Privacy policy

Data controller

Enervo AI (company being incorporated). Contact email: enervo@enervo.ai. Website: www.enervo.ai. The legal name, tax ID, registered address and registry details will be published here as soon as the company is incorporated.

What data we handle

• Contact form: name, email address, company, type of company and the message you write.
• Enervo Hub accounts: each user’s name and email, and the data the customer company enters in the Hub (customers, supply points, invoices and contracts). For the latter, the customer company is the controller and Enervo AI acts as processor.
• Visit statistics: aggregated, anonymous page-view data, without cookies and without identifying you.

Purpose and legal basis

• Answering your enquiries and preparing proposals, at your request (pre-contractual steps).
• Providing the Enervo Hub service to customer companies (performance of the contract).
• Understanding how the website is used in order to improve it (legitimate interest), with data that does not identify you.

How long we keep it

Contact form data, for as long as needed to handle your enquiry and at most one year if no business relationship starts. Customer data, for as long as the contract lasts and then for the periods required by law.

Providers that handle data

• Vercel: website hosting and visit statistics.
• Supabase: Enervo Hub database, hosted in the European Union.
• Microsoft 365: email.
• Google Fonts: the website’s fonts load from Google’s servers, which receive your IP address.
• Artificial intelligence providers: they process the documents you upload to Enervo Hub (invoices, contracts, tariffs) to extract their data.
• When a provider is outside the European Economic Area, the transfer relies on the EU-US Data Privacy Framework or standard contractual clauses. We do not share data with third parties unless required by law.

Your rights

You can request access, rectification, erasure, restriction or portability of your data, or object to its processing, by writing to enervo@enervo.ai. If you believe your rights have not been respected, you can complain to the Spanish Data Protection Agency (www.aepd.es).

Security

We apply technical and organisational measures to protect data: per-user and per-role access, encrypted connections and backups.