AmuraAMURA Software
Privacy

Privacy policy.

We treat your data with the same care we put into the workflows we ship to production. Here's what we process, why, for how long and what rights you have.

Last updated
April 26, 2026
Data controller
  • Legal name: Amura Ventures, S.L. (“Amura”), trading as “Amura Software”
  • Registered office: C/ Joan Ripoll Trobat, 34 — 07013 Palma, Balearic Islands, Spain
  • Tax ID (NIF): B67681650
  • Contact email: [email protected]
What data we process
  • Contact details you provide via the form or by email (name, company, email, optional phone, message).
  • Browsing data strictly required for the site to function (server logs, IP address, user agent).
  • Information you voluntarily share when requesting an executive diagnosis.

We do not process special categories of data and we do not ask for information beyond what’s needed to respond or deliver the service.

Purposes and legal bases
  • Handle your contact, proposal or diagnosis request. Legal basis: pre-contractual measures at your request (Art. 6.1.b GDPR).
  • Maintain the commercial relationship and deliver contracted services. Legal basis: performance of a contract (Art. 6.1.b GDPR).
  • Comply with legal obligations (tax, accounting, regulatory). Legal basis: Art. 6.1.c GDPR.
  • Site improvement and abuse prevention. Legal basis: legitimate interest (Art. 6.1.f GDPR), limited to operational logs.
Retention periods

We keep your data for the time strictly necessary for the purpose that justified collecting it: up to six months from last contact if the conversation does not lead to a project, and for the full duration of any contractual relationship plus the legal limitation periods (up to 6 years for tax obligations) otherwise.

Recipients and processors

To run the site and communicate with you we rely on technical service providers acting as data processors under written agreements:

  • Site hosting and CDN provider.
  • Transactional email provider (Resend) for processing form submissions.
  • Internal productivity tools (email, document storage).

Some of these providers are based in the United States. Where international transfers occur, they are made under applicable adequacy decisions and/or Standard Contractual Clauses approved by the European Commission.

We do not sell, rent or share your data with third parties for purposes other than those described above.

Your rights

You can exercise the following rights at any time:

  • Access, rectification and erasure of your data.
  • Restriction of processing and objection to processing.
  • Portability of the data you have provided.
  • Not to be subject to automated decisions producing legal effects.
  • Withdrawal of consent, where consent is the legal basis.

To exercise them, write to [email protected] indicating which right you wish to exercise and, if necessary, attaching proof of identity. We will respond within one month.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) if you believe the processing does not comply with applicable law: www.aepd.es.

AI and customer data

When a project involves customer data, we sign a specific Data Processing Agreement (DPA) and, where applicable, a technical annex covering private environments, retention, access controls, audit logs and safeguards against model training. We do not use customer data to train models without explicit authorization. Our practices are aligned with the GDPR and with the applicable obligations of the EU AI Act.

Cookies

The site uses only strictly necessary cookies for its operation (language preference) and does not require prior consent under applicable rules. If we add analytics or third-party cookies in the future, we will deploy a prior consent mechanism in line with AEPD guidance.

Changes to this policy

We may update this policy to reflect legal, technical or operational changes. The “Last updated” date at the top of this page will always indicate when the most recent version took effect.