at companies, not at children under 14. We do not knowingly collect their data.

Changes

If we change this policy, we will say so on this page with the date of the last update.

Last updated: 19 October 2026.