Skip to main content

Privacy policy

Last updated: 4 September 2026. This policy explains how we handle personal data. It is a working version pending final legal review.

Who we are

The controller of your personal data is ReachWRX, a trade name of [NAAM] S.L., CIF [B-XXXXXXXX], [ADDRESS], Spain. For any question about this policy, e-mail privacy@reachwrx.com.

What data we process and why

  • Website visitors and demo requests – name, company, e-mail, phone, industry and the message you send us. We use this to contact you about your request and to prepare a proposal. Legal basis: your request (pre-contractual measures) and our legitimate interest in following up on it.
  • Voice calls with our AI agent – audio, transcript and a summary of the conversation. We use this to answer your call, follow up and improve the service. Callers are informed at the start of the call that they are speaking to an AI and that the call is recorded. Legal basis: consent and legitimate interest.
  • Clients – contact details, company data, billing data, configuration of the AI agent and the call data of your own callers. Legal basis: performance of our agreement and legal obligations (accounting, tax).
  • Marketing e-mails – only if you opted in. You can unsubscribe from every message.

When we act as processor

For the calls that our AI agent handles on behalf of a client, that client is the controller and we act as processor. We sign a data processing agreement (DPA) with every client and we only process the call data on their instructions.

Who we share data with

We use carefully selected service providers: our hosting provider, ElevenLabs (voice AI), Brevo (e-mail and CRM), Oneflow (contracts), Stripe (payments), Google (calendar and analytics) and our accounting software. They process data on our behalf under a processing agreement. We do not sell personal data. Where a provider processes data outside the EU, we rely on the European Commission’s standard contractual clauses.

How long we keep data

Demo requests and quotes: 24 months after the last contact. Call recordings: by default 90 days, or the period agreed with the client. Client and invoicing records: as long as required by Spanish law (generally 6 years). Marketing consent: until you withdraw it.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to object to processing. Send a request to privacy@reachwrx.com; we respond within one month. You can also lodge a complaint with the Spanish supervisory authority (AEPD, aepd.es) or the authority in your own country.

Security

Data is processed and stored within the European Union. We use encryption in transit and at rest, access control on a need-to-know basis and logging of administrative actions.

Changes

We may update this policy. The version on this page, with its date, is the one that applies.