Privacy policy

Effective Date: 1 February 2025
Last Updated: 1 July 2025

Vanvitelli Ventures SL, the company behind Sabato AI (“we”, “us”, “our”), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and disclose your personal data when you interact with our website and software platform (collectively, the “Services”).

Who We Are

Data Controller:
Vanvitelli Ventures SL
Gran Vía Asima, 20, Oficina 13
Palma de Mallorca, 07009
Baleares, Spain
NIF: B13980974

What Data We Collect

We collect the following categories of personal data:

• Account Data: Name, email address, company name, billing details, and other account-related information.

• Service Data: Content you upload, input, or generate through the Services (e.g., documents and metadata).

• Usage Data: IP address, device information, browser type, operating system, timestamps, page views, and activity logs.

• Communication Data: Emails, support requests, and other messages exchanged with us.

• We do not intentionally collect sensitive personal data (e.g., health, biometric, or political data).

  
  

  
  

How We Use Your Data

We use your personal data for the following purposes:

• To provide, maintain, and support the Services.

• To manage your account and process payments.

• To improve the platform and develop new features.

• To monitor and secure our infrastructure.

• To send administrative and transactional communications.

• To analyze usage trends and customer behavior.

• Where permitted, to train AI models and enhance system performance.

• To comply with legal obligations or respond to lawful requests.

Legal Bases for Processing

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Performance of a contract – where data is necessary to provide the Services.

• Legitimate interests – including improving service performance, ensuring security, and analyzing usage.

• Consent – where explicitly obtained (e.g., marketing communications, certain analytics, or AI training).

• Legal obligation – when required by law or legal process.

Data Use for AI Model Training

Where permitted, data submitted to the platform may be used to improve and train our machine learning models. This includes analyzing patterns, improving accuracy, and enhancing product functionality.

Personal data within submitted content is handled in accordance with GDPR. Where legally required, we will request your consent before using data for training purposes. Customers may opt out of this use by contacting us at [Insert Email].

Data Sharing

We do not sell your personal data. We may share your data only as follows:

With subprocessors and service providers – such as cloud hosting, analytics, support tools, or payment processors, strictly under contractual obligations.

• With professional advisors – including legal, tax, and accounting firms.

• With legal authorities – where required by law, subpoena, or regulatory request.

• A current list of subprocessors is available upon request.

  
  

Data Retention

We retain personal data for as long as:

• You maintain an active account with us, and

• Required for compliance with legal, tax, or regulatory obligations.

After account deletion or inactivity, data may be archived or deleted in accordance with our internal retention policies.

International Data Transfers

Data may be processed or stored outside of the EU/EEA. In such cases, we ensure appropriate safeguards are in place, such as:

• Adequacy decisions by the European Commission; or

• Standard Contractual Clauses (SCCs) as adopted by the European Commission.

  
  

Your Rights

You have the following rights under GDPR:

• Access: Request a copy of your personal data.

• Rectification: Request correction of inaccurate or incomplete data.

• Erasure: Request deletion of your data (“right to be forgotten”).

• Restriction: Request restriction of certain processing activities.

• Portability: Request transfer of your data to another provider.

• Objection: Object to processing where legally allowed.

• Withdraw Consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [Insert Email]. You also have the right to lodge a complaint with your local Data Protection Authority.

Security

We use appropriate technical and organizational measures to protect your data, including encryption, access controls, and regular audits. No system is 100% secure, but we take reasonable steps to prevent unauthorized access or disclosure.

Children’s Privacy

Our Services are not intended for children under the age of 16. We do not knowingly collect or process data from minors.

Changes to This Policy

We may update this Privacy Policy from time to time. The latest version will always be available on our website. We will notify you of any material changes by email or via the platform.

Cookie Policy

Effective Date: 1 February 2025
Last Updated: 1 July 2025

This Cookie Policy explains how Sabato AI, a project of Vanvitelli Ventures SL (“we”, “us”, or “our”), uses cookies and similar technologies on our website and Services. It also outlines your rights to control our use of them.

What Are Cookies?

Cookies are small text files that are stored on your device when you visit a website. They help us recognize your browser, remember your preferences, and understand how users interact with our Services.

Cookies may be:

• First-party cookies – set by us directly

• Third-party cookies – set by external services used on our website (e.g., analytics tools)

• Cookies can also be:

• Session cookies – deleted when you close your browser

• Persistent cookies – stored on your device until they expire or are manually deleted

Why We Use Cookies

We use cookies to:

• Enable essential functionality (e.g., login sessions, navigation)

• Improve performance and user experience

• Analyze traffic and usage patterns

• Store user preferences

• Support security and fraud prevention

• Occasionally deliver and measure marketing or promotional campaigns

Types of Cookies We Use

Type

Description

Strictly Necessary

Required to operate the website. Includes session management and security.

Functional

Stores preferences such as language and layout.

Performance/Analytics

Collects anonymous usage data to improve site performance.

Marketing (if used)

Tracks user behavior across websites to deliver targeted content or ads.

Third-Party Cookies

We may use trusted third-party services that set their own cookies, including:

• Google Analytics (usage stats and behavior tracking)

• Stripe (for payment processing)

• Intercom or similar (live chat or support)

These providers may have their own privacy and cookie policies. We recommend reviewing them directly for more details.

Managing Cookies

When you first visit our site, you’ll be asked to accept or manage cookies. You can change your preferences at any time.

Additionally, you can control or delete cookies through your browser settings. Here’s how:

• Chrome: chrome://settings/cookies

• Firefox: about:preferences#privacy

• Safari: Go to Preferences > Privacy

• Edge: Settings > Site permissions > Cookies and site data

Please note: disabling certain cookies may limit functionality or performance of the Services.

Do Not Track Signals

We do not currently respond to “Do Not Track” (DNT) signals sent by browsers, as there is no consistent industry standard.

Changes to This Policy

We may update this Cookie Policy from time to time to reflect changes in our use of cookies or legal requirements. Updates will be posted on this page with a revised effective date.

Contact Us

For any questions about this policy or how we use cookies, contact us at privacy@sabato.ai