Hub Logo
Hub
Create my app

Privacy Policy

Last updated: 7/30/2026

1. Data Controller

The controller responsible for processing your data is CANARY OPTIONS, S.L., with Tax ID (NIF) B44890051 and registered address at C/ Doctor Manuel Lezcano, 15, 35017 Las Palmas de Gran Canaria, Las Palmas, Spain. You can contact us at team@iabot.io for any privacy-related question.

2. What Data We Collect

To provide our service, we collect:

  • Registration and identification data: Username, email address and passwords (encrypted by Supabase).
  • Payment data: Processed and stored entirely by our payment provider (Stripe). We do not store credit card numbers on our servers.
  • Usage and configuration data: Configurations of the generated applications, conversational flows, activated integrations (WhatsApp, Telegram) and credit usage.
  • Content and AI inputs: The prompts, texts and audio (STT) that you provide to interact with the integrated AI models.

3. Purpose of Processing

We use your data exclusively to:

  • Create and manage your user account.
  • Process AI generation requests and return the requested application or flow to you.
  • Manage billing, payments and balance (wallet) top-ups.
  • Provide technical support and resolve issues with your deployed apps.
  • Improve our technical services by analyzing the platform's overall behavior (in aggregated and anonymous form).

4. Legal Bases

We process your data under the following legal bases (GDPR):
a) Performance of a contract: We need your data to provide you with the SaaS service you have contracted.
b) Consent: For the use of non-essential cookies and sending newsletters (if you have subscribed).
c) Legal compliance: To comply with tax and accounting regulations in force in Spain.

5. External Providers (Third Parties)

When using our platform, your prompts and related data may be processed through APIs from language model and infrastructure providers. These include, among others:

  • AI providers: OpenAI, Anthropic, DeepSeek, Qwen (Alibaba), Groq, among others, which process the information entered to generate responses. Their policies explicitly prohibit using API data to train their commercial base models by default, ensuring your privacy.
  • Infrastructure: Supabase (Database and Authentication), Vercel/Netlify (Hosting).
  • Payments: Stripe.

6. Data Retention

Your data will be retained while your account is active. If you decide to delete your account, we will erase your personal data within a maximum of 30 days, retaining only the data necessary (blocked) to comply with legal and tax obligations for the period required by law (e.g. invoices for 5 years).

7. Your Rights

Under the GDPR, you have the right to:

  • Access your personal data.
  • Rectify inaccurate or incomplete data.
  • Request the erasure of your data.
  • Object to the processing or request its restriction.
  • Request the portability of your data in a structured format.

To exercise these rights, send us an email at team@iabot.io attaching a copy of your ID card or passport to verify your identity. If you believe your rights have not been properly addressed, you can file a complaint with the Spanish Data Protection Agency (AEPD).

8. Security

We implement technical and organizational security measures (encryption, SSL/TLS, strict access control) to protect your personal information against unauthorized access, loss, alteration or destruction.

9. Changes to the Policy

We reserve the right to modify this policy to adapt it to legislative or jurisprudential developments. Any change will be notified through the platform or by email prior to its entry into force.