Noah AI AgencyLast updated: 1 November 2026
1. Who is responsible
Data controller: Nicolas Schmidt (trading as Noah AI Agency), CUIT 20-32600187-3, Córdoba 41, Villaguay (CP 3240), Entre Ríos, Argentina. Contact for any privacy matter: [email protected].
This policy covers the website https://noahaiagency.com and the B2B contacts that arise from it.
2. What data we process and why
| Situation | Data | Purpose | Legal basis (GDPR art. 6) / Ley 25.326 |
|---|---|---|---|
| Visiting the site | IP address, browser/user-agent, requested URL, date/time (technical server and security logs kept by our hosting/CDN provider) | Delivering the site, security, abuse prevention | Legitimate interest (art. 6(1)(f)); art. 5.2 Ley 25.326 (data needed for the service) |
| Writing to us by email (e.g. "Request the free pilot" or the contact link) | Name, email address, company, and anything you write in the message | Answering you, preparing and running a free pilot, pre-contract steps | Steps prior to a contract / contract (art. 6(1)(b)); legitimate interest in B2B communication (art. 6(1)(f)); consent given by contacting us (Ley 25.326 art. 5) |
| Emails we send you | Delivery status, and whether links were clicked (our email relay, Brevo, adds delivery and click tracking) | Deliverability and follow-up of B2B correspondence | Legitimate interest (art. 6(1)(f)) |
| Business relationship with operators/affiliates | Contact details of your staff, delivery settings, invoicing data | Providing the content service, invoicing | Contract (6(1)(b)); legal obligation for tax records (6(1)(c)) |
The website has no contact form, no account area, no analytics and no advertising trackers. We do not sell personal data and do not make automated decisions with legal effects about you.
3. Recipients and processors
We only share data with providers that help us run the service: - Cloudflare, Inc. (USA) — hosting/CDN, security, and the email-address protection used on our contact links. - Google LLC / Google Ireland Ltd — Gmail, mailbox where email for [email protected] is received (forwarded by Cloudflare Email Routing) and written. - Sendinblue SAS (Brevo) (France) — SMTP relay used to send our emails. - Tax authorities or courts when required by law.
4. International transfers
The controller is established in Argentina, which the European Commission recognises as providing an adequate level of protection (Decision 2003/490/EC). Cloudflare and Google are based in the USA; both are certified under the EU–US Data Privacy Framework, and their data processing terms also include the European Commission's Standard Contractual Clauses. Brevo processes data in the EU. For transfers from Argentina, AAIP Disposition 60-E/2016 model clauses or equivalent safeguards apply.
5. Retention
- Server/security logs: kept by Cloudflare under its own retention policy; we do not keep or access them ourselves.
- Emails and pilot correspondence that did not lead to a contract: up to 24 months after the last contact, then deleted.
- Contract and invoicing records: 10 years, as required for tax and accounting records.
6. Your rights
You may request access, rectification, erasure, restriction, objection, and data portability, and withdraw consent at any time, by writing to [email protected]. We answer within one month (GDPR) and within the terms of Ley 25.326 (10 calendar days for access; 5 business days for rectification/erasure).
Under Ley 25.326 (art. 14.3), access is free of charge at intervals of six months or more, unless a legitimate interest is shown. Supervisory authorities: the Agencia de Acceso a la Información Pública (AAIP), Argentina's data protection authority, receives complaints about breaches of Ley 25.326 (www.argentina.gob.ar/aaip). If you are in the EU/EEA you may also complain to the data protection authority of your country of residence, place of work, or the place of the alleged infringement.
7. Children
Our service is B2B and our content relates to betting; it is aimed exclusively at adults (18+) acting for businesses. We do not knowingly collect data from minors. If you think a minor has sent us data, write to us and we will delete it.
8. Security
Traffic to the site is encrypted (HTTPS). Access to email and business data is restricted to the people who run the service.
9. Changes
We will publish any change on this page with a new date.
10. EU representative (GDPR Article 27)
The controller is established outside the European Union. Processing of personal data of individuals in the EU is occasional, does not include large-scale processing of special categories of data or data relating to criminal convictions, and is unlikely to result in a risk to the rights and freedoms of individuals. On that basis the controller relies on the exemption in Article 27(2)(a) GDPR and has not designated a representative in the Union. Data subjects in the EU may contact the controller directly at the email address above.