PRIVACY POLICY

IADigitek . is committed to respecting your privacy and ensuring the protection and security of your personal data. We design all our products and services with your privacy in mind. We involve experts from various fields, including legal, security and others to ensure that no decision is made without respecting your privacy.

You need to read this Privacy Policy carefully, which has been written in a clear and simple way so that you can understand it and thus decide freely and voluntarily if you want to provide your personal data to IADigitek .

By providing your personal data to ChatConnect, you confirm and certify that you are over 18 years of age or that you have obtained the consent of the holder of parental authority or legal guardian. To avoid illicit uses, we will try to verify your identity, reserving the right to deny the use of our services in cases where the information is not truthful and we may take appropriate legal action.

1. DATA CONTROLER

• ChatConnect is owned by IADigitek ., which will process your data as Data Controller.
• Registered office: Calle Príncipe de Vergara, 132, 28002, Madrid, España .
• CIF: B22985964 
• Data Protection Officer (DPO): privacy@iadigitek.com 

2. FOR WHAT PURPOSES WILL WE PROCESS THE USER’S PERSONAL DATA?

Your personal data collected will be processed by the Data Controller for the following purposes:

• To manage the contracting of the services subscribed to by the User.
• To enable the functionalities and services offered through ChatConnect at your request.
• To process and respond to requests, incidents, complaints, claims and/or exercise of rights of the User.
• To maintain, support and update ChatConnect. Solve possible technical incidents or any other incidents that may arise in relation to the Website.
• To carry out anonymous statistical reports regarding the access habits and the activity carried out by the Users.

3. WHAT DATA WILL BE PROCESSED?

The processing of your data is necessary in order to give you access to all the functionalities offered through ChatConnect or, if required, to send you information.

In order to provide you with the service, the following data will be collected and processed:

• Identification ID (internal code that is generated per user).
• Some of the functionalities and/or services offered through the APP allow or require the user to upload their own content (text and images). The content uploaded by the user may contain personal data. For example, when you update a photograph in which your image or the image of third parties appears or when you enter text containing information about yourself or data that allows third parties to be identified. The user’s data will be processed exclusively to enable the use and provide the service requested by the user.

In case you make a query or complaint, the data to be processed will be those provided for the resolution of the same:

• Identifying data: name, surname, phone number, email, ID.

4. OBLIGATION TO PROVIDE THE DATA

The data requested or generated by ChatConnect, in general, are mandatory to comply with the established purposes so that, otherwise, it may result in the impossibility of providing the service to the user.

5. WHAT IS THE LEGITIMACY OF THE DATA PROCESSING?

The legitimacy of the data processing will be:

• The execution of the contractfor:
  • Management of the contracting of the services subscribed by the User.
  • Enable the functionalities and services offered through ChatConnect at your request.
  • Process and respond to requests, incidents, complaints, claims and/or exercise of rights of the User as well as, where appropriate, manage refunds.
• Legitimate interestto:
  • Perform anonymous statistical reports.
  • Maintenance, support and updating of the application.

When the legitimate basis for the processing of your personal data is consent, we remind you that you have the right to revoke it at any time through the following e-mail address: privacy@iadigitek.com , although this will not affect the lawfulness of the processing previously carried out.

6. WHO WILL YOUR DATA BE SHARED WITH?

• The data may be communicated to the parent company of the business group of which the owner of the APP is a member, exclusively for internal administrative purposes.
• Public Administrations and Competent Authorities, for legal reasons in relation to the powers attributed to them.
• We may disclose your information if reasonably necessary:
  • (i) to comply with legal process, such as a court order, subpoena or search warrant, government/law enforcement investigation or other legal requirements;
  • (ii) in connection with efforts to investigate, prevent or take other action regarding illegal activity, suspected fraud or other violations;
  • (iii) to protect and defend the rights, property or safety of our company, our users, our employees or others.

7. WHERE WE STORE YOUR INFORMATION

Our services are operated in Europe and we use the servers of AWS located in the United States and Europe. If you are located in another jurisdiction, please be aware that the information you provide to us may be transferred to, stored and processed in the United Stated and Europe.

8. HOW LONG WILL WE KEEP YOUR DATA

In general, your data will be kept for as long as they are necessary for the purposes for which they were collected. The data may be kept for a longer period being duly blocked and remaining available only to the competent authorities, during the periods of limitation of legal actions arising from the relationship with the user. Once the corresponding legal periods have elapsed in the event of blocking, such personal data will be deleted in accordance with the applicable regulations.

In particular, as for the content (text, images) uploaded by the user that are processed by the AI tool, we will keep the data in memory on our servers for a maximum of 24 hours, which is necessary to provide the service. It is not stored on any permanent media. All information will remain stored until the user uninstalls the application on the user’s phone in local storage (phone memory).

9. PROVIDERS

We work with third parties for the proper provision of the service that may also be involved in the processing of your data.
Please, also check their Privacy Policy for a deep understanding of the processing of your data:

• AWS: https://aws.amazon.com/privacy/?nc1=f_pr
• Google: https://policies.google.com/privacy?hl=en-US
• Open AI: https://openai.com/policies/row-privacy-policy/
• Anthropic: https://www.anthropic.com/legal/privacy
• xAI: https://x.ai/legal/privacy-policy
• Perplexity: https://www.perplexity.ai/fr/hub/legal/privacy-policy

10. USER’S LIABILITY

The User:

• Guarantees that he/she is over 14 years of age or that he/she has obtained prior authorization from his/her parents, guardians or legal representatives and that the data he/she provides to the Responsible Party are true, accurate, complete and updated. To these effects, the User is responsible for the veracity of all the data he/she communicates and will keep the information provided conveniently updated, in such a way that it corresponds to his/her real situation.
• Will be responsible for any false or inaccurate information provided.
• In the event that you provide data of third parties, you declare to have their consent and agree to transfer the information contained in this Privacy Policy to the person concerned, owner of such data, exempting the Responsible for any liability in this regard.

11. EXERCISE OF RIGHTS

The User may send a letter to the address indicated in the heading of this Policy or by e-mail to the address
privacy@iadigitek.com with the Reference “Data Protection”,
at any time and free of charge, to:

• Revoke the consents granted.
• Obtain confirmation as to whether or not the Controller is processing personal data concerning the user.
• Access to your personal data.
• Rectify inaccurate or incomplete data.
• Request the deletion of their data when, among other reasons, the data are no longer necessary for the purposes for which they were collected.
• Obtain from the Data Controller the limitation of data processing when any of the conditions provided for in the data protection regulations are met.
• File a complaint regarding the protection of your personal data with the competent supervisory authority.

12. SECURITY MEASURES

The Data Controller will process the User’s data at all times in an absolutely confidential manner and keeping them secret, in accordance with the provisions of the applicable regulations, adopting for this purpose the necessary technical and organizational measures to ensure the security of your data and avoid its alteration, loss, treatment or unauthorized access, taking into account the state of technology, the nature of the data stored and the risks to which they are exposed.

13. CHANGES IN THE PRIVACY POLICY

We reserves the right to modify at any time this Privacy Policy to adapt it to new legislation and industry practices. When we do so, we will publish an updated version and effective date, unless it is required an express notification by law.

PRIVACY POLICY – CHATCONNECT (SULTANATE OF OMAN)

Last updated: October 21, 2026

This Privacy Policy applies to Users of the ChatConnect service residing or located in the Sultanate of Oman and has been adapted to comply with the Personal Data Protection Law of Oman (Royal Decree 6/2022, "PDPL") and its Executive Regulations (Ministerial Decision 34/2024).

IADigitek  is committed to respecting your privacy and ensuring the protection and security of your personal data. We design all our products and services with your privacy in mind. We have experts from various fields, including legal, security, and others, to ensure that no decision is made without respecting your privacy.

You should carefully read this Privacy Policy, written in a clear and simple manner, so that you can understand it and freely decide whether you wish to provide your personal data to IADigitek 

By providing us with your personal data, you grant your written, express, free, specific, and informed consent for its processing in accordance with this Policy and the PDPL. You confirm that you have full legal capacity, that you are over 18 years of age, or that you have obtained the consent of the holder of parental authority or legal guardian. To prevent illegal uses, we will attempt to verify your identity, reserving the right to deny the use of our services if the information is not truthful, and we may take appropriate legal action.

1. DATA CONTROLLER

• ChatConnect is owned by IADigitek  which will process your data as the Data Controller in accordance with the PDPL.

• Registered Office: Calle Príncipe de Vergara, 132, 28002, Madrid, España 

• Tax ID (CIF): B22985964 

• Data Protection Officer (DPO): privacy@iadigitek.com 

For the purposes of the PDPL, IADigitek  acts as the Data Controller for the personal data of Users located in Oman and complies with the applicable obligations, including, where appropriate, the appointment of a Data Protection Officer and registration with the competent authority (the Ministry of Transport, Communications and Information Technology of Oman, the "Ministry").

2. FOR WHAT PURPOSE WILL WE PROCESS THE USER'S PERSONAL DATA? Your personal data will be processed by the Data Controller for the following purposes:

• Manage the contracting of the services subscribed by the User.

• Enable the functionalities and services offered through ChatConnect.

• Process and respond to requests, incidents, complaints, claims, and/or the exercise of the User's rights.

• Maintain, support, and update ChatConnect, as well as resolve any technical or other incidents related to the application.

• Create anonymous statistical reports on the access habits and activity carried out by Users.

Your data will not be processed for purposes other than those described here without obtaining your prior consent.

3. WHAT DATA WILL BE PROCESSED? The processing of your data is necessary to give you access to all the functionalities offered through ChatConnect or, if necessary, to send you information. To provide you with the service, the following data will be collected and processed:

• Identification: an internal code generated for each user.

• User-uploaded content: Some functionalities or services offered through the APP allow or require the user to upload their own content (text and images). This content may contain personal data, such as a photo where your image or that of third parties appears, or texts with personal or identifying information. This data will be processed exclusively to enable the use and provide the requested service.

If you make an inquiry or complaint, the data processed will be those provided for its resolution:

• Identifying data: name, surname, telephone number, email, identity document.

• Sensitive personal data. You do not need to provide sensitive data (e.g., data related to health, racial or ethnic origin, religious beliefs, political opinions, genetic or biometric data) to use the Service, and we ask that you do not include them in the content you upload. Should the processing of sensitive data be necessary, we will only do so after obtaining your express consent and, when required by the PDPL, the prior permission of the Ministry.

4. OBLIGATION TO PROVIDE DATA The data requested or generated by ChatConnect, in general, is mandatory to fulfill the established purposes. Otherwise, it may be impossible to provide you with the service.

5. WHAT IS THE LEGITIMACY (LEGAL BASIS) FOR DATA PROCESSING? In accordance with the PDPL, the primary basis for processing your personal data is your written and express consent, given freely, specifically, and informed, which is documented electronically through the acceptance of this Privacy Policy and the Terms and Conditions. Furthermore, and to the extent permitted by applicable regulations, the processing may be based on:

• The need to execute the contract signed with you, to manage the contracting, enable requested functionalities and services, and respond to requests, incidents, or claims.

• Compliance with legal obligations to which the Data Controller is subject.

• The creation of anonymous statistical reports and the maintenance, support, and updating of the application, in a manner compatible with the purpose for which the data was collected.
  
  You may revoke your consent at any time by sending an email to privacy@iadigitek.com , without this affecting the lawfulness of the processing carried out prior to its withdrawal. The revocation of consent may mean that we can no longer provide you with the Service.

6. WITH WHOM WILL YOUR DATA BE SHARED? The data may be communicated to:

• Companies within the same corporate group, exclusively for internal administrative purposes.

• Public administrations and competent authorities (including the Ministry), for legal reasons in relation to the powers attributed to them.

• Providers providing services on behalf of the Data Controller (data processors), bound by contractual obligations of confidentiality and security.

In specific cases, your data may be communicated to:

1. Comply with legal processes, such as court orders, subpoenas, or government investigations.

2. Investigate, prevent, or take action regarding illegal activities, fraud, or violations of rights.

3. Protect the rights, property, or safety of our company, users, employees, or others.

7. WHERE DO WE STORE YOUR INFORMATION? – INTERNATIONAL DATA TRANSFER Our company operates from Europe, and we use AWS servers located in the United States and Europe. Given that you are located in the Sultanate of Oman, the information you provide us will be transferred, stored, and processed outside of Oman, in the United States and Europe.

In accordance with the PDPL and its Executive Regulations:

• To use ChatConnect, you must give your express consent to the transfer, storage, and processing of your personal data outside the Sultanate of Oman, specifically in the United States and Europe, where our technology providers and servers are located. If you do not grant this consent, we will not be able to provide you with the Service.

• The Data Controller guarantees that such transfer will not compromise the national security or interests of the Sultanate of Oman.

• The Data Controller ensures that the countries and providers to which the data is transferred offer a level of data protection no less than that provided in the PDPL and its Executive Regulations, through appropriate contractual and technical guarantees, and conducts an assessment of the level of protection and the risks of the transfer, a report of which may be required by the Ministry.

• If you do not want your data transferred outside of Oman, we will not be able to provide you with the Service, as the transfer is technically essential for its operation.

8. HOW LONG WILL WE KEEP YOUR DATA? In general, your data will be kept for as long as necessary for the purposes for which it was collected. The data may be kept for a longer period, properly blocked and available only to the competent authorities, during the limitation periods for legal actions arising from the relationship with the user. Once the corresponding legal deadlines have elapsed in the event of blocking, said personal data will be deleted in accordance with the applicable regulations. In particular, regarding the content (text, images) uploaded by the user that is processed by the AI tool, we will keep the data in memory on our servers for a maximum of 24 hours, the period necessary to provide the service. They are not stored on any permanent medium. All information will remain stored until the user uninstalls the application, in local storage (the user's phone memory).

9. PROVIDERS We work with third parties for the proper provision of the service who may also be involved in the processing of your data. Please also refer to their Privacy Policies to fully understand the processing of your data:

• AWS: https://aws.amazon.com/privacy/?nc1=f_pr

• Google: https://policies.google.com/privacy?hl=en-US

• Open AI: https://openai.com/policies/row-privacy-policy/

• Anthropic: https://www.anthropic.com/legal/privacy

• xAI: https://x.ai/legal/privacy-policy

• OpenRouter: https://openrouter.ai/privacy

10. USER RESPONSIBILITY The User:

• Guarantees that they are over 18 years old or have obtained prior authorization from their parents, guardians, or legal representatives, and that the data provided to the Controller is true, accurate, complete, and updated. The User is responsible for the veracity of all the data they communicate and will keep the information provided suitably updated so that it responds to their real situation.

• Will be responsible for any false or inaccurate information they provide.

• In the event of providing third-party data, declares to have their consent and agrees to transfer the information contained in this Privacy Policy to the interested party, the owner of said data, exempting the Controller from any liability in this regard.

11. EXERCISE OF RIGHTS You may send a written request to privacy@iadigitek.com  with the reference "Data Protection", at any time and free of charge, to:

• Revoke the consents granted.

• Obtain confirmation as to whether the Data Controller is processing personal data concerning you.

• Access your personal data and obtain a copy of it in physical or electronic format.

• Rectify inaccurate or incomplete data.

• Request the deletion of your data when, among other reasons, it is no longer necessary for the purposes for which it was collected, when you withdraw your consent, or when the processing does not comply with applicable regulations.

• Request the limitation of data processing.

• Request the transfer (portability) of your data.

The Data Controller will respond to your request within a maximum period of 45 days. During this period, you have the right to request that the Controller stop processing your data until the request is addressed. The Controller may reject, in whole or in part, requests that are manifestly repetitive or require extraordinary efforts, informing you in any case in a reasoned manner. You also have the right to file a claim with the Ministry of Transport, Communications and Information Technology of the Sultanate of Oman as the competent supervisory authority. Claims must be filed within 30 days of becoming aware of the infringement.

12. SECURITY MEASURES AND BREACH NOTIFICATION The Data Controller will process the User's data at all times in absolute confidentiality and maintaining secrecy regarding it, in accordance with the provisions of the applicable regulations, adopting the necessary technical and organizational measures to guarantee the security of your data and prevent its alteration, loss, unauthorized processing, or access, taking into account the state of technology, the nature of the stored data, and the risks to which it is exposed. In the event of a personal data security breach that poses a risk to the rights of the data subjects, the Data Controller will notify the competent authority of the Ministry within 72 hours of becoming aware of it, in accordance with the provisions of the Executive Regulations of the PDPL.

13. CHANGES TO THE PRIVACY POLICY We reserve the right to modify this Privacy Policy to adapt it to new legislation or industry practices. Any modifications will be communicated and published, updating the "last updated" date. Continued use of the Service after the publication of the revised Policy will imply acceptance of the changes.

14. APPLICABLE LAW AND COMPETENT AUTHORITY This Privacy Policy is governed by Spanish law, without prejudice to full compliance with the Personal Data Protection Law of the Sultanate of Oman (Royal Decree 6/2022) and its Executive Regulations (Ministerial Decision 34/2024) regarding Users located in Oman, as well as the supervisory and control powers attributed to the Ministry of Transport, Communications and Information Technology of Oman.