Privacy Policy

1. Identity of the Data Controller

In strict accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Spanish Organic Law 3/2018 on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD), we hereby inform all users that the data controller responsible for the processing of personal information collected through this website is TeneDigital LLC, located in Santa Cruz de Tenerife, Canary Islands, Spain. For all data privacy inquiries, our designated Data Protection Officer can be reached at [email protected].

2. Categories of Data Processed

To provide our elite digital architecture and AI visibility services, we collect specific categories of personal and corporate data:

• Identifying Data: Full name, corporate title, company name, and official business registration numbers.
• Contact Data: Professional email addresses, corporate phone numbers, and WhatsApp routing details.
• Technical Data: IP addresses, browser types, operating systems, and session timestamps gathered during website navigation.
• Commercial Data: Billing addresses, transaction history, and active subscription matrix tiers.

3. Purpose and Legal Basis for Processing

We process personal data based on explicit commercial consent and the necessity of contractual execution. The primary purposes include:

• Deploying custom frontend web architecture and GoHighLevel CRM pipelines.
• Executing Large Language Model Optimization (LLMO) structures and semantic entity mapping.
• Managing automated calendar synchronization and multi-channel inbox coordination.
• Processing monthly infrastructure subscription payments.

4. Third-Party Data Processors and Sub-Processors

To maintain high-performance operations, TeneDigital shares securely encrypted data with verified third-party infrastructure partners. These partners act as sub-processors and are strictly bound by GDPR compliance agreements:

• GoHighLevel: Utilized for centralized CRM database hosting, automated workflow routing, and calendar management.
• Stripe: Utilized exclusively for processing encrypted recurring subscription transactions.
• OpenAI & Google (Gemini): Utilized via API for natural language conversational booking assistants. Private client financial metrics and internal communications are strictly excluded from being fed into public AI training sets without explicit, separate written authorization.
• Netlify & GitHub: Utilized for edge server staging and immutable source code repositories.

5. Data Retention Periods

Data is retained only for the duration of the active business relationship. If a client terminates their monthly infrastructure retainer, active marketing and CRM data is securely permanently deleted within 45 days. However, administrative, tax, and invoicing data will be kept blocked for a period of up to 5 years to comply with Spanish fiscal and legal obligations.

6. User Rights (ARCO Rights)

Under the GDPR, individuals possess absolute control over their personal information. Users maintain the right to:

• Access: Request a complete copy of all personal data currently held by TeneDigital.
• Rectification: Request immediate correction of inaccurate or incomplete data.
• Cancellation (Erasure): Request the permanent deletion of personal data when it is no longer necessary for the purposes it was collected.
• Opposition: Object to specific types of processing, particularly automated profiling or direct marketing.
• Portability: Request the transfer of data to another verified controller in a structured, commonly used, and machine-readable format.

To exercise any of these rights, users must submit a formal written request via our designated contact channels, accompanied by verifiable proof of identity.