In brief
- We collect only what you send us through the enquiry form, the voice assistant or email, plus the technical data any website needs to work.
- We use it to reply to you and prepare a conversation. We never sell it or use it for advertising.
- This site sets no analytics, advertising or tracking cookies.
- Enquiries are deleted after 24 months unless we start working together.
- You can ask to see, correct or delete your data at any time by writing to contact@iura.ai.
Who we are
IURA is a product and trading name of BLOCK VENTURES sp. z o.o., a company registered in Poland under company number 6462979837 (“IURA”, “we”, “us”). We are the controller of the personal data described in this policy.
For anything about this policy or your data, write to contact@iura.ai.
What this policy covers
This policy covers the personal data we collect through iura.ai and its Italian edition, through the voice assistant on the site, and when you email us or speak to us about our services.
When we work for a client, the personal data we handle inside that client’s systems is governed by the contract and data processing terms agreed with that client, not by this policy.
What we collect and why
When you send an enquiry
The enquiry form asks for your name, work email, organisation, the service you are interested in and a short description of your situation. With it we record the page you sent it from, the time, and your browser’s technical description (the user agent), which helps us spot spam.
We use this to reply to you, prepare a first call and, if you ask for one, a proposal. Our legal basis is taking steps at your request before a possible contract, and our legitimate interest in answering business enquiries (Article 6(1)(b) and (f) GDPR).
Please don’t put sensitive information, such as health details, or personal data about other people in the description. A description of the process and its volumes is all we need.
When you use the voice assistant
The voice assistant on the site is an AI agent, not a person, and it runs on ElevenLabs. When you start a conversation, your browser asks for permission to use your microphone. What you say is processed so the assistant can answer you, and the conversation is recorded and transcribed.
When the conversation ends, we receive the transcript, a summary and the details you chose to give: for example your name, email, organisation, role, the process or goal you described, your timing, the language you used and whether you agreed to be contacted. The assistant also rates how well each enquiry fits our services, so we can reply in a sensible order. A person reads every enquiry and decides what happens next. No decision about you is made automatically.
We contact you after a voice conversation only if you agreed to it during the call. The legal basis is the same as for the enquiry form. If you’d rather not be recorded, use the form or email us instead.
When you browse the site
Like any website, iura.ai receives technical data from your browser: your IP address, browser and device type, the pages you request and when. Our hosting provider, Cloudflare, processes this to deliver the pages and protect the site from attacks, and our server logs keep it briefly so we can fix errors. Our legal basis is our legitimate interest in running a secure, working website (Article 6(1)(f) GDPR).
To show the voice assistant, every page loads the ElevenLabs widget from the unpkg.com content network and connects to ElevenLabs. Those services receive your IP address and browser details when this happens, even if you never start a conversation.
When you email or speak to us
If you email us, book a call or meet us, we keep the correspondence and our notes so we can follow up and, if we work together, run the engagement. The legal basis is the same as for the enquiry form, or the performance of our contract once there is one.
Cookies
This site sets no analytics, advertising or tracking cookies, and it stores nothing in your browser when you visit. Our fonts are served from our own domain. If you start a voice conversation, ElevenLabs may use your browser’s storage to run the call.
Because we only use what is strictly necessary, we don’t show a cookie banner. If that ever changes, we will ask for your consent first.
Who we share it with
We don’t sell personal data, and we don’t share it with anyone for their own marketing. A small number of providers process it on our behalf, under contracts that oblige them to protect it and to use it only on our instructions:
- Cloudflare: hosting and security for the website, and storage of enquiries.
- IONOS: our email, which is how enquiry notifications reach us.
- ElevenLabs: the voice assistant, including recordings and transcripts.
We may also disclose personal data to professional advisers bound by confidentiality, to a buyer or successor if our business is reorganised or sold, or where the law requires it.
International transfers
Some of our providers, including Cloudflare and ElevenLabs, are based in the United States or process data there. When personal data leaves the European Economic Area or the United Kingdom, we rely on an adequacy decision (such as the EU-US Data Privacy Framework and its UK extension, where the provider is certified) or on the Standard Contractual Clauses approved by the European Commission, with the UK addendum where it applies.
How long we keep it
- Enquiries from the form and the voice assistant: up to 24 months from our last contact, then deleted, unless we start working together.
- Voice recordings held by ElevenLabs: no more than 90 days.
- Client records: for the length of the engagement, then for as long as the law requires, for example under tax and accounting rules.
- Technical logs: a few days, and never more than 30.
Your rights
Under the GDPR, and the UK GDPR if you are in the United Kingdom, you can ask us to:
- give you a copy of your personal data and explain how we use it;
- correct data that is wrong or incomplete;
- delete your data;
- restrict how we use it;
- give you the data you provided, or send it to another organisation, in a portable format;
- stop using it where we rely on our legitimate interests, and at any time for direct marketing.
Where we rely on your consent, you can withdraw it at any time. This doesn’t affect anything we did before.
To use any of these rights, write to contact@iura.ai. It’s free, and we reply within one month. We may first ask you to confirm your identity.
You also have the right to complain to a data protection authority. Our lead authority is the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych, uodo.gov.pl). You can also complain in the country where you live or work: in Italy to the Garante per la protezione dei dati personali (garanteprivacy.it), and in the United Kingdom to the Information Commissioner’s Office (ico.org.uk). We’d be grateful for the chance to sort out your concern first.
Security
We protect personal data with access controls and encrypted connections (HTTPS for the site, TLS for email), and only the people who need it can see it. No system is perfectly secure. If a breach puts your data at risk, we will tell you and the authorities where the law requires.
Children
Our services are for businesses. This site is not aimed at children, and we don’t knowingly collect data from anyone under 16.
Changes to this policy
We update this policy when our services or the law change. The date at the top shows the current version. If a change affects how we use data you have already given us, we will tell you.