Privacy Policy

TRALEXIA ("TRALEXIA", "we") operates this decision-support platform for the transport sector. For any matter relating to privacy or to the exercise of your rights, you may write to [email protected].

Controller: David Navarro · Privacy email: [email protected]. NIF: 44975840F · Registered address: Calle Gipuzkoa 38, 48920 Bizkaia, Spain.

We process the following categories of data:

• Account data: name, email address and password (stored using cryptographic hash functions and never in plain text).
• Organisation data: company name, invited members and their role within the organisation workspace.
• Documents you upload: transport orders, contracts, annexes and associated documentation you choose to analyse on the platform.
• Documents imported by email: when you connect and expressly authorise an email integration (Google/Microsoft), the messages and attachments you select for import. This feature is optional and is only activated with your explicit consent.
• Usage and log data: minimal technical events (pages visited, actions performed, errors) without query strings or additional personal data, used to diagnose failures and improve the product.

We process this data to: provide the regulatory analysis and verification service for your transport operations; authenticate and protect your account; generate reports and evidence from the documents you provide; diagnose incidents; and improve the quality and security of the product.

Processing relies, as applicable, on the performance of the service agreement you accept when registering, on your consent (for example, for email integrations) and on our legitimate interest in ensuring the security and proper functioning of the service, in accordance with the GDPR and applicable European law.

To operate the platform we rely on technology providers acting as processors: a hosting and application-execution provider, an object-storage service for documents, and a language-model provider used for text analysis. When you activate the email integrations, Google and/or Microsoft are also involved as the source of the data you import. We do not sell your data or disclose it to third parties for advertising purposes.

When an organisation uses TRALEXIA to analyse documents containing third-party personal data (for example, driver or consignee data in transport orders), TRALEXIA acts as a processor on behalf of that organisation. We have a Data Processing Agreement (DPA) template compliant with Article 28 of the GDPR, which you may request by writing to [email protected].

Account and organisation data are retained while your account remains active. Documents are kept in object storage isolated per organisation for as long as you keep them on the platform. When you close your account, we delete or anonymise your data within a reasonable period, except where we must retain certain information due to a legal obligation.

You may request the deletion of your account and associated documents by writing to [email protected]. We will handle the request without undue delay, except where we must retain certain information due to a legal obligation.

We apply authentication-based access control, data isolation per organisation ("tenant"), encryption in transit (HTTPS), password storage using cryptographic hash functions and separation of configuration secrets outside the source code. No secret or credential is exposed in the interface or in reports.

Your documents are not used to train artificial-intelligence models. The content you upload is processed solely to generate the analysis or verification you request at that moment, and is not used to train or fine-tune our own or third-party models. TRALEXIA's conclusions are grounded in rules verified by people against the official source, not in learning from customer data.

You may request access to, rectification, erasure, restriction and portability of your data, as well as object to certain processing, in accordance with the GDPR. To exercise these rights, write to [email protected].

As a general rule, we process and host data within the European Economic Area. Where one of our technology providers (hosting, object storage or language models) processes data outside the EEA, such transfer is covered by the safeguards provided for by the GDPR — primarily the Standard Contractual Clauses approved by the European Commission and, where appropriate, supplementary measures — so that your data maintains a level of protection equivalent to the European one.

TRALEXIA is a decision-support tool. We do not take decisions producing legal effects concerning you, or similarly significantly affecting you, based solely on automated processing within the meaning of Article 22 of the GDPR. The regulatory analyses and verifications generated by the platform are informative and designed for a professional to review and decide upon; responsibility for the final operational decision always rests with the user.

Without prejudice to any other remedy, if you believe that the processing of your data does not comply with the applicable rules, you have the right to lodge a complaint with the competent supervisory authority. In Spain this is the Spanish Data Protection Agency (AEPD, www.aepd.es); if you reside in another EEA State, the supervisory authority of your country.