Política de Privacidade

Version 1.0 | Effective 10 August 2026

At a glance

This Privacy Policy explains how Perspectis AI, Inc. and SyncSphere Global, S.L.U. (“Perspectis”, “we”, “us” or “our”), operating the Perspectis brand and platform, collect and use personal data when you visit our websites, request information or a demo, start a trial, communicate with us, interact with public website demos or marketing chat, attend an event with us, or otherwise engage with us in a context where we act as controller of your personal data.

This Policy is separate from our customer Data Processing Addendum (“DPA”). When we process content, documents, email, calendar, CRM, billing, matter, client, employee or other business data on behalf of an organisational customer using the Perspectis platform, the customer generally determines the purposes and means of that processing and acts as controller; Perspectis AI, Inc. and/or SyncSphere Global, S.L.U. act as processor. In that situation, the customer’s agreement and DPA govern the processing of Customer Data.

We do not sell personal data. We do not use the Site for cross-context behavioural advertising. Optional analytics and similar non-essential technologies are consent-gated where consent is required. You can change your cookie choices through the Cookie Settings control on the Site.

1. Who we are

The controllers responsible for the personal data covered by this Policy are:

• Perspectis AI, Inc. (United States)
  • EIN: 41-5230930
  • Registered office: 184 Sigourney St, Suite B6, Hartford, CT 06105, United States
• SyncSphere Global, S.L.U. (Spain)
  • NIF: B25871807
  • Registered office: Calle Marte, Num. 7, 35215 Telde, Las Palmas, Gran Canaria, Spain
• Privacy and support contact: support@perspectis.ai
• General business contact: sales@perspectis.ai

“Perspectis” is the product and platform brand under which Perspectis AI, Inc. and SyncSphere Global, S.L.U. provide software and related services. Depending on your relationship with us and the nature of the processing, either or both entities may act as controller for the activities described in this Policy.

2. Scope of this Policy

This Policy applies to personal data we process as controller in connection with:

• perspectis.ai and its localised or successor website versions (the “Site”);
• trial registration, account administration and business relationship management for app.perspectis.ai, to the extent we determine the purposes of that processing;
• sales, contact, consultation, strategy-session and demo requests;
• public website chat, public demonstrations and other pre-contract product experiences;
• events, conferences, webinars and other business-development activities;
• marketing communications and preference management;
• support, security, fraud prevention and service administration where we act as controller; and
• our business relationships with customer personnel, prospects, partners, suppliers, advisers and other professional contacts. This Policy does not replace a customer-specific DPA, employment privacy notice, recruitment notice, or another notice that expressly applies to a particular processing activity. If another notice conflicts with this Policy for a specific activity, the more specific notice governs that activity.

3. Personal data we collect

3.1 Information you provide directly

• Contact and professional information, such as your name, work email address, telephone number, employer or organisation, job title, department, professional role, country, preferred language and business contact details.
• Account and trial information, such as your work email, organisation, account identifier, sign-in and authentication information, role, permissions, preferences, acceptance records and trial status.
• Enquiry and sales information, such as the content of a contact form, email, call, meeting, demo request, business requirements, notes about your organisation, proposed use cases, procurement status and communications with our team.
• Public chat and demo content, such as the text or files you choose to submit to a public marketing chat or demonstration, the responses produced, feedback you provide and related session metadata.
• Event information, such as event registration, attendance, organisation, role, session interests, meeting requests, business cards or information you voluntarily provide at a conference or webinar.
• Transaction and contracting information, such as billing contact details, purchase or subscription information, order details and records required to administer a commercial relationship. If a third-party payment provider is used, we do not intend to receive or store complete payment-card credentials unless expressly stated.
• Support and correspondence information, including support requests, product feedback, complaints, rights requests and other communications.

3.2 Information collected automatically

• Device and network information, such as IP address, browser type, device type, operating system, language, time zone, referring URL and approximate location derived from IP address.
• Website and usage information, such as pages viewed, links clicked, timestamps, session duration, navigation events, feature interactions, consent choices and technical diagnostics.
• Security and log information, such as authentication events, access logs, error logs, request metadata, fraud signals, rate-limit events and security telemetry.
• Cookie and similar-technology identifiers where those technologies are used and permitted by your choices.

3.3 Information from other sources

• Your employer, organisation or another business contact may provide your professional contact details to us in connection with a proposed or existing business relationship.
• We may receive business contact information from event organisers, referral partners, professional networks, publicly available company websites, professional directories or business-oriented social platforms.
• We may receive limited identity, account or integration information from authentication providers or services you choose to connect. We do not seek to collect special-category or similarly sensitive personal data through the public Site, public marketing chat or ordinary sales forms. Please do not submit health information, biometric identifiers, government identification numbers, payment-card details, passwords, client-confidential or legally privileged material, or other sensitive information through a public marketing surface unless we have specifically told you that the relevant environment is intended and approved for that purpose.

4. Why we use personal data and our legal bases

Where the EU GDPR, UK GDPR or another law requiring a legal basis applies, we rely on the legal bases set out below. The particular basis depends on the context.

Where we rely on legitimate interests, our interests generally include operating and securing our business, responding to business enquiries, developing business-to-business relationships, improving our Site and services, preventing fraud and misuse, maintaining appropriate records, and understanding how our products and content are used. We consider the impact on individuals and do not rely on legitimate interests where our interests are overridden by your rights and freedoms.

5. Marketing communications

We may send business-to-business marketing communications where permitted by applicable law. For electronic marketing in Spain and the EEA, we use consent where required and may rely on the existing-customer exception or another lawful route only where the applicable electronic-communications rules permit it.

Every marketing email will provide a simple way to unsubscribe. You may also opt out at any time by contacting support@perspectis.ai. Opting out of marketing does not prevent us from sending non-promotional messages that are necessary to administer a trial, customer relationship, security matter, transaction or legal obligation.

We may retain a minimal suppression record after you unsubscribe so that we can honour your request and avoid re-adding you to marketing lists.

6. Cookies and similar technologies

We use cookies, local storage and similar technologies for limited purposes. The technologies actually active on the Site may change as we improve the Site. The current categories, providers, purposes and durations are displayed in our Cookie Settings panel or equivalent consent-management interface.

Where Spanish or other applicable law requires consent for non-essential cookies or similar technologies, we do not activate those technologies until you consent. You may reject optional technologies without losing access to ordinary Site content, and you may withdraw or change consent at any time through Cookie Settings.

Embedded third-party content may create a direct connection between your browser and the third party when you choose to activate it. For example, a video played through YouTube or another media service may cause that service to receive your IP address, device information and interaction data and may set its own cookies in accordance with your consent choices and the provider’s policy.

We do not currently use the Site to sell personal data or to share personal data for cross-context behavioural advertising. If that changes, we will update this Policy and provide any legally required opt-out mechanisms before engaging in the new activity.

7. Website analytics

We use optional analytics to understand Site performance, navigation patterns, content engagement and product interest. Analytics is designed to be privacy-conscious and is consent-gated where required. Analytics may include providers such as PostHog where enabled. We seek to limit analytics payloads to information reasonably necessary for measurement and product improvement and do not intentionally place sensitive form content into analytics events.

Depending on configuration, analytics may use first-party or third-party identifiers and may process technical data such as browser, device, page, referral and interaction events. The currently enabled provider, cookie names and retention details are available through Cookie Settings.

8. Public AI chat, demonstrations and automated processing

Some Perspectis website or demonstration experiences may use artificial intelligence. If you choose to interact with a public AI-enabled surface, the content you submit may be processed by Perspectis systems and, where the relevant feature is enabled, by an approved AI service provider such as OpenAI or Microsoft Azure OpenAI.

The provider used for a particular interaction may depend on the product surface, deployment, model availability, region, security policy and data-egress configuration. We use governance and security controls designed to restrict outbound model calls and to reduce unnecessary disclosure. We do not use website or Customer Data to train a Perspectis-owned general-purpose model.

For third-party model providers, training and retention depend on the provider, endpoint and commercial configuration. Where we use business or API services that provide no-training or restricted-retention controls, we configure those controls as appropriate to the relevant deployment. We do not represent a processing path as “zero retention” unless that configuration actually applies.

Public website demos and marketing chat are not intended for confidential client data, legal privilege, special-category data, passwords, financial credentials or other sensitive information. If you need to evaluate Perspectis using real confidential business data, contact us so that the appropriate contractual and technical environment can be established.

We may use automated tools to route enquiries, identify likely areas of product interest or assist our team in prioritising business follow-up. We do not use such website-level automation to make decisions that produce legal effects or similarly significant effects about individuals.

9. When we share personal data

We disclose personal data only where reasonably necessary for the purposes described in this Policy. Recipient categories may include:

• cloud hosting, infrastructure, content-delivery, logging and security providers;
• identity, authentication and account-administration providers;
• customer relationship management, communications and business-productivity providers;
• analytics and consent-management providers, when enabled in accordance with your choices;
• AI and machine-learning service providers where an AI-enabled website or demo feature is used;
• video, social-media and embedded-content providers when you activate or visit those services;
• professional advisers, auditors, insurers, banks and other advisers where necessary for legitimate business, legal or compliance purposes;
• public authorities, regulators, courts, law-enforcement bodies or other recipients where disclosure is required by law or reasonably necessary to establish, exercise or defend legal claims; and
• a prospective buyer, investor, financing source or successor in connection with a corporate transaction, subject to appropriate confidentiality and data-protection safeguards. Our service providers are permitted to use personal data only for the contracted services and other purposes allowed by applicable law. Customer-specific product subprocessors and processing details are addressed separately in the applicable DPA, Order Form or Trust Center materials.

10. International data transfers

Perspectis AI, Inc. is established in the United States and SyncSphere Global, S.L.U. is established in Spain. Some service providers may process personal data outside your country, the European Economic Area (“EEA”) or the United States. When the EU GDPR applies and personal data is transferred to a country that does not benefit from an applicable adequacy decision, we use an approved transfer mechanism where required, such as the European Commission’s Standard Contractual Clauses, together with supplementary measures where appropriate.

For transfers subject to UK data-protection law, we use an applicable UK transfer mechanism where required, such as the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. We may also rely on an adequacy regulation or another legally permitted transfer mechanism.

Customer-specific data-residency commitments for the Perspectis SaaS platform are set out in the relevant customer agreement and do not automatically apply to general website, sales, marketing or business-contact data unless the agreement expressly says otherwise.

11. How long we keep personal data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to provide requested services, maintain security and business records, comply with legal, tax, accounting and regulatory obligations, resolve disputes and enforce agreements.

The retention period depends on factors including the type of data, whether you become a customer, the duration of our relationship, your consent or marketing status, applicable limitation periods, legal recordkeeping duties, security requirements and whether the data is needed for an active dispute or investigation.

• Enquiries and prospect records are generally retained while a business discussion remains active and for a reasonable period afterwards so that we can follow up, maintain context and avoid duplicative outreach.
• Trial and account-administration records are retained for the duration of the trial or account and afterwards for a reasonable period needed for security, customer-service, fraud-prevention, legal and recordkeeping purposes.
• Contracting, invoicing and commercial records are retained for the periods required by applicable corporate, accounting, tax and limitation laws.
• Marketing preferences are retained while marketing is active. Minimal opt-out or suppression records may be retained as long as necessary to honour a request not to receive marketing.
• Website analytics and cookie data are retained according to the settings and provider information shown in Cookie Settings and are configured to avoid unnecessary retention.
• Security logs may be retained longer where necessary to investigate an incident, prevent abuse, establish a legal claim or comply with an applicable legal obligation. Where data is no longer required, we delete it, anonymise it, or place it beyond ordinary use where immediate deletion from backup systems is not technically practicable, subject to applicable retention safeguards.

12. Security

We use administrative, technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Measures vary by system and risk and may include access controls, least-privilege permissions, encryption in transit and at rest where appropriate, secure cloud infrastructure, monitoring and logging, network and application security controls, vulnerability management, incident-response procedures and personnel confidentiality requirements.

No internet transmission, cloud service or security system can be guaranteed to be completely secure. You are responsible for protecting your own credentials and for using appropriate care when deciding what information to submit through public website surfaces.

13. Your privacy rights

Depending on where you live and which law applies, you may have some or all of the following rights:

• to be informed about our processing;
• to request access to personal data we hold about you;
• to request correction of inaccurate or incomplete personal data;
• to request deletion of personal data in circumstances provided by law;
• to request restriction of processing;
• to receive certain personal data in a portable format and, where applicable, have it transmitted to another controller;
• to object to processing based on legitimate interests, including direct marketing;
• to withdraw consent at any time where processing is based on consent, without affecting processing that was lawful before withdrawal;
• to object to or obtain safeguards in relation to certain solely automated decisions, where applicable;
• to opt out of sale, sharing, targeted advertising or qualifying profiling where a U.S. state law gives you that right; and
• to appeal a refusal of a privacy request where applicable law provides an appeal right. To exercise a right, email support@perspectis.ai and describe your request. We may ask for information reasonably necessary to verify your identity and authority. We will respond within the timeframe required by applicable law.

You will not be discriminated against for exercising a privacy right. Some rights are subject to legal exceptions, including where we must retain information to comply with law, protect security, establish legal claims or protect the rights of others.

14. EEA and Spain information

For processing subject to the EU GDPR, SyncSphere Global, S.L.U. is the EU/EEA controller for the controller activities described in this Policy where SyncSphere determines the purposes and means of processing. Perspectis AI, Inc. may act as controller for certain United States-facing website and business-development activities. The primary supervisory authority for our Spanish establishment is the Agencia Española de Protección de Datos (“AEPD”). You also have the right to lodge a complaint with a competent supervisory authority in the EEA, including in the Member State of your habitual residence, place of work or place of the alleged infringement.

AEPD information and electronic complaint procedures are available at www.aepd.es. We encourage you to contact us first at support@perspectis.ai so that we can try to address your concern directly.

15. United Kingdom information

If UK data-protection law applies to our processing of your personal data, you may exercise the rights available under the UK GDPR and Data Protection Act 2018, as amended. You may also complain to the UK Information Commissioner’s Office (“ICO”).

SyncSphere Global, S.L.U. is established in Spain and Perspectis AI, Inc. is established in the United States. Neither entity identifies a UK establishment in this Policy. The requirement to appoint a UK representative depends on the nature and scale of the relevant UK processing. Where a UK representative is legally required for our activities, we will appoint one and publish the representative’s contact details in this Policy or an applicable UK notice.

16. United States privacy disclosures

U.S. state privacy laws may give residents additional rights. The scope and availability of those rights depends on the state, the type of data and whether the relevant law applies to our processing.

We do not sell personal information for money. We do not currently share personal information for cross-context behavioural advertising or use personal information for targeted advertising on the Site. We do not knowingly use sensitive personal information for purposes that would require a separate right to limit under the California Consumer Privacy Act (“CCPA”), where the CCPA applies.

If an applicable U.S. law gives you a right to opt out of sale, sharing, targeted advertising or certain profiling and we begin engaging in such activity, we will provide the required opt-out mechanism. Where applicable, we will also process legally recognised browser-based opt-out preference signals as required by law.

17. Canada and other jurisdictions

Where Canadian private-sector privacy law applies, we follow the principles of accountability, identifying purposes, consent where required, limiting collection, limiting use and disclosure, safeguards, openness, access and correction. You may contact us with a privacy question or complaint at support@perspectis.ai.

If another jurisdiction gives you additional mandatory rights that are not described in this Policy, we will honour those rights to the extent the law applies to our processing.

18. Customer Data and organisational users

If you use Perspectis through your employer, law firm, accounting firm or another organisational customer, that organisation generally controls the business content submitted to the service and determines why it is processed. In that context, privacy requests concerning Customer Data should normally be directed to the organisation first. We assist our customers with applicable rights requests in accordance with our DPA.

Perspectis AI, Inc. and/or SyncSphere Global, S.L.U. may separately act as controller for limited account, billing, security, support and relationship-management data concerning customer personnel. Those controller activities are covered by this Policy unless a more specific notice applies.

19. Children

The Site and Perspectis business services are intended for organisations and professional users, not children. We do not knowingly solicit personal data from children through the Site. If you believe a child has provided personal data to us through a public website surface without appropriate authorisation, contact support@perspectis.ai so that we can review and, where appropriate, delete it.

20. Third-party websites, social media and embedded services

The Site may link to LinkedIn, YouTube and other third-party websites or services. We do not control the independent privacy practices of those third parties. If you leave our Site or activate third-party content, the third party may process information under its own privacy policy and terms. We encourage you to review those policies.

21. Changes to this Policy

We may update this Policy as our Site, services, providers or legal obligations change. We will post the revised Policy with a new effective date. If a change materially affects how we use personal data, we will provide additional notice where required by law, such as through the Site, an account notice or email.

22. Contact us

For questions, complaints or requests concerning this Policy or our controller processing, contact:

• Perspectis AI, Inc. — 184 Sigourney St, Suite B6, Hartford, CT 06105, United States (EIN 41-5230930)
• SyncSphere Global, S.L.U. — Calle Marte, Num. 7, 35215 Telde, Las Palmas, Gran Canaria, Spain (NIF B25871807)
• support@perspectis.ai

For ordinary sales enquiries, you may also use sales@perspectis.ai. Please use support@perspectis.ai for privacy rights and privacy complaints so that the request can be routed appropriately.