Privacy Policy

1. Data Controller

In compliance with Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 on Personal Data Protection (LOPDGDD), the data controller responsible for processing your personal data is:

2. What Personal Data We Collect

Depending on how you interact with ChemSource AI, we may collect the following categories of personal data:

• Contact & identity data: Full name, business email address, and company name provided through our registration and contact forms.
• Product usage data: CAS numbers, chemical specifications, and other inputs you enter while using the platform.
• Communication data: Messages and inquiries you send through our contact form.
• Technical & log data: IP address, browser type, operating system, referring URLs, and pages visited, collected automatically via our web server and analytics tools (Google Tag Manager / Google Analytics).
• Cookies: Session and analytics cookies as described in Section 7.

3. Purposes and Legal Basis for Processing

4. Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this policy, or as required by applicable law. In general:

• Customer account data is kept for the duration of the contractual relationship and for up to 5 years after termination, in accordance with Spanish commercial law.
• Contact and enquiry data is retained for up to 3 years from the last interaction.
• Analytics data is retained in aggregated or pseudonymised form for up to 26 months.

5. Data Sharing and International Transfers

We do not sell your personal data. We may share it with trusted third-party service providers that help us operate our business, including cloud infrastructure providers, analytics platforms, and automation tools. All processors are bound by data processing agreements and provide sufficient guarantees under GDPR.

Where data is transferred outside the European Economic Area (EEA), we ensure adequate safeguards are in place through Standard Contractual Clauses (SCCs) or equivalent mechanisms approved by the European Commission.

6. Your Rights

Under applicable data protection law, you have the right to:

• Access: Request a copy of the personal data we hold about you.
• Rectification: Ask us to correct inaccurate or incomplete data.
• Erasure: Request deletion of your data where there is no compelling reason for us to continue processing it.
• Restriction: Ask us to restrict the processing of your data in certain circumstances.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to processing based on legitimate interests or for direct marketing.
• Withdraw consent: Where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise your rights, contact us at narcis@chemsource.app. You also have the right to lodge a complaint with the Spanish data protection authority (AEPD — Agencia Española de Protección de Datos).

7. Cookies

ChemSource AI uses cookies and similar tracking technologies to ensure the website functions correctly and to understand how visitors use our site. We use:

• Essential cookies: Required for the website to function. They cannot be disabled.
• Analytics cookies: Set by Google Analytics/Google Tag Manager to collect anonymous usage statistics. You can opt out via your browser settings or the Google Analytics opt-out browser add-on.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. However, no transmission over the internet is completely secure, and we cannot guarantee absolute security.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

10. Contact

For any questions or requests regarding this Privacy Policy or your personal data, please contact us at: