Privacy policy

1. Controller

• Controller: Metaloss Intelligence S.L.
• TIN: B22435879
• Address: Paseo de la Castellana, 194, planta baja, puerta B, 28046 Madrid, España
• Email: contacto@oficiallm.com
• Phone: 919 469 700

No data protection officer is appointed. Contact: contacto@oficiallm.com, subject “Privacy”.

2. Public website

On oficiallm.com we process contact-form fields (name, email, organisation, message), communications you start by email, phone or WhatsApp, and connection logs (IP, user-agent) for site delivery and abuse prevention. Legal bases: GDPR Art. 6(1)(b) or 6(1)(f). A theme-preference cookie is used for presentation.

3. Product (/app)

When a notary office uses OficialLM, Metaloss Intelligence S.L. acts as processor (GDPR Art. 28). The notary office is the controller. The DPA and sub-processor list are provided with the contract on request.

4. Google user data

When an OficialLM product user connects their Google account, OficialLM may access — through Google APIs and only after the user’s consent — the following Google user data:

• Account profile data (name, email and identifiers) needed to authenticate and link the connection.
• Gmail content (read, compose and send) to show mail in Inbox, sync messages, and reply or send from OficialLM.
• Google Calendar events to display and manage the agenda in OficialLM.

Use: OficialLM uses this data only to provide and improve the product’s user-facing features (inbox, calendar, and related desk workflows, including agents that assist the office with that data at the user’s request). It is not used for purposes other than providing or improving those features.

OficialLM’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

OficialLM does not use Google user data for:

• Targeted, personalized, retargeted or interest-based advertising.
• Selling to data brokers or providing it to information resellers.
• Determining credit-worthiness or lending purposes.
• Creating databases unrelated to providing the service.
• Developing, improving or training non-personalized (generalized) artificial intelligence or machine-learning models.

Sharing: this data is processed only to operate OficialLM (including necessary technical sub-processors such as hosting). It is not sold or transferred to third parties for marketing or for uses prohibited by Limited Use. Disclosure may occur to public authorities when required by law, or for security (for example investigating abuse).

Retention and deletion: data are kept while the connection is active and as directed by the controller (the notary office) and the DPA. You can disconnect Google in the product; after disconnection we stop obtaining new data and delete or stop using associated tokens and data under the DPA timelines, unless a longer period is required by law. You may also request deletion at contacto@oficiallm.com (subject “Privacy”).

Protection: we use encryption in transit, organisation-scoped access control and the measures described on our security page. Humans read specific messages or events only with the user’s agreement, for security, or when required by law.

5. Recipients

Cloudflare (hosting and network), Stripe (billing when contracted), Resend (transactional email for the product). Personal data are not sold.

6. International transfers

Product data are hosted in the European Union. Transfers outside the EEA, if any, rely on Chapter V GDPR safeguards as set out in the DPA.

7. Rights

You may request access, rectification, erasure, objection, restriction and portability at contacto@oficiallm.com, and lodge a complaint with the Spanish AEPD (aepd.es). If your data are held in a customer notary’s desk, exercise rights with that notary as controller.