Privacy Policy

The purpose of our Privacy Policy is to inform about the processing and protection of personal data of users and customers that may be collected by browsing, contracting services through the website https://getshowme.ai, or by using any of the services, applications, and platforms used by ShowMe to offer their service.

In this sense, ShowMe guarantees compliance with current regulations on the protection of personal data, reflected in the Organic Law 3/2018, of December 5, on the Protection of Personal Data and Guarantee of Digital Rights (LOPD GDD). It also complies with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons (GDPR).

ShowMe has adopted the levels of protection legally required, and has installed all the technical measures at its disposal to prevent the loss, misuse, alteration, unauthorized access by third parties, exposed below. The use of the web site implies the acceptance of this Privacy Policy as well as the conditions included in the Legal Notice.

1. Person responsible for processing

The organization ShowMe Labs S.L., domiciled in, Avenida de Europa 7, P1, 43, 28224, Pozuelo de Alarcón, with N.I.F. B21952239, contact email: quique@getshowme.ai, hereinafter "ShowMe".

2. Purpose of processing

We will treat your personal data provided through our web forms and conversations with our AI agents to:

• Attend to the requests and incidents transferred through our contact channels incorporated in the web page.
• To understand the behavior of the navigator inside the web in order to detect possible computer attacks to our web.
• To comply with the legal obligations that are directly applicable to us and regulate our activity.
• To protect and exercise our rights or respond to claims of any kind.
• To send commercial communications related to the goods or services that make up our activity, and/or news or bulletins related to our sector.
• To manage the commercial relationship.

3. Legal basis

The applicable legal basis complies with the requirements of the current legal framework in relation to data processing and with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

• In the consent you have given us to process your data for the purposes indicated.
• To comply with the legal obligations that apply to us. In this case, the data subject may not refuse the processing of personal data.
• In our legitimate interest to protect our image, business and track record by preventing attacks on our website. In this case, the data subject may not refuse the processing of personal data, but may exercise, where appropriate, the rights recognized in paragraph eight of this policy.
• Execution of a contract to which it is a party or application of pre-contractual measures.
• In the consent you have given us to process your data for purposes unrelated to the development or execution of the existing contract.

Refusal to provide your personal data will make it impossible to process your data for the aforementioned purposes.

The Courts of Madrid (Spain) shall have exclusive jurisdiction with respect to all disputes arising out of or in connection with this Agreement. Attempts to solve disputes informally shall not prevent the Parties from submitting such disputes to the Courts.

4. Data retention

The personal data provided will be kept for the time necessary to fulfill the purposes for which they were initially collected. Once the data are no longer necessary for the processing in question, they will be kept securely blocked in order to, if necessary, make them available to the competent Public Administrations and Bodies, Judges and Courts or the Public Prosecutor's Office, in accordance with the statute of limitations for actions that may arise from the relationship maintained with the customer and/or the legally stipulated retention periods.

Data lockout period:

• THE CIVIL CODE. Between 5 or 15 years depending on the case, in accordance with the provisions of article 1964.2 of the aforementioned legal body.
• THE COMMERCIAL CODE. For 6 years, in accordance with the provisions of Article 30 of the aforementioned legal body. It applies to commercial information related to (invoices issued and received, tickets, rectifying invoices, bank documents, etc.).
• THE GENERAL TAX LAW. For 4 years in accordance with the provisions of articles 66 to 70 of the aforementioned law. It applies to information related to tax obligations.

5. Recipients

We do not disclose your personal data to anyone, with the exception of those public or private entities to whom we are obliged to provide your personal data in order to comply with any law.

For the duration of the processing of your personal data, the organization may transfer your data to the following recipients:

• Judges and Courts.
• State Security Forces and Corps.
• Other competent public authorities or bodies, when the data controller has a legal obligation to provide the personal data.

Ensuring that access, inspection, processing and provision of the personal data shall take place only in accordance with the need-to-know principle, i.e. information shall be provided only to those persons who require the personal data for their work in relation to the performance of the Services.

6. International data transfers

ShowMe application is hosted on USA servers. We use some analytics, hosting and internal communication services to support our business. You can check our full list of data subprocessors below in section "11 Data Subprocessors"

7. Security

To protect your personal data, ShowMe takes all reasonable precautions and follows industry best practices to prevent the loss, misuse, improper access, disclosure, alteration, or destruction of your personal data.

We maintain internal policies and procedures, and procure that our Subprocessors do so, which are designed to:

• Secure any User Personal Data Processed by us against accidental or unlawful loss, access or disclosure.
• Identify reasonably foreseeable and internal risks to security and unauthorized access to User Personal Data Processed by us.
• Minimize security risks, including through risk assessment and regular testing.

We will conduct periodic reviews of the security of our network and the adequacy of our information security program as measured against industry security standards and our policies and procedures, and will use reasonable efforts to procure that our Subprocessors do so as well.

We will periodically evaluate the security of our network and associated services to determine whether additional or different security measures are required to respond to new security risks or findings generated by the periodic reviews, and will use reasonable efforts to procure that our Subprocessors do so as well.

The website is hosted on Replit. Our data centers are stored in Google Cloud. The security of your data is guaranteed, as these services take all the necessary security measures. In this sense, most of the security, encryption, etc. is managed by their system. You can consult their privacy policy for more information.

Here is a summary of data protection policies we have in place:

• All communications use SSL and TLS 1.2 to communicate with all systems.
• All data is stored encrypted following the industry standard with AES-256 algorithm.
• All administrator's actions that are performed in the production systems are logged.

Your can contact us at quique@getshowme.ai and ask us for our security policy.

8. Rights

Interested parties may at any time and free of charge exercise their rights of access, rectification and deletion, as well as request that the processing of their personal data be limited, oppose the processing, request the portability of their personal data (whenever technically possible) or withdraw the consent given, and if applicable, where appropriate, not to be subject to a decision based solely on automated processing, including profiling.

To do so, you may use the forms provided by the organization, or send a letter to the postal address or e-mail address indicated above. In any case, your request must be accompanied by a photocopy of your ID card or equivalent document, in order to prove your identity. In case you feel that your rights concerning the protection of your personal data have been violated, especially when you have not obtained satisfaction in the exercise of your rights, you may file a complaint with the competent Data Protection Supervisory Authority (Spanish Data Protection Agency), through its website: www.agpd.es.

In compliance with the provisions of Article 21 of Law 34/2002 of services of the information society and electronic commerce, if you do not wish to receive more information about our services, you can unsubscribe by sending an email to the address quique@getshowme.ai, with subject "UNSUBSCRIBE".

9. Accuracy of data

The interested party guarantees that the data provided are true, accurate, complete and up to date; undertaking to inform of any change with respect to the data provided, through the channels provided for this purpose and indicated in point one of this policy. The user will be responsible for any damage or harm, both direct and indirect, that may be caused as a result of non-compliance with this obligation. In the event that the user provides data of third parties, he/she declares that he/she has the consent of the interested parties and undertakes to transfer the information contained in this clause, exempting the organization from any liability arising from failure to comply with this obligation.

10. Google Gmail Integration

ShowMe allows users to connect their Gmail account to automate sending follow-up emails to prospects after product demonstrations.

Data We Access

• Email Reading (gmail.readonly): We access your inbox only to detect if a prospect has replied to an email sent by ShowMe, allowing us to automatically pause follow-up sequences.
• Email Sending (gmail.send): We send emails on your behalf to prospects who have participated in product demonstrations, always under your control and configuration.

How We Use This Data

• We only read emails related to conversations initiated by ShowMe
• We do not store the full content of your emails
• We do not share your emails with third parties
• We do not use your emails for advertising or AI training

How We Store This Data

• Access tokens are stored encrypted with AES-256
• We only store necessary metadata (message ID, thread ID, date)

How to Revoke Access

You can disconnect Gmail at any time from your account settings in ShowMe, or from your Google account at https://myaccount.google.com/permissions

11. Data Subprocessors