Privacy Policy

1. Introduction

Intemic ("we", "our", "us") is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect information when you use the Intemic platform at app.intemic.com.

This policy applies to all users of the platform, regardless of location. We comply with the EU General Data Protection Regulation (GDPR) and other applicable data protection laws.

The data controller is:

Intelligent Chemistry, S.L. — CIF B72532692 C/ Josep Valls, 5, Sant Cugat del Vallès, Spain [email protected]

2. Data we collect

Account data. Name, email address, company name and role, provided when you register or when a workspace administrator invites you.

Usage data. Pages visited, features used, session duration and interaction patterns. This is collected only if you consent to analytics cookies — see the Cookie Policy.

Platform data. Content you create inside the platform: entities, documents, workflows, agents, reports and their execution history. This data belongs to your organisation.

Technical data. IP address, browser type and device information, processed for security, abuse prevention and service availability.

Third-party credentials. When you connect an external system, its credentials are stored encrypted and are decrypted only at the moment a workflow needs them.

3. How we use your data

• Provide, maintain and improve the Intemic platform
• Authenticate users and enforce access control and workspace isolation
• Send transactional email (account verification, invitations, password resets, workflow notifications)
• Analyse usage patterns to improve the product, where you have consented
• Detect, investigate and prevent security incidents and abuse
• Comply with legal obligations and respond to lawful requests

We do not sell your personal data to third parties. We do not use your platform data to train AI models.

4. Legal bases for processing

5. AI processing

Content you send to agents, the copilot or AI-assisted features is transmitted to language model providers for the sole purpose of producing the output you requested. Those providers act as processors on our behalf.

[To confirm before publication: the definitive list of model providers, and confirmation that each contract prohibits training on customer content.]

6. Data storage and security

Your data is stored in encrypted databases, with AES-256-GCM encryption applied to sensitive fields such as third-party credentials. All data in transit is protected with TLS. Access to production systems is restricted and audited.

Session tokens are issued as HTTP-only cookies that JavaScript cannot read, and all browser traffic to our API passes through a server-side proxy so access tokens are never exposed to the browser.

7. Sub-processors

We rely on the following categories of sub-processor to operate the platform:

[To confirm before publication: the complete and current sub-processor list, including the named model providers and email delivery provider, with their processing locations.]

8. International transfers

Where a sub-processor processes personal data outside the European Economic Area, the transfer is covered by an adequacy decision or by Standard Contractual Clauses.

[To confirm before publication: hosting region and the transfer mechanism in force for each sub-processor.]

9. Your rights

Under the GDPR you have the right to:

• Access — request a copy of your personal data
• Rectification — correct inaccurate personal data
• Erasure — request deletion of your personal data
• Restriction — request that we limit how we process your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests
• Withdraw consent — at any time, without affecting processing carried out beforehand

To exercise any of these rights, contact us at [email protected]. You also have the right to lodge a complaint with your national supervisory authority; in Spain this is the Agencia Española de Protección de Datos.

10. Data retention

We retain account data for the duration of your subscription plus 30 days. Usage analytics are anonymised after 12 months. Platform data is retained until you or your organisation deletes it, or until the account is closed. You can request immediate deletion at any time.

11. Changes to this policy

We may update this policy. When a change is material we will notify you in the platform or by email before it takes effect. The date at the top of this page always reflects the current version.

12. Contact

For privacy-related questions, write to [email protected].

Intelligent Chemistry, S.L. — CIF B72532692 C/ Josep Valls, 5, Sant Cugat del Vallès, Spain [email protected]