Privacy Policy

Last updated: 10 September 2026

1. Who controls your data

The data controller is ROILITY, S.L., NIF B21964564, registered address Avda. Ignasi Wallis 11, Puerta 2, 07800 Eivissa, Illes Balears, España. For any privacy question or request, contact hola@agentalla.com.

2. What we collect

3. Why we process it, and on what legal basis

• Performance of a contract — running your account, answering your questions, billing your subscription.
• Legitimate interest — keeping the Service secure, preventing abuse, understanding aggregate usage to improve it.
• Consent — voice input (microphone access), and any optional marketing email, which you can withdraw at any time.
• Legal obligation — invoicing and tax records we're required to keep under Spanish law.

4. How Alla's AI processing works

When you send Alla a message, the text (and any attached document content) is sent to our AI model provider, Anthropic, to generate a reply. We don't send your data to Anthropic for training their models, and we don't carry information from one client's or agency's conversations into another's.

5. Who we share data with

We share the minimum necessary data with the processors that make the Service work:

• Anthropic — generates Alla's replies from the conversation you send.
• Cloudflare — hosts the website and routes chat requests.
• Stripe — processes web subscription payments.
• Apple — processes App Store subscription payments for the mobile app, under Apple's own privacy terms.

We don't sell your personal data, and we don't share it with agencies or advertisers outside what's needed to run the Service you signed up for.

6. International transfers

Some processors above may process data outside the European Economic Area (for example, in the United States). Where that happens, we rely on the provider's Standard Contractual Clauses or an equivalent safeguard recognized under the GDPR.

7. How long we keep it

We keep account and conversation data for as long as your account is active, plus a limited period afterward to comply with tax/accounting obligations or resolve disputes. You can ask us to delete your account and associated data earlier, subject to Section 8.

8. Your rights

Under the GDPR and LOPDGDD, you can ask us to:

• give you a copy of your personal data (access);
• correct inaccurate data (rectification);
• delete your data (erasure), where it isn't needed for a legal obligation like invoicing;
• limit how we use it (restriction), or object to certain processing;
• receive it in a portable format (portability).

Contact hola@agentalla.com to exercise any of these. If you're not satisfied with our response, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD) — or, if you live in another EU/EEA country, to your own country's data protection authority, which you're entitled to use instead under the GDPR.

9. Cookies and similar technology

The website uses only the technical storage needed to keep you signed in and to remember basic preferences (such as your chosen language or theme). We don't currently use third-party advertising or analytics cookies. If that changes, we'll update this section and ask for consent where required.

10. Children

Agent Alla is not directed at, and should not be used by, anyone under 18.

11. Security

We use industry-standard measures to protect your data — encrypted connections (HTTPS) everywhere, hashed passwords, and access controls limiting who can see account or conversation data. No system is 100% secure, and we'll notify affected users and the AEPD as required by law if a breach materially affects your data.

12. Changes to this policy

We'll post updates here with a new "last updated" date, and flag material changes more prominently when they affect how we use your data.

13. Contact