Privacy Policy

Data controller

Iván Mauricio Meneses Guerrero, with tax ID Z1544617B, operating under the trade name STEAMNODE as a natural person (no corporate entity has been formed under the name STEAMNODE), based in Arrecife, Lanzarote, España, 35500. Contact email: info@steamnode.es. You can also reach us through the /contacto form, which routes to this same address.

What data we collect

Only what you voluntarily provide through the contact form: name, company (if provided), email, phone (if provided), and the content of your message. The site has no storage backend of its own: the form builds an email (mailto:) that is sent from your own email client, not from our servers. In the current version of the site, no analytics or advertising cookies are used (see Cookie Policy).

In addition, if you request a test call for the VOICE system (page /demos/voice), we collect: name, company or activity, phone number (with international prefix), the scenario you want to test, and optionally a brief description of it. Submission is only possible if you actively check the consent box (it is never pre-checked), and the date and time you did so is recorded.

What we use it for

To respond to your inquiry, analyze the information request you make, prepare a proposal or assessment if you ask for one, and manage communication arising from a possible business relationship. We do not use your data for newsletters, automated marketing, advertising profiling, or remarketing — none of those uses exist on the site today.

Legal basis

Processing is based on your consent, which you give by voluntarily submitting the contact form or the email derived from it. When your inquiry asks for information about a specific service, processing is also covered by the pre-contractual measures you request yourself (GDPR Article 6.1.b). No legal obligation or legitimate interest is invoked for this processing, because neither applies to ordinary commercial contact.

Who we share your data with

We do not sell or transfer your data to third parties for commercial purposes. The third parties involved, each only for what applies to them, are:

• Vercel Inc. (U.S.) — hosts this website and may log technical access data (IP address, user agent) as part of the normal operation of any hosting service, never the content of your form. Being based in the U.S., an international transfer of that technical data may occur; the applicable safeguard mechanism will be documented here once formalized.
• OpenAI (U.S.) — processes the text you write when you talk to Iris, to generate its response (see below).
• n8n, hosted on the STEAMNODE team's own server (EasyPanel infrastructure) — receives and stores the data you submit in the VOICE test-call request form (see below). It is not involved in the general contact form, which is mailto: only.
• Telegram Messenger Inc. — receives an internal alert with your VOICE request details, so the sales team can review it and contact you.

The content of your general contact message does not pass through any of these third parties: it travels directly from your email client to info@steamnode.es when you decide to send it. We do not use any analytics, advertising, error-tracking, or third-party form service — we have verified this directly in the site's code, it is not a generic statement.

Iris, the site's digital agent

This site includes Iris, a conversational agent that can answer questions about STEAMNODE, guide you on investment, and, if you decide, log a contact request. When you talk to Iris:

• The text of your message is processed via OpenAI (a U.S. artificial intelligence provider) to generate the response — this is an international data transfer, subject to standard contractual clauses or another safeguard mechanism applied by OpenAI.
• The conversation is identified with an anonymous session identifier, not with your identity, unless you yourself provide personal data (name, email, phone) when requesting follow-up.
• The conversation history is stored temporarily in your own browser (local storage, not on our servers), expiring 24 hours after your last message, so Iris can keep context while you talk to it. See the technical detail in our Cookie Policy.
• If you decide to request an assessment or human contact, that data is stored in STEAMNODE's own storage (isolated, not mixed with any other project's) so the team can follow up.

Test call request (VOICE)

When you submit the test call request form, your data is stored in STEAMNODE's own storage (isolated, not mixed with any other project's) and the sales team receives an internal notification of the request. That internal alert is routed through Telegram (Telegram Messenger Inc.) and includes the data you yourself provided in the form.

• No automatic call is triggered by submitting the form: the team reviews the request before activating the test call.
• The phone number is only used for what you requested (testing VOICE) and so the team can handle your request.
• Submission is idempotent: if your browser retries the submission, no duplicate requests are created.

How long we keep your data

The retention period depends on the type of relationship: if your inquiry does not lead to a business relationship, we keep your data for a maximum of 12 months from your last contact, after which it is deleted. If it becomes a contractual relationship, we keep the data for as long as that relationship lasts and up to 6 years after it ends, under the record-keeping obligation for commercial and accounting documentation set out in Article 30 of the Spanish Commercial Code. Your conversation history with Iris is kept for a maximum of 24 hours in your own browser (see our Cookie Policy). You can request deletion of your data at any time within those periods.

Your rights

You can request access, rectification, erasure, objection, restriction of processing, and portability of your data by writing to info@steamnode.es or through the /contacto form. We will respond within the maximum period set by the GDPR (one month, extendable to two in complex cases, with notice of the reason).

If you believe the processing of your data doesn't comply with the regulation, or you haven't received a satisfactory response when exercising these rights, you can file a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, AEPD), the competent supervisory authority: www.aepd.es.

Data Protection Officer

There is no obligation to appoint a Data Protection Officer (DPO) under Article 37 of the GDPR: STEAMNODE does not carry out large-scale processing of special categories of data, nor large-scale systematic monitoring of individuals — the two conditions that would trigger this obligation. For any privacy question, the point of contact is the one indicated under “Data controller”.

Security

This site is hosted on Vercel and all communications travel encrypted via HTTPS.