Privacy Policy

Last updated: December 19, 2025

At Grovium, we take data protection very seriously. In compliance with Regulation (EU) 2016/679 (GDPR) and Organic Law 3/2018 (LOPDGDD), we inform about the processing of personal data.

1

Data Controller

Identity: Grovium IA SL

Tax ID: B26633552

Address: C/Yecora 26 3 28022 Madrid

Email: info@grovium.ai

2

Legal Basis for Processing

We process data under the following legal bases:

Contract execution: For the provision of AI agent creation and sales services.

Data subject consent: For inquiries received through web forms or newsletter subscriptions.

Legitimate interest: For maintaining business relationships and website security.

3

Types of Data and Purpose

Client management: Identifying data for billing, AI agent delivery, and technical support.

Training and Configuration: Data (preferably anonymized) provided by the client for training AI models under their strict instruction.

Contact: Name and email to respond to information requests.

4

Data Processors and International Transfers

Given the nature of AI, we use service providers (Data Processors) who may be outside the European Economic Area (e.g., OpenAI, AWS, Google Cloud).

Guarantees

We only work with providers that are part of the Data Privacy Framework or that offer Standard Contractual Clauses (SCC) approved by the European Commission, guaranteeing a level of protection equivalent to European standards.

No retraining

We configure our deployments so that client data is not used to improve third-party public models (Enterprise/API Opt-out option).

5

Retention Period

Data will be retained:

For the duration of the business relationship.

During legal prescription periods (generally 5 years for tax and commercial obligations in Spain).

Until the data subject requests deletion.

6

Data Subject Rights

As a user, you can exercise your rights to:

Access, Rectification, and Deletion.

Processing limitation and Portability.

Object to the processing of your data.

Right not to be subject to automated individual decisions: Including profiling that produces legal effects.

To exercise them, send an email to [Contact email] attaching a copy of your ID or equivalent document. You also have the right to file a complaint with the Spanish Data Protection Agency (AEPD) at www.aepd.es.

7

Data Security

We apply the security measures required by the national security scheme and industry standards to prevent loss, misuse, or unauthorized access to technical and personal information of the developed AI agents.

Last updated: December 19, 2025