Terms & policies

1. Data controller

The controller of the personal data collected through this website is Castany Carranza Adrià, Spanish tax ID (NIF) 48219934C, registered address at Calle Can Targa, Núm. 27 C, 08320 El Masnou (Barcelona), Spain, operating under the trade name "Intake".

You can reach the controller at adriacastany@intake.es or by phone at +34 603 388 548.

The website operates under the domain intake.es and the contact point for privacy matters is info@intake.es.

2. What data we may process

We may process the data you provide directly when you contact us, for example by email or through forms that may be added to the site.

Depending on the channel used, this may include identification and contact details, the content of your message, and any information needed to answer your request.

• Name and contact details, if you provide them.
• Message or request content.
• Aggregated technical and usage data if you accept analytics.

3. Purposes of processing

We process data to answer enquiries, handle requests, maintain service-related communications, and protect the basic security of the site.

If you accept analytics cookies, we may also use aggregated usage information to better understand how the site is used and improve it.

4. Legal basis

The legal basis depends on the context. In many cases it will be the application of pre-contractual measures or the performance of the relationship requested by the data subject when contacting us with an enquiry or request.

In other cases, the basis may be consent, for example for analytics, or legitimate interest to ensure security, prevent abuse, and properly manage the operation of the site.

5. The Intake platform and our customers data

Beyond this website, we offer Intake, a customer service platform that brings a company messaging channels into a single inbox and includes an AI agent that can reply and hand the conversation over to a person.

When a company subscribes to Intake, that company is the data controller for its own customers data and we act as a data processor, handling that data solely on its instructions and to provide the service.

We do not use the content of our customers conversations for our own purposes, and we do not sell it or share it with third parties for advertising.

• Customer company account data and data about the people on their team.
• Content of the conversations held with their end users.
• Technical metadata needed to deliver and order the messages.

6. Messaging channels and WhatsApp Business

Intake lets customers connect third-party messaging channels. For WhatsApp, our customers connect their own WhatsApp Business account through Meta Embedded Signup, explicitly authorising us to operate that channel on their behalf.

Through that channel we process the end user phone number, their profile name where provided, and the content, attachments and timestamps of the messages exchanged. This data is shown in the customer company inbox and may be processed by the AI agent in order to draft a reply.

Meta Platforms Ireland Limited acts as the provider of the WhatsApp Business platform and processes the messages in order to deliver them, under its own policies. Communication with end users over WhatsApp is additionally subject to the WhatsApp terms.

The customer company can disconnect the channel at any time from Intake. When they do, we revoke access to their WhatsApp Business account and delete the credentials we had stored.

• End user phone number and profile name.
• Message content and attachments.
• Date, time and delivery status of each message.

7. Recipients and third parties

As a rule, we do not disclose personal data to third parties unless we are legally required to do so or it is necessary for technical services linked to the operation of the site.

If you accept analytics, Google LLC may process certain technical and usage information as the provider of Google Analytics 4, subject to its own terms and policies.

When a customer company connects a messaging channel, the provider of that channel processes the messages in order to deliver them. For WhatsApp that provider is Meta Platforms Ireland Limited. We also use cloud infrastructure providers to host the service; they act as sub-processors and are bound by confidentiality and security obligations.

8. International processing

The use of certain technology providers may involve international processing of data outside the European Economic Area.

In particular, this may happen if you accept Google Analytics 4. This is a reasonable inference based on the provider in use and should be read together with its contractual and privacy documentation.

9. Retention period

We will keep personal data for as long as needed to answer your request, maintain the relevant relationship, or comply with legal obligations.

When the data is no longer needed, it will be deleted or retained in a restricted way for the legally required periods where applicable.

10. Your rights

You may request access to your data, rectification, erasure, objection, restriction of processing, and, where applicable, data portability. You can exercise these rights, including deletion of your account and data, from our contact page at intake.es/en/contact or by writing to info@intake.es.

If you are an end customer of a company that uses Intake and want to exercise your rights over the conversations you had with them, please contact that company, which is the data controller. If you write to us directly, we will pass your request on to them.

You may also withdraw your consent at any time where processing is based on consent. You also have the right to lodge a complaint with the Spanish data protection authority if you believe the processing does not comply with applicable law.

11. Minors

This website is not specifically directed at minors. If we become aware that personal data from minors has been provided without an adequate legal basis, we may delete it.

12. Changes to this policy

We may update this privacy policy if the law changes, if the service evolves, or if new data processing activities are introduced.

The current version will always be the one published on this page.