Privacy Policy
Last updated: October 11, 2026
1. Who is responsible for your data
Hikari Minds, S.L. (Prominence AI, a Miraiku company) · Tax ID (NIF) B26752592 · Av. Ciudad de Barcelona 138, escalera 5, 7.º B, 28007 Madrid, Spain · [email protected]
2. What data we process, why, and on what legal basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Answer the contact form | Name, email, company, what you tell us and how you heard about us | Steps taken at your request before a contract (art. 6.1.b GDPR) | 2 years from the last contact |
| Arrange and hold demos | Name, email, company, role and what you tell us when you book through Calendly | Steps taken at your request before a contract (art. 6.1.b GDPR) | 2 years from the last contact |
| Provide Prominence AI, on a free trial or paid plan, and invoice it | Account details, platform usage and billing details. Card details are handled directly by Stripe | Performance of the contract (art. 6.1.b) and legal obligations (art. 6.1.c) | While the contract lasts, then the legal periods (up to 6 years for commercial and accounting records) |
| Email you about your trial and your account (setup, results, billing notices) | Email and usage data | Performance of the contract (art. 6.1.b) | While the account exists |
| Send you commercial communications (news, studies, webinars) | Name, email, company and your interactions with our emails | Your consent (art. 6.1.a GDPR and art. 21 LSSI). You can withdraw it in any email | Until you withdraw your consent |
| Offer customers products similar to the ones they use | Art. 21.2 LSSI. You can object in every communication | While you are a customer | |
| Contact professionals at companies that may be interested in Prominence AI (B2B prospecting) | Name, role, company and professional contact details from professional sources (public LinkedIn profiles and Apollo.io) | Legitimate interest in promoting our services to professionals (art. 6.1.f). We tell you in the first contact and you can object at any time | 12 months without a reply. If you object, we keep only what we need to not contact you again |
| Website analytics | Browsing data (see the Cookie Policy) | Your consent to analytics cookies | See the Cookie Policy |
| Measure and optimize our ads on Meta (Facebook and Instagram), including conversion events sent from our servers (Conversions API) | Cookie and click identifiers, IP address, browser, pages visited and actions on the site (such as starting a trial or booking a demo) and, only in hashed form, your email | Your consent to advertising cookies | See the Cookie Policy. Meta keeps the data under its own policy |
| Know which campaign brought you to us (attribution) | Campaign parameters (UTM) linked to your sign-up | Legitimate interest in measuring the effectiveness of our advertising (art. 6.1.f) | While the account exists |
We do not make automated decisions with legal effects on you.
3. Meta Pixel
If you accept advertising cookies, our website loads the Meta Pixel, a tool from Meta Platforms Ireland Ltd. (Merrion Road, Dublin 4, Ireland). It tells Meta that you visited our pages and what you did on them, such as viewing pricing, starting a free trial or booking a demo, so that we can measure our campaigns on Facebook and Instagram and show our ads to relevant audiences. If you have a Meta account, Meta may link this information to it.
For collecting and transmitting this data we are joint controllers with Meta, under the Meta Controller Addendum. What Meta does with the data afterwards is governed by its Privacy Policy, where you can also exercise your rights before Meta. Without your consent the Meta Pixel is not loaded, and you can withdraw consent at any time from "Cookie settings", at the foot of every page. The Cookie Policy lists the cookies it sets.
4. Recipients and processors
We do not sell your data. These providers process it on our behalf, under contract:
- Zoho (email sending, EU) and Brevo (email and CRM, EU)
- Stripe (payments)
- Google (Google Analytics)
- Microsoft (Clarity)
- Meta Platforms Ireland (advertising, see section 3)
- Calendly (demo booking)
- Apollo.io (professional contact data)
5. International transfers
Some providers (Google, Microsoft, Meta, Calendly, Apollo.io and Stripe) may process data outside the European Economic Area. They do so with the safeguards required by the GDPR: the EU-US Data Privacy Framework, where the provider is certified, or the European Commission's standard contractual clauses.
6. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to [email protected]. If you are not satisfied with our answer, you can complain to the Spanish Data Protection Agency (www.aepd.es).
7. Security
We apply technical and organizational measures suited to the risk, and limit access to your data to the people who need it for their work.
8. Changes
If we change this policy in a meaningful way, we will tell you on the website or by email.