Privacy Policy

Xplosion AI, SL ("VibeTasking.com", "we", or "the company"), as the data controller, strictly complies with the General Data Protection Regulation (GDPR, EU 2016/679) and the Organic Law on the Protection of Personal Data and Guarantee of Digital Rights (LOPDGDD, Law 3/2018).

1. Identity and Contact Details of the Data Controller

Xplosion AI, SL (VibeTasking.com)

Address: Calle Pobladores 6, Esc 4, Planta 2, Pta 4B, 41900, Camas, Spain

Data protection email: [email protected]

2. What Personal Data Do We Process?

We process the personal data of employees and professionals who use our software, including:

• First name, last name, professional email, phone number.
• Technical data: IP address, browser, device type.
• Usage data: software usage patterns, preferences, activities performed, and requests made to our agent.

To fulfill the task assigned by the user, our intelligent agent may access personal accounts, cloud tools, and user browser data. These accesses will be carried out exclusively to execute tasks directly requested by the user. The user can manage, limit, or revoke these accesses and credentials at any time from the "settings" panel of their VibeTasking account.

Exclusion of Local Access: It is expressly established that our agent will NOT access, under any circumstances, local files physically stored on the user's devices or hard drives. Access is strictly limited to cloud environments, online tools, and files that the user voluntarily decides to upload to the platform for processing.

Furthermore, to complete a requested task, our AI agent may need to interact with third-party tools, software, or platforms (CRM, ERP, Email, etc.). This may occur either because the user specifically requests it, or because the agent determines it is the optimal action to fulfill the request. In such cases, user data (including files or information provided) may be transferred, processed, or stored by these third parties. The user understands and agrees that VibeTasking.com has no control over these external platforms, and that the use of their data on them will be governed by the privacy policies and terms and conditions of those third parties.

In certain cases, we act as a Data Processor for our clients, storing or managing the personal data of their own users or end customers according to their precise instructions.

No-Training Guarantee: User data, including data obtained through the use of Google Workspace APIs or any other information provided, will never be used for purposes other than those mentioned herein. VibeTasking expressly guarantees that it will not use personal data, files, or documents for the training, improvement, or re-training of its artificial intelligence models.

3. Purpose of the Processing

Personal data will be processed to:

• Provide, manage, and optimize our Artificial Intelligence-based software, as well as to perform tasks requested by the user.
• Analyze usage patterns to improve our product and the user experience.
• Generate automated, personalized recommendations for professional users.
• Communicate with users regarding news, updates, or incidents related to the service.

4. Legal Basis for Processing

• Execution of the contract (or Terms and Conditions) between VibeTasking.com and the Client or User.
• Legitimate interest in optimizing and improving our service.
• Explicit consent of the user, when required for intensive automated processing or profiling.

5. International Transfers, Subcontracting, and Third-Party Tools

We use leading technology providers that may store personal data outside the EU, always under appropriate safeguards through standard contractual clauses approved by the European Commission or adequate privacy frameworks.

For the provision of the service, VibeTasking may subcontract infrastructure and AI services (such as hosting providers e.g., AWS or Google Cloud; and AI model providers e.g., OpenAI or Anthropic). Likewise, integration services (e.g., Composio) may be used for the technical connection with third-party tools requested by the user.

6. Retention Period

Personal data will be retained for the time necessary to fulfill the established purposes and legal obligations, generally for the duration of the contract with the client or the subscription to the Service.

Upon termination of the service, data will be retained for a maximum additional period of one (1) calendar year with the sole purpose of facilitating the reactivation of the service and recovery of the client's history if necessary. However, the user may request the immediate deletion of their data upon termination of the contract through a written communication to [email protected]. Once the request is received, the secure deletion of the data will be carried out, provided the legal framework allows it.

7. Rights of Data Subjects

Users may exercise the following rights:

• Access
• Rectification
• Erasure
• Restriction of processing
• Data portability
• Objection

They may exercise their rights by contacting [email protected] in writing. Likewise, they may file a complaint with the Spanish Data Protection Agency (www.aepd.es).

8. Automated Decisions

Our product uses AI to perform automated profiling to optimize tasks and offer personalized recommendations. Likewise, it can automatically decide which cloud files or systems (previously authorized) it needs to access to attempt to carry out the task assigned by the user.

9. Data Security

VibeTasking.com applies rigorous technical and organizational measures to guarantee the security of personal data: encryption in transit and at rest, restricted controls and access, segregation of environments, regular audits, staff training, and incident response procedures.

10. Changes to the Policy

Any modifications will be communicated through our website or via email.