YAJU AS Privacy Policy

This Privacy Policy explains how CAP Consultor LLC collects, uses, shares and protects personal data when you use the YAJU AS Platform or visit our websites. It also explains your rights and how you can exercise them.

We have tried to write this policy in clear and simple language. If anything is not clear, or if you have any question about your personal data, please write to us at contact@capconsultor.eu.

1. Who is responsible

CAP Consultor LLC, a Wyoming (USA) limited liability company, is responsible for your personal data. Contact: contact@capconsultor.eu · +34 669 802 256.

This policy covers yajuas.com, capconsultor.eu and the YAJU AS Platform.

2. Our role

Depending on the data, CAP can act in two different roles:

• Controller: for your account, billing, contact, marketing and website data. In this case, CAP decides why and how the data is processed, and this policy applies directly.
• Processor: for personal data that a Business Customer puts into its agents, tools or conversations. The Customer is the controller of that data, and we process it on its instructions. If you are a person whose data is processed by one of our Business Customers, please contact that customer to exercise your rights. We will help them as needed.

3. Where your data comes from

We obtain personal data from these sources:

• From you: when you create an account, fill in a form, contact us, pay for a Plan or use the Platform.
• From Google or GitHub: if you choose to sign in with them, we receive basic profile information such as your name and email address.
• From the Customer that invites you: if you are invited to a workspace, the Owner gives us your email address.
• Automatically: when you use the Platform or the websites, we collect technical data such as your IP address, browser and access events, and, with your consent, analytics data.

4. What we collect, why, legal basis and how long

Some data is necessary to provide the Platform, such as your email address and payment details. If you do not provide it, we cannot create your account or provide the service. Other data, such as analytics or marketing consent, is optional.

When we rely on our legitimate interest, it is to keep the Platform and our users secure, prevent abuse and fix errors. We consider that these interests are not overridden by your rights, as the data used is limited and necessary for those purposes. You can object to this processing at any time (see Section 11).

5. Agent data

Traffic between your agents and your AI providers passes through our servers. Conversations, logs and operational data are stored encrypted in our database hosted by Neon in Frankfurt, Germany.

Inside CAP, only our founder and CEO can access this data, and only to operate the Platform and its AI features, give support, investigate security incidents or abuse, and comply with the law. Some features, such as the Agent Analyzer and Reviewer, process agent data with AI models used by CAP. We do not use your data to train AI models.

Agent data may contain personal data if your agents process it. In that case, if you are a Business Customer, you are the controller of that personal data and CAP acts as your processor, as described in our Terms of Service.

6. Automated decisions

We do not make decisions about you based solely on automated processing that produce legal effects or similarly significant effects on you. The results of our AI features, such as the Agent Analyzer and Reviewer, are suggestions about your agents, and you decide whether to apply them.

7. Who we share data with

We do not sell personal data. We share it only with:

Our service providers only process personal data on our behalf and according to our instructions, except the AI providers and tools you connect, which act under their own terms and policies.

We may also share data with authorities when the law requires it, and with a buyer if the company is sold or merged. In that case, the buyer will have to respect this policy or inform you of any change.

8. International transfers

CAP is a US company and some of our providers process data in the USA. For these transfers we rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses. These mechanisms are designed to give your data a level of protection similar to the one it has in the European Union.

9. Security

We apply technical and organizational measures suited to the risk, such as encryption of stored data and restricted access. More information is available on our Security page.

No system is completely secure. If a breach affects your personal data, we will inform you by email and in the Platform without undue delay, and notify the data protection authority within 72 hours when the law requires it.

10. Minors

The Platform is only for people aged 18 or over. We ask for your age before payment. We do not knowingly collect data from children under 14. If we find that we have, we delete it. Parents or guardians can contact us about it.

11. Your rights

You have the following rights over your personal data:

• Access: know whether we process your data and get a copy of it.
• Rectification: correct data that is inaccurate or incomplete.
• Erasure: ask us to delete your data when it is no longer needed or when there is no legal reason to keep it.
• Restriction: ask us to limit the use of your data in certain cases.
• Portability: receive the data you gave us in a structured and commonly used format, or ask us to send it to another company.
• Objection: object to the use of your data based on our legitimate interest, and to its use for marketing at any time.
• Withdraw consent: withdraw your consent at any time, without affecting the processing done before.

To exercise them, write to contact@capconsultor.eu. We may ask you for information to confirm your identity. We reply within one month.

You can also complain to the data protection authority of your country (in Spain, the AEPD).

12. Marketing emails

We only send you marketing emails if you tick the consent box. You can unsubscribe at any time using the link in each email or by writing to us. Service emails, such as security notices, billing messages or changes to our terms, are not marketing and are sent as part of the service.

13. Changes

We may update this policy, for example when we add new features or providers, or when the law changes. The date at the top shows the latest version. If a change is important, we will tell you by email or in the Platform.

14. Contact

For any question about this policy or about your personal data, write to contact@capconsultor.eu.