Privacy policy

Last updated: 9 July 2026

This policy explains how ECOPRIME MEDITERRANEO SL processes the personal data of people who use AI-Team (the "Service", at aiteam.marketing), in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

1. Data controller

Company: ECOPRIME MEDITERRANEO SL
Tax ID (NIF): B21991559
Address: Málaga (Marbella / Coín), Spain
Privacy contact: hola@aiteam.marketing

2. What data we collect

Account data: username, email, name, sector and city of your business.
Business briefing: brand tone, services, audience and prices, so the system can reply on your behalf.
Conversations: messages you and your customers exchange through the connected channels (WhatsApp, Instagram, chat, email).
Authorised connections (OAuth): Meta (WhatsApp Business / Instagram) and Google (Gmail, Calendar, Business Profile) tokens that you enable.
Contacts you provide: data about your patients/customers that you add for the email or booking features.
Technical and usage data: access logs, which features you use and when, to run and improve the Service.

3. What we use it for

Providing the Service: replying to messages, booking appointments, publishing content and managing reviews that you authorise.
Managing your account, support and, where applicable, billing.
Ensuring security, preventing fraud and complying with legal obligations.
Improving the product through aggregated statistics.

We do not use your data or your customers' data to train third-party AI models.

4. Legal basis (GDPR art. 6)

Performance of a contract: providing the Service you sign up for.
Consent: OAuth connections (Meta, Google) and marketing communications; you can withdraw it at any time.
Legitimate interest: security, abuse prevention and improving the Service.
Legal obligation: keeping billing records and answering authorities.

5. Who we share it with

We only share data with providers acting as data processors, under a data processing agreement (DPA) and only to provide the Service:

Meta Platforms, Inc. (WhatsApp and Instagram): if you connect your accounts, we process messages, comments and posts to manage them on your behalf through the Meta Cloud API / Messenger Platform / Instagram API.
Google LLC (Gmail, Google Calendar, Business Profile): if you authorise it via OAuth, we access the minimum needed to read/draft email, create appointments or manage reviews.
Resend: transactional emails and campaigns. Servers in the EU.
Anthropic and OpenAI: generating replies, images and voice, under contracts that forbid training on customer data.
ElevenLabs: voice synthesis for phone calls. It generates the voice the assistant speaks with. United States.
Vercel (hosting) and Supabase (database): the Service's infrastructure.

We do not sell or hand over your data to third parties for commercial purposes. Some providers (Meta, Google, OpenAI, ElevenLabs) may process data outside the EEA under appropriate safeguards (standard contractual clauses).

6. How long we keep it

Active account: for as long as you use the Service.
After you leave: up to 30 days of retention, then deletion. You can request immediate deletion (see Data deletion).
OAuth tokens (Meta/Google): until you revoke them from your account or ask us to; they are then removed from our servers.
Billing: 5 years, as required by Spanish tax law.

7. Your rights

You can exercise at any time your rights of:

Access to your data.
Rectification of inaccurate data.
Erasure ("right to be forgotten").
Portability and restriction of processing.
Objection to processing and to automated decisions.
Withdrawing the consent you gave.

Write to us at hola@aiteam.marketing and we will reply within 30 days at most. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es).

8. Security

We encrypt data in transit (HTTPS/TLS) and OAuth tokens at rest. We apply access control and technical and organisational measures in line with the GDPR.

9. Cookies

We only use strictly necessary technical cookies (session and authentication). We do not use third-party advertising tracking cookies.

10. Changes

If we change this policy, we will publish the new version on this page and, if the change is substantial, we will let you know.

Want us to delete your data?

Follow the instructions in Data deletion or write to hola@aiteam.marketing.

This policy is governed by Spanish and European law (GDPR and LOPDGDD). The Spanish version prevails in case of discrepancy.