Legal notice, privacy and cookies

Short version: we only hold the data you choose to send us, we use it to reply and to run the work you asked for, we do not sell it, and you can ask us to delete it at any time.

Data controller

The controller of your personal data is Antonio Gomez Garcia (Sourcelift), NIF 48727208Y, reachable at info@sourcelift.ai for any privacy question or request.

What we collect and why

We only process what you give us directly:

• Contact and diagnosis requests. When you write to us or use the diagnosis form, we process the name, email address and message you provide, plus the domain or brand you ask us to look at. Purpose: to answer you and prepare the free diagnosis. Legal basis: your consent and the steps taken at your request before any contract.
• Client and prospect correspondence. Emails and documents exchanged while scoping or delivering work. Purpose: to run the engagement. Legal basis: performance of a contract, and our legitimate interest in keeping business records.
• Security and delivery data. Standard server and email logs generated automatically. Purpose: to keep the site and mailbox working and secure. Legal basis: our legitimate interest.

We do not run advertising pixels, we do not build behavioural profiles, and we do not make automated decisions with legal effects about you.

Who processes it with us

We share data only with the providers that make the site and our email work, each bound by a data processing agreement and acting on our instructions:

• Vercel Inc. for hosting and content delivery.
• Spacemail, by Spaceship, for our business email.
• A form delivery service (such as Formspree), only if you submit the diagnosis form, and only to route your message to us.

Some of these providers may process data outside the European Economic Area. Where that happens, the transfer relies on an adequacy decision or on the European Commission's Standard Contractual Clauses. We do not transfer your data to anyone else, and we never sell it.

How long we keep it

We keep contact and diagnosis data only as long as needed to answer you and, if we start working together, for the life of the engagement. After that we keep what the law requires us to keep, for example for tax and accounting, and delete the rest. You can ask us to delete your data sooner at any time.

Your rights

Under the GDPR you can ask us, at any time and free of charge, to give you access to your data, to rectify it, to erase it, to restrict or object to its processing, and to receive it in a portable format. You can also withdraw a consent you gave, without affecting what we did before you withdrew it. Write to info@sourcelift.ai and we will reply within the legal deadline. If you believe we have mishandled your data, you can complain to the Spanish Data Protection Agency (AEPD, aepd.es).