Privacy policy.

This policy explains how CTRL+SPACE DEVELOPMENT L.P., trading as Ctrl+Space Labs, handles personal data on ctrlspace.dev, as required by the EU General Data Protection Regulation (GDPR).

Who is responsible

What we collect and why

Website visits

Your IP address and the technical data your browser sends, used to deliver the website and keep it secure. Legal basis: our legitimate interest in running a secure website (GDPR Article 6(1)(f)).

Emails you send us

Your email address, name and message, used to reply and to handle any work that follows. Legal basis: our legitimate interest in answering enquiries (Article 6(1)(f)), steps before a contract (Article 6(1)(b)), and keeping business records the law requires (Article 6(1)(c)). Emailing us is optional.

Chat assistant

If you use the chat, your messages and any text you select on the page, used to answer your questions with Gendox, our AI agent platform. Legal basis: our legitimate interest in answering visitors’ questions (Article 6(1)(f)). Using the chat is optional; please do not share sensitive personal information in it.

Who receives it

Our website hosting provider, Cloudflare, and our email provider process this data on our behalf. Cloudflare may process technical data outside the EU, including in the United States, under the EU–US Data Privacy Framework and the European Commission’s Standard Contractual Clauses.

The chat window is served by Amazon Web Services. Chat messages are processed in our EU cloud and sent to the AI model provider that generates the answer. A provider may process data outside the EU, including in the United States; those transfers rely on an EU adequacy decision, such as the EU–US Data Privacy Framework, or on the European Commission’s Standard Contractual Clauses.

You can request information about the applicable transfer safeguard, including a copy where available, by writing to contact@ctrlspace.dev.

How long we keep it

Technical data is kept only for as long as our hosting provider needs it to deliver and secure the website, under its documented retention periods.

Emails are kept for as long as needed to respond to you and to manage any business relationship that follows. We periodically review older emails and delete those we no longer need, unless we must keep them to meet tax, accounting or other legal obligations, or to establish or defend legal claims.

Chat conversations are kept for up to two years, in line with the Gendox data processing terms, and are not used to train AI models.

Your rights

You can ask us to access, correct, delete or export your data, or to restrict or object to how we use it, by writing to contact@ctrlspace.dev. You can also complain to the Hellenic Data Protection Authority.