Privacy policy

Who is responsible

En Antena Produccions, S.L. (Enacast), tax ID [to be confirmed], registered office [to be confirmed]. For any privacy question, write to hola@enacast.com.

What data this website collects

This website has no forms, no sign-up and no analytics tool. We only process two things:

• The emails you send us (to request a demo, a quote or the pilot): we use them to reply and, if the council wishes, to prepare the contract. Legal basis: pre-contractual steps you ask for (GDPR art. 6.1.b) or our legitimate interest in replying (art. 6.1.f).
• The server's technical logs (IP address, date and page requested), created when any website is visited and used to keep it secure. Legal basis: legitimate interest (art. 6.1.f). Hosting provider: [to be confirmed].

Cookies

This website sets no cookies and stores nothing in your browser. That is why there is no cookie banner.

Data in the EnaScribe service

When a council contracts EnaScribe, the council is the controller of its session data (recordings, transcripts, names of council members and of users) and we are its processor (GDPR art. 28), under a signed data-processing agreement.

Audio is transcribed on our own servers, with speech-recognition models we run ourselves. To draft titles, summaries and minutes, the transcript text is sent to Google (Gemini API). The current sub-processors are:

• Google LLC (Gemini API): receives the transcript text to generate the drafts. It is a US company; the transfer relies on the EU-US Data Privacy Framework and the standard contractual clauses in Google's terms.
• Langfuse GmbH (Germany): receives technical data about AI calls (model, volume and cost) to monitor their quality and spend.
• Hosting provider of the application servers: [to be confirmed].
• Cloudflare, Inc. (Cloudflare Turnstile): once the service is live, the staff login, signup and password-reset forms will use this security service to tell people from bots and prevent automated submissions and abuse. Cloudflare processes the IP address and technical data about the browser and device (such as the user agent and TLS fingerprint). Legal basis: legitimate interest in the security of the service (Art. 6(1)(f) GDPR). It sets no cookies on our domains. Cloudflare acts as a data processor and, when it uses these signals to improve its bot detection, as an independent controller; it may process the data outside the European Union under its data processing terms. More information: https://www.cloudflare.com/turnstile-privacy-policy/.

The public sessions page

The public page where a council publishes its sessions uses no cookies and no tracking identifier. It only stores the language you pick in your browser, so you don't have to pick it again.

How long we keep it

• Emails: for as long as the conversation or business relationship lasts, then for the legal periods that bind us.
• Service data: for as long as the council's contract lasts; at the end we return or delete it as the data-processing agreement says.

Your rights

You can ask to access, rectify or erase your data, restrict or object to its processing, or take it elsewhere by writing to hola@enacast.com. If the data belongs to a council session, contact the council first, as it is the controller; we will help it reply.

If you think we are not handling your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or, for a Catalan council, to the Catalan Data Protection Authority (apdcat.gencat.cat).