Privacy

Who is responsible§1

Replicai is responsible for the personal data described here. For anything about it, write to hello@replicai.ai.

What we keep§2

When you request access to the register of companies, we keep:

• your name, email, organisation, role and interest, and the message you choose to add;
• whether you would like us to write to you about our companies;
• your password, only as a one-way scrypt hash that cannot be turned back into the password;
• when you made the request, gave your consent and last signed in;
• a record of your sign-ins and of changes to your access, kept for security.

If a company is open to you, we also keep:

• the comments and replies you write about its website or platform, with your name, when you wrote them and where (the page, screen, version and, on the platform, the demo company and month you were looking at);
• if its platform is open to you, your own copy of its demonstration, with what you change in it. It is meant for invented data: please do not enter real people’s details;
• a record of when you open its website and its platform, and of when you comment or reply, so the team knows who has seen the latest version.

We do not keep your IP address. To stop abuse, attempts to register, sign in or use a code are counted against a pseudonymised identifier derived from it, never the address itself. Each count is deleted within a day of its window closing.

Why§3

To review your request; if it is accepted, to open the companies that concern you; and to write to you about your request. Only if you tick the optional box do we also write to you about Replicai’s companies. Your comments, and your copy of a platform’s demonstration, are there so that you can review the company’s work with us and with its other partners. The legal basis is your consent, which you can withdraw at any time, and our legitimate interest in keeping the register secure.

How long§4

We keep your details while your account exists. You can ask us to delete them at any time, and we will do so within one month. When an account is deleted, its details and its copies of any platform are removed, its entries in the security record are anonymised, and its comments stay in the conversation without its name. Your copy of a platform also starts afresh whenever you reset it, and when a new version is published (the old copy is deleted the next time you open the platform). If a platform is no longer open to you, your copy of it is deleted. Password links that have expired are deleted within a day.

Who else sees it§5

Your comments and replies, with your name, are read by the other partners the same company is open to, and by Replicai. Nothing else of yours is shown to anyone outside Replicai. The site and its data are hosted by Netlify, Inc., which processes them on our behalf; this may involve servers outside the European Union, under the safeguards the GDPR requires for such transfers. We do not sell your data or share it for advertising.

Your rights§6

You can ask to see, correct or delete your data, to restrict or object to its use, and to receive it in a portable format, by writing to hello@replicai.ai. If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es).

Cookies§7

The site sets no cookies for visitors. Once you sign in, one strictly necessary cookie keeps you signed in for up to 14 days; signing out removes it. Nothing else is stored in your browser. There is no analytics, advertising or third-party tracking.