Privacy policy
What we collect, why we use it and how you can exercise your rights.
Data controller
Gptzone Coop.V. · NIF F21659008 c/ Algeps 1, Puerta 62, 03110, Mutxamel, Alicante, Spain. [email protected] Gptzone Coop.V. is the controller of personal data collected by AiBoosting. Contact us at the email or postal address above for privacy matters.
Information we collect
You provide your name, work email, company or product website, preferred channel, indicative budget and message. We also store the language, request reference, date, privacy information version and notification status. Fields marked with an asterisk are needed to process the form; you can contact us by email instead. Do not submit special-category data or unnecessary personal information about others. Infrastructure may process IP addresses and technical logs to operate and secure the service.
Purposes and legal bases
Handling your inquiry and preparing a proposal: pre-contractual steps at your request (GDPR Article 6(1)(b)). If you represent a company, professional contact is based on our legitimate interest in answering its request and maintaining a business relationship (Article 6(1)(f)). Security and abuse prevention rely on our legitimate interest in protecting the site and its data. Compliance with legal obligations relies on Article 6(1)(c). Submitting the form does not subscribe you to newsletters or authorize unrelated advertising.
Retention
We retain inquiries while handling them and during follow-up necessary to resolve the request or prepare an engagement. Once no longer needed, data must be deleted or, where outstanding legal duties or liabilities require it, restricted solely for the applicable retention periods. Contractual and accounting records for purchased services are retained for the relevant statutory periods. You may request deletion or an end to follow-up at any time; we will explain if any data must be retained by law.
Recipients and service providers
Authorised Gptzone Coop.V. personnel access inquiries. Hosting and email are managed with Raiola Networks; Cloudflare provides DNS, traffic delivery and security. Hosting, email and payment providers may process necessary data under their agreements and safeguards. We do not sell your data or automatically forward inquiries to creators or newsletters. Necessary campaign recipients are identified during contracting. Authorities may receive information when legally required.
International transfers
Provider processing may involve transfers outside the European Economic Area. Before a provider is enabled in production, its location and, where necessary, applicable adequacy decisions or standard contractual clauses and supplementary measures must be documented. Request information and a copy of safeguards at [email protected].
Your rights
Request access, rectification, erasure, restriction, objection and, where applicable, portability by emailing [email protected] or writing to our postal address. Describe your request and provide enough information to locate your data; additional identification will only be requested where necessary. You may object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. We normally respond within one month and will notify you within that period of any legally permitted extension. You may complain to the Spanish Data Protection Agency (www.aepd.es) or your competent supervisory authority.
Automated decisions and changes
We do not use the form for solely automated decisions producing legal effects or for advertising profiles. If purposes or tools change, we will update this policy and provide any required information or obtain consent before the new processing begins.
Platform accounts and campaigns
We process verified email, account name, encrypted authentication information, optional two-factor settings, company billing data, collaborator profiles, private evidence, campaign briefs, messages, deliverables, metrics, invoice and payment records, acceptance versions and audit history. Purposes are account management, pre-contractual steps, contract performance, payment and billing, security and legal obligations. Legal bases include contract performance (GDPR Article 6(1)(b)), legal obligations (6(1)(c)) and legitimate interests in security and fraud prevention (6(1)(f)). We do not use these account details for unsolicited marketing or automated eligibility decisions.
Access, recipients and retention
Your data are available to authorised staff and relevant campaign participants according to their role. A brand sees assigned professional profiles after payment; private contact and billing details are not disclosed. Public cards exclude identities. Raiola Networks provides hosting and email infrastructure. Cloudflare provides DNS, traffic delivery and security services. These providers process the data needed to provide their services under the applicable provider agreements. Stripe processes checkout and payment information; we store transaction references, not card numbers. Before production, actual infrastructure locations and any international-transfer safeguards must be documented. Account and campaign data remain while needed for the relationship; tax records are retained for applicable statutory periods (generally at least four years for tax duties and six years for commercial records), with restricted retention where required for claims. Backup copies follow documented retention and deletion cycles.
Account rights
Request access, rectification, deletion, restriction, objection or portability at [email protected]. Account settings also allow a deletion request. We may request proportionate identification and retain information required by law. Requests are normally answered within one month, subject to lawful extensions. You may complain to the Spanish Data Protection Agency: https://www.aepd.es. Platform privacy version: 2026-10-14-platform-v1.
Reference links
Spanish Data Protection Agency
Stripe — privacy
Raiola Networks — privacy
Cloudflare — privacy