Privacy Policy
This policy explains what personal data we process, why, on what legal basis, how long we keep it, and the rights you have. It covers both the PolarGate mobile application and the polargate.ai website.
LAST UPDATED · 6 JULY 202601Who we are
Polargate is the brand of POLARGATE, S.L. (CIF B24895005), a company registered in Spain at Calle Electrónica 6, 28027 Madrid, operating from Madrid and Amsterdam. We are the data controller responsible for the personal data described in this policy, which applies to the PolarGate application (bundle identifier ai.polargate.console) and the website at polargate.ai.
For any privacy question or to exercise your rights, contact us at privacy@polargate.ai.
02Data we process
PolarGate application
- Account data. Your email address and authentication credentials, handled through Supabase Auth. Passwords are never stored in plain text.
- Content you add to your brain. The documents, text, files and related metadata you choose to upload or create inside the app. This content is stored so the app can provide retrieval and AI-assisted features to you.
- Push notification token. If you enable notifications, a device push token is stored so we can deliver the alerts you have opted into.
- Technical and diagnostic data. Basic device, log and error information used to keep the service secure and reliable.
polargate.ai website
- Contact form and project brief. When you submit our contact form or the brief at
/start, we process your name, email, optional company name and role, the track you selected, your message, and the structured answers you gave (scope, sector, stage, timeline, budget range and markets). Your IP address and a timestamp are used to prevent abuse and are included in the notification email we receive, so we can recognise repeated abusive submissions. - Draft saved in your browser. While you fill in the brief at
/start, your answers are saved in your browser's local storage so you can leave and come back. That draft stays on your device, is never sent anywhere until you press send, and is deleted once the brief is submitted. Clearing your browser data removes it. - Analytics. Aggregated, cookieless usage and performance measurements via Vercel Web Analytics and Speed Insights. These do not build advertising profiles or track you across other sites.
03How we use your data and legal basis
Under the EU General Data Protection Regulation (GDPR), we process personal data on the following legal bases:
| Purpose | Legal basis |
|---|---|
| Creating and securing your account; authenticating you | Performance of a contract (Art. 6(1)(b)) |
| Storing and processing the content you add to power the app's features | Performance of a contract (Art. 6(1)(b)) |
| Sending transactional emails (sign-up, password reset, security notices) | Performance of a contract (Art. 6(1)(b)) |
| Delivering push notifications you enable | Consent (Art. 6(1)(a)), withdrawable at any time |
| Responding to contact-form enquiries | Legitimate interests / pre-contractual steps (Art. 6(1)(b)/(f)) |
| Security, abuse prevention, rate limiting, diagnostics | Legitimate interests (Art. 6(1)(f)) |
| Aggregated, cookieless analytics | Legitimate interests (Art. 6(1)(f)) |
We do not sell your personal data, and we do not use the content you add to your brain for advertising. Content is transmitted to AI model providers only to the extent necessary to generate the specific output you request within the app.
04Service providers (processors)
We rely on a small set of vetted providers who process data on our behalf under data-processing agreements:
| Provider | Purpose |
|---|---|
| Supabase | Authentication, database and content storage |
| Resend | Transactional and notification email delivery |
| Vercel | Website hosting and cookieless analytics and performance insights |
| Apple Push Notification service and Firebase Cloud Messaging | Delivery of push notifications on iOS and Android |
| Cloudflare | Turnstile, the check that tells people from bots on our forms. Your IP address is sent to Cloudflare to verify the challenge. |
05International transfers
Some of our providers are located outside the European Economic Area (for example, in the United States). Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses to ensure your data remains protected.
06Retention
- Account and brain content are kept for as long as your account is active. When you delete your account, this data is deleted or irreversibly anonymised within 30 days, except where we must retain limited records to comply with legal obligations.
- Contact-form submissions are retained only as long as needed to handle your enquiry and any resulting relationship.
- Diagnostic and security logs are kept for a short, limited period and then deleted.
07Deleting your account
You can delete your account and its associated data directly inside the PolarGate app, from your account settings. This removes your account data and the content you added, subject to the retention rules above. If you are unable to access the app, email privacy@polargate.ai and we will process the deletion for you.
08Your rights
Under the GDPR you have the right to access, rectify, erase, restrict and port your personal data, to object to certain processing, and to withdraw consent at any time (without affecting processing already carried out). To exercise any of these rights, contact privacy@polargate.ai. You also have the right to lodge a complaint with your local data protection authority: in Spain, the Agencia Española de Protección de Datos (AEPD).
09Security
We apply appropriate technical and organisational measures to protect personal data, including encryption in transit, access controls and reputable infrastructure providers. No system is perfectly secure, but we work to protect your data proportionately to its sensitivity.
10Children
PolarGate is not directed to children under 16, and we do not knowingly collect their personal data. If you believe a child has provided us data, contact us and we will delete it.
11Changes to this policy
We may update this policy from time to time. When we do, we will revise the last updated date above and, where changes are material, provide a more prominent notice.
12Contact
POLARGATE, S.L. · CIF B24895005 · Calle Electrónica 6, 28027 Madrid, Spain. Privacy enquiries: privacy@polargate.ai. General enquiries: the contact form.