How IngeBridge S.L. processes personal data on the IngePermit platform, in accordance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).
IngeBridge S.L. [CIF and registered address to be completed] is the controller responsible for the personal data processed through the Platform. For any privacy-related request, contact: [privacy contact email to be completed].
Account data (name, company name, email address, role); dossier content (equipment specifications, uploaded documents, review notes, comments); basic technical/usage data needed to operate the Platform securely (login timestamps, session data); and, if you use the general-assistant chatbot, the questions you type into it.
We process this data to: (a) create and manage user accounts and provide the Platform's functionality — legal basis: performance of a contract (Art. 6.1.b GDPR); (b) review and exchange comments on submitted dossiers as part of the service — performance of a contract; (c) maintain the security and proper functioning of the Platform — legitimate interest (Art. 6.1.f GDPR); (d) comply with legal obligations where applicable — Art. 6.1.c GDPR.
The Platform uses two separate, independent AI-related systems.
Dossier review system. Dossier documents you submit may be analyzed by IngePermit's AI-assisted review system. This system is proprietary: it was built in-house by the IngeBridge team, specialized specifically for regulatory permitting and dossier-compliance analysis, and it runs on our own private, local servers. We do not send your dossier documents to third-party AI providers for this analysis, and information processed by this system does not leave our infrastructure. All dossier information you submit to, or exchange with, the Platform through this system is treated as confidential.
General-assistant chatbot. The Platform also offers a general-purpose chatbot for questions about applicable regulations and how the Platform works. This chatbot is powered by a third-party AI service provider (currently Groq). The questions you type into the chatbot are sent to this provider to generate a response. The chatbot does not have access to, and is never given, your dossier documents, account data, or any other client or admin information. Please do not enter confidential, personal, or dossier-related information into the chatbot.
Data is hosted and processed by our infrastructure providers (including Vercel Inc. for application hosting and our database provider) acting as processors under data processing agreements, for the purposes described above. Our dossier-review AI system runs separately, on our own private infrastructure, as described in Section 4. The general-assistant chatbot described in Section 4 is powered by Groq, Inc., which acts as a processor for the messages you submit to that chatbot only — it does not receive dossier, account, or other client data. We do not sell personal data to third parties.
Some of our application-hosting infrastructure providers, and the chatbot provider described in Section 4 and 5, may process data outside the European Economic Area. Where this occurs, we rely on appropriate safeguards recognized under GDPR, such as the European Commission's Standard Contractual Clauses. Our dossier-review AI system (Section 4) runs on our own private servers and is not subject to this transfer.
We retain account and dossier data for as long as the account is active, and afterwards only for as long as necessary to comply with legal, accounting, or dispute-resolution obligations, after which it is deleted or anonymized. Chatbot conversations are not linked to your dossier or account records.
You may request access, rectification, erasure, restriction, or portability of your data, and object to certain processing, by contacting [privacy contact email to be completed]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) or your local supervisory authority.
We apply technical and organizational measures (encrypted connections, access controls, password hashing, private file storage) appropriate to the risk to protect the data you share with us. Our dossier-review AI system runs on access-controlled, private servers separate from public infrastructure, as described in Section 4.
We may update this Privacy Policy from time to time. Material changes will be notified through the Platform.