1. Data Controller
The data controller for your personal data is fuubo.ai, an Artificial Intelligence consulting firm based in Santiago, Chile.
Contact email: contacto@fuubo.ai
Website: https://fuubo.ai
2. Data We Collect
We collect only the data necessary to provide our services. Below we detail what we collect and in what context:
a) Contact form
- Full name
- Email address
- Free-text message
b) AI Maturity Assessment
- Full name and email address
- Company name, industry, and size
- Responses to 25 questions across 7 AI maturity dimensions
- Dimension scores calculated automatically
c) Newsletter
- Email address
d) AI App Ratings
- IP hash (irreversible) — only to prevent duplicate votes. We do not store your real IP address.
e) Technical data (collected automatically)
- IP address (processed by Cloudflare, not stored by fuubo)
- Browser type and operating system (via Google Analytics, if you accepted analytics)
- Pages visited and session duration (Google Analytics, if you accepted analytics)
3. Purpose and Legal Basis of Processing
| Purpose | Data used | Legal basis |
|---|---|---|
| Respond to contact requests | Name, email, message | Legitimate interest (Art. 6.1.f GDPR / Ley 19.628 (Chilean Data Protection Act)) |
| Generate and deliver the Assessment report | Name, email, company, responses, scores | Performance of requested service (Art. 6.1.b GDPR) |
| Send newsletter | Explicit consent (Art. 6.1.a GDPR / Ley 19.628 (Chilean Data Protection Act) Art. 4) | |
| Prevent duplicate votes in the directory | IP hash | Legitimate interest (Art. 6.1.f GDPR) |
| Site analytics and improvement | Session data (Google Analytics) | Explicit consent (Art. 6.1.a GDPR) |
| Security and abuse prevention | IP (Cloudflare), Turnstile responses | Legitimate interest (Art. 6.1.f GDPR) |
Note for EU users: we process your data in accordance with the General Data Protection Regulation (GDPR). You can exercise your rights by writing to contacto@fuubo.ai.
4. Recipients and International Transfers
We work with the following service providers acting as data processors. All have appropriate safeguards for the international transfer of data:
| Provider | Service | Country | Safeguard |
|---|---|---|---|
| Supabase Inc. | Database (assessments, apps, contacts) | USA | DPA + Standard Contractual Clauses (EU) |
| Resend Inc. | Transactional email delivery | USA | DPA + SCCs |
| Vercel Inc. | Web hosting | USA | DPA + SCCs |
| Cloudflare Inc. | CDN, security, Turnstile (anti-bot) | USA | DPA + SCCs |
| Google LLC | Google Analytics (if you accepted analytics) | USA | DPA + SCCs + anonymized IP |
We do not sell or share your personal data with third parties for commercial purposes.
5. Retention Period
- Assessment data: 3 years from the date of the assessment, or until you request deletion.
- Contact messages: 2 years from the last interaction.
- Newsletter subscribers: until you unsubscribe or request deletion.
- IP hash (ratings): 12 months from registration.
- Analytics data (GA4): 14 months (Google's default configuration).
6. Your Rights
Under Ley 19.628 (Chilean Data Protection Act) and, where applicable, the GDPR (European Union), you have the following rights:
- Access: know what data we hold about you.
- Rectification: correct inaccurate or incomplete data.
- Erasure ("right to be forgotten"): request deletion of your data when it is no longer necessary.
- Portability: receive your data in a structured format (JSON/CSV).
- Objection: object to processing based on legitimate interest.
- Restriction: request that we suspend processing while a complaint is resolved.
- Withdrawal of consent: you may withdraw any consent at any time without affecting prior processing.
To exercise any of these rights, write to us at contacto@fuubo.ai stating your name, the right you wish to exercise, and — if applicable — the email address you registered with. We will respond within a maximum of 30 business days.
If you are an EU resident and believe we have not properly handled your request, you may lodge a complaint with your local data protection authority.
8. Security
We apply appropriate technical and organizational measures to protect your data:
- Encrypted communications with TLS/HTTPS across the entire site
- Database access restricted via service keys and Row Level Security (RLS) in Supabase
- Rate limiting and anti-bot protection with Cloudflare Turnstile on forms
- Voting IPs are stored as an irreversible hash (SHA-256 + salt)
- Credentials are never exposed in the frontend
No system is 100% secure. If you discover a vulnerability, we ask that you report it to us responsibly at contacto@fuubo.ai.
9. Minors
Our services are directed at professionals and businesses. We do not intentionally collect data from individuals under 14 years of age. If we detect that we have received data from a minor, we will delete it without delay.
10. Changes to This Policy
We may update this policy to reflect changes in our practices or applicable law. When we make material changes, we will update the "Last updated" date and, if you have an account or subscription, notify you by email.
We recommend reviewing this page periodically. Continued use of the site after changes are published constitutes your acceptance of the new version.
11. Contact
For any questions about this policy or to exercise your rights:
Email: contacto@fuubo.ai
Suggested subject: Privacy — [your inquiry]
Applicable law: Ley 19.628 (Chilean Data Protection Act) and GDPR (EU users)