Privacy for
this website.

Information we store.

When you submit a request, the website records the information needed to handle it and retain evidence of the consent associated with the submission.

Contact information

Name, institution and email address.

Request content

Product or topic of interest and the scope summary you review before sending.

Submission context

Language, source page and submission date.

Consent

A record of consent to use the information to handle the request, together with its date.

Use the form for professional contact information and general institutional needs. Do not include identity documents, biometric data, passwords, personal financial information or sensitive member or customer information.

The conversation with Leo.

The interface identifies whether you are using an AI agent or a guided experience. The guided experience collects your choices on this page without sending the conversation to an AI provider.

When the AI conversation is available and you send a message, its text, the previous messages in that conversation and the working scope are processed by OpenAI to prepare a response and update the brief. Do not include member records, account details, identity documents, passwords or sensitive information. Your personal name and email are requested separately at the final review, and those form fields are not sent to the model.

The conversation history remains in the memory of this page. Closing the dialogue preserves it while the page stays open; reloading, navigating away or starting a new conversation clears it. The application does not store the transcript in the commercial database. Sending a request stores only your confirmed summary and contact information.

The AI integration is configured without persistent response storage. This does not mean the provider has no technical or abuse-prevention retention; the OpenAI data controls apply. Application operational logs record status, duration and token counts, without message text, the brief or contact details.

You can choose to contact the team without using the AI conversation. The scope is a draft: a quotation request is sent only after you review it, provide your contact details and confirm the contact authorization.

How it is used and who can access it.

The information is used to respond to your request, understand your institution’s interest and arrange a demonstration or commercial conversation.

Requests are stored in a private commercial inbox. Access to that inbox is restricted to Miguel Roldán through authenticated owner access. Submitting the form does not generate automatic emails or transfer the request to a CRM.

Submitting a request does not subscribe you to marketing campaigns. The consent collected by the form relates to handling that request.

Where it is processed.

The website uses Vercel to serve the web pages and receive requests. Leo processing, commercial requests and the private team area use ChatGPT Sites hosting on Cloudflare infrastructure. Requests pass through the providers involved in each action. Commercial requests are stored in Cloudflare D1, which provides the website’s database service.

This notice describes the application’s data and controls. The hosting provider’s technical conditions apply to the services used to operate the website.

Retention for this contact form.

The service has the following retention criteria configured for requests submitted through this form:

Closed requests

Included in service cleanup after 90 days from the record’s last update, or when the general limit is reached if that happens sooner.

General limit

365 days from submission, for both open and closed requests.

Automatic deletion takes place during the next service cleanup, which runs when the form or management inbox is used. Records that reach the configured limits are removed when that cleanup runs.

You can request deletion of your submission without waiting for these limits. These conditions apply to this website’s commercial contact form.

Aggregate metrics and abuse protection.

How usage is measured.

The website records totals by day, page and event type to understand which content is viewed and how the commercial journey is used. These metrics do not contain names, email addresses, messages or other personal information from the form.

This measurement does not use individual identifiers or advertising cookies. The records are aggregate counts and do not build an individual browsing history.

How the form is protected.

Abuse protection uses temporary irreversible keys with a configured lifetime of up to 48 hours. This mechanism does not store the original IP address. Expired keys are removed when service cleanup runs.

What happens in the demonstrations.

The OneID, OneGraph and OneTeam demos use fictional data and illustrative states in your browser. They do not capture real biometric data, retrieve personal financial information or execute banking transactions.

Browsing or interacting with a demo may increment the aggregate metrics described in this notice. Contact requests are handled separately through the commercial form.

Access, correction or deletion.

You can write to ask about the information in your request, correct it or request deletion. Include the email address you used in the form and explain what you need; avoid attaching documents or sensitive information.

Correction and deletion requests are handled manually through this contact.

Data in a product implementation.

Member or customer data handled by an institution using OneID, OneGraph or OneTeam is managed separately from this website’s contact form. Each implementation’s contractual scope defines how that data is handled, including sources, permissions, hosting, responsibilities, retention and applicable controls.

The trust and control page explains how these conditions are addressed during project definition.