Privacy & cookies.
Last updated: May 2026
We collect the minimum data we need to run this site and respond to people who write to us. We don't sell, rent, or share that data. This page explains exactly what we do.
Who we are
airautomations is a small AI automation consultancy operating from Spain. The data controller for this site is airautomations (operating as airautomations.com). You can reach us at privacy@airautomations.com or via /contact for any data-related question.
What we collect
Two things, and only when you choose to give them. (1) When you submit the contact form: your name, email, company name (optional), and the message you write. We use these to reply to you and nothing else. (2) When you accept analytics cookies: anonymized device and behavior data via Google Analytics 4 (page views, clicks, scroll depth, source), with IP anonymization on. If you decline cookies, none of this is sent.
Cookies & similar technologies
By default we set zero analytics cookies. The cookie banner asks once: accept, and Google Analytics is loaded with anonymized tracking; decline, and nothing additional runs. Essential cookies (session, security, locale preference) are exempt from consent under GDPR Art. 7 and the ePrivacy Directive. Your choice is stored in localStorage as 'airautomations_cookie_consent' and you can clear it any time via your browser's site data settings.
Third parties we share data with
Strictly limited to processors needed to run the site: Vercel (hosting, Speed Insights — anonymized), Google Analytics (only if you accepted, with IP anonymization), Cloudinary (image hosting, no PII), Resend (delivers your contact-form message to our inbox), Railway (database hosting in EU region). Each processor has a Data Processing Agreement with the relevant requirements; none receives data we don't explicitly send for the purpose described above.
How long we keep it
Contact form messages are kept in our inbox for as long as the conversation is active, plus up to 24 months for follow-up. Analytics events are retained according to GA4's default (14 months) and then deleted. You can request earlier deletion at any time.
Your rights under GDPR
Access, rectification, deletion, restriction, portability, and the right to object — all standard. Email privacy@airautomations.com and we will respond within 30 days. You also have the right to lodge a complaint with the AEPD (Spanish data protection authority) if you believe we're not handling your data correctly.
Changes
If we change this policy, we update the date at the top and post a note in the next monthly newsletter. The version history lives in our public git repository for full transparency.