AIgency Labs / Privacy

Privacy policy

Last updated 26 August 2026

1. Who we are

AIgency Labs S.L. operates this website at theaigencylab.com. We build custom software, design AI automations, and train teams to use them. We are the data controller for the personal data described here.

You can reach us about anything on this page at contact@theaigencylab.com.

2. What we collect

We keep this deliberately small. There is no advertising on this site, no tracking pixels, and no analytics.

Information you send us

When you submit the contact form, we receive your name, email address, company (optional), the discipline you selected, and the message you wrote. If you contact us by email or WhatsApp instead, we receive whatever that conversation contains, including your phone number in the case of WhatsApp.

Technical information

Like any website, ours is served by a host that records requests. Our host logs your IP address, the pages requested, timestamps, and general information about your browser and device. We do not use these logs to build a profile of you.

Your theme preference

If you switch the site between light and dark mode, we store that single choice in your browser's local storage so the site remembers it on your next visit. It never leaves your device and it identifies nothing about you.

3. Why, and on what basis

Under the GDPR we must tell you why we process your data and what our legal basis is.

WhatWhyLegal basis
Contact form and email content To read your enquiry, reply to it, and discuss working together Steps taken at your request before entering a contract, and our legitimate interest in responding to people who contact us
Server logs To keep the site available, secure, and free of abuse Our legitimate interest in operating a secure website
Theme preference To show the site the way you chose Strictly necessary for a feature you asked for

We do not sell your personal data, and we do not use it to train AI models.

4. Who else processes it

We use a small number of service providers. They process data on our instructions and are bound to protect it.

  • Vercel hosts the website and runs the contact form endpoint. It processes request logs, including IP addresses.
  • Resend delivers the contact form submission to our inbox as an email.
  • Google Fonts serves the typeface used on this site. Loading it means your browser requests a file from Google's servers, which discloses your IP address to Google.
  • Our email provider stores the resulting message so that we can read and reply to it.
  • WhatsApp, part of Meta, if you choose to message us there. That conversation is governed by WhatsApp's own privacy policy as well as this one.

We may also share data where the law requires it, or with professional advisers where necessary and confidential.

5. International transfers

We work from the United States, Mexico, and Spain, and the providers above operate globally. That means your data may be processed outside the European Economic Area. Where that happens, the transfer relies on the safeguards those providers put in place, such as the European Commission's standard contractual clauses or an adequacy decision covering the destination country.

6. How long we keep it

  • Enquiries that do not lead to work: up to 24 months, so we have context if you come back to us, then deleted.
  • Enquiries that become a project: for the life of the relationship and afterwards as long as tax, accounting, and contractual rules require.
  • Server logs: for the short retention period our host applies, typically measured in days or weeks.
  • Theme preference: until you clear your browser storage.

7. Your rights

If your data is protected by the GDPR, you have the right to:

  • Ask what we hold about you and get a copy of it
  • Have inaccurate information corrected
  • Have your data deleted
  • Restrict or object to how we process it, including anything we do on the basis of legitimate interest
  • Receive the data you gave us in a portable format
  • Withdraw consent at any time, where we relied on consent

Email contact@theaigencylab.com and we will respond within one month. Exercising these rights is free, and we will never treat you differently for asking.

If you think we have handled your data badly, you can complain to your local data protection authority. In Spain that is the Agencia Española de Protección de Datos. We would appreciate the chance to put it right first.

If you are a California resident, you have similar rights to know, delete, and correct your personal information, and to be free from discrimination for exercising them. We do not sell or share personal information as those terms are defined by California law.

8. Cookies and local storage

This site sets no cookies. No analytics cookies, no advertising cookies, no consent banner to click through, because there is nothing to consent to.

The only thing we store in your browser is the light or dark theme you chose, kept in local storage under the key theme. Clearing your browser data removes it.

9. Security

The site is served entirely over HTTPS. The contact form validates and size-limits what it accepts, and submissions travel to our inbox over encrypted connections. No method of transmission is perfectly secure, so please do not send passwords, card numbers, or other sensitive details through the form.

10. Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect data about anyone under 16. If you believe a child has sent us personal data, contact us and we will delete it.

11. Changes

If we change how we handle personal data, we will update this page and the date at the top. Significant changes will be described here rather than made quietly.

12. Contact us

Questions, requests, or complaints about privacy: contact@theaigencylab.com.

AIgency Labs S.L., with studios in New York City, México City, and Madrid.

This policy describes how the website itself handles data. Work we do for clients is governed by the contract and any data processing agreement signed for that engagement.