Privacy Policy

ConcAI di Manuel Concari - Tax ID: CNCMNL99C20L885Z - Via Rio Faellano 1027, 41054 Marano sul Panaro (MO), Italy - Email: info@conca.ai
Tel.: +39 389 683 7534 - Website: conca.ai

We collect the following personal data:

• Registration data: email, name, phone, country and address provided to create and manage the account
• Contact data: name, email and message sent through the contact form
• Browsing data: technical cookies and IP address (anonymized), also collected by the Cloudflare Turnstile anti-bot system
• Chatbot messages: the content of conversations with the site assistant, processed transiently on our servers to generate the reply; messages are not stored nor shared with third parties

• Creating and managing the user account
• Responding to requests sent via the contact form
• Website security and prevention of abuse and spam
• Providing assistance through the site's AI assistant (chatbot)
• Improving the service

The processing of your data is based on the following legal bases (Art. 6 GDPR): (a) performance of a contract and pre-contractual measures (Art. 6.1.b): management of the account and requested services; (b) legal obligation (Art. 6.1.c): tax and accounting requirements (Italian D.P.R. 600/1973, D.P.R. 633/1972); (c) legitimate interest (Art. 6.1.f): website security, prevention of abuse and fraud, legal defence; (d) consent (Art. 6.1.a): non-essential cookies, revocable at any time.

• Supabase Inc. (USA): database and authentication; data on EU-West servers; safeguard: SCC (EU Dec. 2021/914) - Privacy Policy
• Vercel Inc. (USA): hosting of the conca.ai platform; safeguard: DPF + SCC (EU Dec. 2021/914) - Privacy Policy
• Cloudflare, Inc. (USA): Turnstile (anti-bot protection); collects IP and technical challenge data; safeguard: DPF + SCC (EU Dec. 2021/914) - Privacy Policy
• Zoho Corporation (EU servers): transactional email delivery and management of the info@conca.ai mailbox; safeguard: SCC (EU Dec. 2021/914) for any extra-EU access - Privacy Policy

The list of data processors may be updated periodically. The latest version is always available on this page.

Data is retained for the duration of the relationship and thereafter: 10 years for tax obligations (Italian D.P.R. 600/1973) and the ordinary limitation period (Art. 2946 of the Italian Civil Code); 5 years for cases subject to the short limitation period (Art. 2947 of the Italian Civil Code). Once these terms expire, data is irreversibly deleted or anonymized.

Pursuant to the GDPR (EU Regulation 2016/679), you have the right to: access, rectification, erasure, restriction, portability and objection.

We use only essential technical cookies, which are necessary for the service to function and exempt from consent. We do not use analytical or advertising profiling cookies. See our Cookie Policy for details.

Your data is not subject to decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you (Art. 22 GDPR).