1. Data controller
- Controller: BIGATPV, S.L. (sole-shareholder company)
- Tax ID: B05673181
- Contact: info@getbiga.com
- Registered office and company details: see the legal notice.
2. What data we process
We only process the data you give us or that is generated when you use the site:
- Demo, contact and calculator forms: name, email, phone (if you provide it), restaurant details (town, number of venues) and the content of your message.
- Technical connection data: like any website, the server logs technical data (such as your IP address) for security and operation. Visit analytics are anonymous and cookie-free (see the cookie policy).
- WhatsApp support: if you message our WhatsApp support, your number, profile name and messages (see section 9).
We do not ask for special categories of data and we do not profile users.
3. Purpose
We use your data to handle your request (booking a demo, answering a question or contacting support) and, if you sign up for Biga, to manage the contract and billing.
Only if you tick the box on the form will we send you Biga news and tips by email. You can unsubscribe at any time from any email or by writing to us. We do not sell your data or use it for third-party advertising.
4. Legal basis
Handling your request is based on your consent when you submit the form and on the pre-contractual steps you ask us to take; marketing emails, on your explicit consent; site security, on our legitimate interest; and customer billing, on the contract and legal obligations.
5. How long we keep it
We keep request data while there is a relationship and for at most 24 months after the last contact if you do not become a customer. Marketing data, until you unsubscribe. Customer data, for the duration of the contract and then, blocked, for the legal (tax and commercial) retention periods.
6. Recipients and processors
We do not share your data with third parties unless legally required. We rely on these providers, acting as data processors:
- Vercel (USA): website hosting and anonymous visit analytics.
- Supabase (EU servers, Frankfurt): database where form requests are stored.
- Resend (USA): email delivery.
- Cloudflare (USA): bot protection for the forms (Turnstile) and site availability.
- Stripe (Ireland/USA): collecting subscription fees from Biga customers. Payment data is handled directly by Stripe; we never see your card number.
- Meta Platforms Ireland (WhatsApp; Ireland/USA): handles the messages of our WhatsApp support. The content is stored in the European Union.
- Anthropic (USA): the AI assistant of our support, which reads the request to prepare or give the answer. It does not use the data to train its models and deletes it within 30 days at most.
Some of these providers may access data from the United States. In those cases the transfer relies on the safeguards provided by the GDPR: the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@getbiga.com. If you believe we have not addressed your rights, you can lodge a complaint with the Spanish Data Protection Agency (aepd.es).
8. Security
We apply reasonable technical and organisational measures to protect your data against unauthorised access, alteration or loss.
9. WhatsApp support and AI assistant
If you message Biga's WhatsApp support, we process your number, your profile name and your messages to handle your request or incident and, if you are a customer, we link them to your restaurant. The legal basis is the contract or your request, and our legitimate interest in the security of the service. Please do not send us ID documents, bank details or passwords through this channel.
Some answers are given by an AI virtual assistant and others by a person on our team, who also reviews the ones the assistant prepares. The assistant's first message tells you so, and you can always ask to talk to a person by writing PERSONA. The assistant only handles questions about using Biga (for example, how to do something or why a printer is not printing) and never decides on payments, invoices or tax data. To answer, the assistant may check technical data about your venue in Biga: the status of the printers, the kitchen screen and the till (no amounts), the reservation settings and number of bookings (no customer data) and, for your team, first names and whether a PIN is locked (never the PIN itself). We do not make automated decisions with legal effects on you.
We keep support conversations for 24 months after the case is closed. Meta keeps them on its servers for 30 days at most. The <strong>screenshots</strong> (images) you send us on WhatsApp are not stored by Biga: the assistant looks at them at that moment to understand your question and, to do so, sends them to Anthropic together with the conversation. Other files (voice notes, documents, videos) are not downloaded.