Who we are
This site is operated by Sekit Technologies, Sociedad Limitada ("Sekit", "we", "us"), a company registered in Spain.
Registered office: C/ Cronista Carreres 10, Bajo, 46003 Valencia, España.
General contact: hello@sekit.ai. Privacy questions: privacy@sekit.ai.
What data we collect
When you visit the site, we receive technical data your browser sends automatically: IP address, browser type, device, operating system, and the pages you visit. We only record analytics about how you use the site if you accept analytics cookies.
When you run the free assessment at /assess, we collect the email you give us so we can deliver your report and let you resume a session. We also collect your answers to the assessment questions (your business profile, your industry, your context) and information about your domain or company that is already publicly visible online.
The publicly-visible information we look up about your domain comes from these source categories: WHOIS records, DNS records, public TLS / SSL certificate transparency logs, and public technology fingerprints (the same kind of data anyone can fetch with a browser). We do not access protected or paywalled sources.
When you book a call or submit a form, we collect your name, email, company name, and anything you write in the message field.
Discovery call recordings
When you book a free initial call with Sekit ("discovery call"), that call may be recorded with an AI note-taking assistant. We tell you in writing in the calendar invite and verbally at the start of the call, before activating the recording.
Legal basis: explicit consent (GDPR Article 6(1)(a)). You can decline at the start of the call and the recording will not be activated. Your refusal does not affect our willingness to have the conversation.
We use the recording only to take structured notes, follow up on what was discussed, and prepare a tailored proposal if you decide to proceed. We do not use it to train AI models, we do not share it with third parties for commercial purposes, and we do not publish it.
The recording and transcript stay locally on the Sekit consultant's device. The AI note-taking assistant processes the audio for transcription and summarization; the current provider is listed under "Who we share data with" below.
Retention: up to 12 months from the date of the call. If you ask for earlier deletion, we process the request within 30 days at most.
Your GDPR rights (access, rectification, erasure, withdrawal of consent, lodging a complaint with the AEPD) apply to this data too. Write to privacy@sekit.ai.
Why we collect it (legal bases under GDPR Article 6)
Site usage and analytics: improving the site and the product. Legal basis: your consent (you can decline analytics in our cookie banner).
Assessment answers and email: delivering the service you asked for. Legal basis: performance of a contract.
Booking forms and contact messages: responding to your inquiry and providing the service you asked about. Legal basis: legitimate interest, or performance of a contract once we agree on scope.
Service emails (like your report being ready): delivering the service. Legal basis: performance of a contract.
Who we share data with
We use the following sub-processors. Each one is GDPR-compliant or covered by Standard Contractual Clauses for transfers outside the EU.
Anthropic (United States): runs the language models that draft assessment results.
ElevenLabs (United States): powers the voice option of the assessment.
Cal.com (Germany / United States): handles calendar bookings.
Granola (United States): AI note-taking assistant that transcribes and summarizes discovery calls when you give consent. The recording and transcript stay locally on the consultant's device; Granola processes the audio to generate the summary.
Vercel (United States): hosts the marketing site. Covered by Standard Contractual Clauses.
Hetzner / AWS (Germany): hosts the API and database in Frankfurt.
When we add product analytics or marketing tools in a future release, we will update this page and the cookie banner before any new data leaves the site.
We do not sell your data. We do not use your data to train AI models.
International transfers
Some of our sub-processors are based in the United States. Transfers are covered by the European Commission's Standard Contractual Clauses and the supplementary measures required under the GDPR. We continue to monitor the legal framework and will update sub-processors if a transfer becomes non-compliant.
How long we keep your data
Assessment data: 24 months after your last activity, then deleted.
Contact-form messages: 24 months.
Site analytics: 14 months.
Booking records and invoices: 5 years, as required by Spanish tax law.
You can ask us to delete any of this earlier; see your rights below.
Your rights under GDPR
You have the right to ask what data we hold about you (access), correct it if it is wrong (rectification), ask us to delete it (erasure), ask us to restrict how we use it (restriction), object to certain processing (objection), get a copy of your data in a portable format (portability), and withdraw your consent at any time (where consent is the legal basis we used).
You also have the right to lodge a complaint with the Spanish data-protection authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es.
To exercise any of these rights, write to privacy@sekit.ai. We respond within 30 days.
Cookies and tracking
See our Cookie Policy at /cookies for the full list of cookies we use, what each one does, and how to manage them.
Automated decision-making
The assessment uses AI to draft a first version of your scoring, risk list, and report. The output is shown to you for review, and you can always reject it or talk to a human. We do not make automated decisions that have legal or similarly significant effects on you without human review.
Changes to this policy
When we change this policy, we update the date at the top and post a banner on the site for 30 days. If the change is material, we email you about it.