Privacy Policy
Miguelito AI | Part of Bricat Media
Last updated: 5 November 2026
At Miguelito AI, we respect your privacy and are committed to handling personal information responsibly, transparently and securely.
This Privacy Policy explains how we collect, use, store, disclose and protect personal data when you visit our website, contact us, request a business consultation or use our AI-assisted consultation services.
Our approach is guided by the EU General Data Protection Regulation (GDPR), applicable Cyprus data protection legislation and other privacy laws where relevant.
We encourage you to read this policy before submitting personal information.
1. Who We Are
Miguelito AI is a specialist business automation and artificial intelligence services brand operating as part of Bricat Media.
Our services include custom AI agents, business process automation, workflow integrations, intelligent software platforms and related consulting services.
Business information
- Brand: Miguelito AI
- Parent business: Bricat Media
- Location: Paphos, Cyprus, European Union
- Website: https://miguelitoai.pro/
- Email: trabajo@miguelitoai.pro
- Additional contact: hello@bricatmedia.com
- Telephone / WhatsApp: +357 96441069
Data controller
For personal data collected through this website, the data controller is the legal person or registered business operating Miguelito AI under Bricat Media.
The exact registered legal name and any legally required business identification details will be confirmed and added to this section when finalised.
You can contact us at either email address above regarding privacy matters, personal data requests or questions about this policy.
2. Scope of This Policy
This Privacy Policy applies to personal data processed through:
- The Miguelito AI public website.
- Website contact and business consultation forms.
- Our AI Business Consultation Assistant, where available.
- Callback requests and related communications.
- Business enquiries received through email, telephone and messaging services.
- Our internal lead management and enquiry-processing systems.
- Website analytics and consent management.
- Technical monitoring, fraud prevention and website security.
This policy does not automatically govern every system or platform developed for our clients.
Where Miguelito AI provides custom software, AI integrations or automation services to another organisation, the responsibilities of each party and the handling of project data are addressed through the relevant contractual arrangements, including data-processing agreements where required.
3. Personal Information We Collect
We collect personal information only where it is relevant to our services, communications, website operation or legitimate business activities.
3.1 Information you provide directly
When you complete a contact form, request a consultation or communicate with us, we may collect:
- Your name.
- Business or company name.
- Business email address.
- Telephone or WhatsApp number.
- Country or general business location.
- Website address.
- Industry or business sector.
- Services you are interested in.
- Information about your existing software or operational processes.
- Project requirements and objectives.
- Preferred contact method.
- Preferred consultation or callback time.
- Enquiry messages and correspondence.
- Other information you voluntarily provide.
Some information is optional, and we aim to request only what is necessary for the relevant enquiry.
Please avoid submitting passwords, payment card information, special-category personal data, confidential customer databases or other highly sensitive information through ordinary contact forms.
3.2 AI Business Consultation Assistant
Where available, our AI Business Consultation Assistant allows visitors to describe business challenges and explore potential automation solutions.
Depending on how you use this feature, we may process:
- Your written messages.
- Your stated business requirements.
- Responses to follow-up questions.
- Information about existing workflows or software.
- Relevant service recommendations.
- AI-generated consultation summaries.
- Contact details you choose to provide.
- Your preferred follow-up method.
- Technical session information necessary to operate and protect the service.
The assistant uses artificial intelligence to interpret the information you provide and generate relevant responses.
Information entered into an AI conversation may be sent to our configured AI service provider to generate responses.
We do not ask the assistant to access your private systems, inspect confidential business records or make operational changes to your organisation.
You may explore available information without providing contact details unless a particular follow-up service requires them.
Where you choose to submit a consultation request, relevant information from the conversation may be included in the enquiry record to help our team understand your requirements.
3.3 AI-generated summaries and recommendations
The assistant may generate a summary describing:
- Your business challenge.
- Relevant operational processes.
- Possible automation opportunities.
- Miguelito AI services that may be suitable.
- Matters requiring further assessment.
- Suggested next steps.
These summaries are preliminary and informational.
They are not binding quotations, guaranteed technical assessments or contractual commitments.
Our team reviews enquiries and makes commercial and implementation decisions through the appropriate consultation process.
We do not use the website assistant to make solely automated decisions producing legal or similarly significant effects on individuals.
3.4 Technical and security information
When you use our website, our infrastructure may process:
- IP address.
- Browser type and version.
- Device and operating-system information.
- Requested pages and resources.
- Dates and times of requests.
- Referral information.
- Security events.
- Form submission status.
- Error and diagnostic information.
This information helps us maintain website availability, troubleshoot problems, prevent abuse and protect our systems.
3.5 Spam prevention
Our contact forms may use technical safeguards such as short-lived sessions, a simple verification challenge, hidden form fields, submission validation and request-rate controls.
These measures help identify automated or abusive activity.
We do not use anti-spam fields for unrelated marketing purposes.
4. How We Use Personal Information
We process personal information for legitimate and clearly defined purposes.
These include:
Responding to enquiries
To review your messages, answer questions, discuss potential projects and provide information about our services.
Providing business consultations
To understand your requirements, identify possible automation opportunities and arrange further discussions.
Operating the AI Consultation Assistant
To interpret business requirements, generate relevant answers, recommend services and prepare consultation summaries.
Managing enquiries and follow-ups
To record relevant enquiry information, assign follow-up responsibilities, track communication status and avoid losing or duplicating requests.
Preparing proposals
To assess project requirements, prepare quotations and communicate about potential business engagements.
Operating and improving the website
To maintain functionality, resolve technical problems, monitor permitted analytics and improve navigation and usability.
Protecting website security
To prevent spam, detect misuse, investigate security incidents and protect our infrastructure.
Meeting legal obligations
To comply with applicable laws, respond to lawful requests and maintain records where required.
We do not sell personal information.
5. Legal Bases for Processing
Where the GDPR applies, we rely on the appropriate lawful basis for each processing activity.
| Processing activity | Legal basis |
|---|---|
| Responding to business enquiries | Legitimate interests or steps requested before entering a contract, depending on the enquiry |
| Preparing quotations and service proposals | Steps prior to entering a contract; legitimate interests where appropriate |
| Operating the AI consultation service | Legitimate interests in responding to visitor requests or pre-contractual steps, as applicable |
| Managing consultation and callback requests | Legitimate interests and pre-contractual steps, as applicable |
| Maintaining relevant business correspondence | Legitimate interests, contractual necessity or legal obligations |
| Protecting the website and preventing abuse | Legitimate interests in security and fraud prevention |
| Storing necessary consent preferences | Compliance with applicable privacy requirements and legitimate website operation |
| Optional analytics cookies and similar technologies | Consent |
| Sending optional promotional marketing communications | Consent or another applicable lawful basis where permitted by law |
| Maintaining legally required records | Compliance with legal obligations |
Where processing is based on legitimate interests, those interests include operating our business, responding to requests, ensuring continuity of communication, managing enquiries and securing our systems.
We assess those interests against individuals' rights and reasonable expectations.
Where consent is required, it may be withdrawn in accordance with applicable law.
Withdrawing consent does not affect processing that was lawful before withdrawal.
6. AI Technology and External AI Providers
Miguelito AI may use third-party artificial intelligence services to support the Business Consultation Assistant.
The AI provider may process information submitted during a conversation to generate relevant responses.
Where DeepSeek is the configured provider, its processing must be assessed against the applicable service terms, privacy documentation and international data-transfer requirements.
We aim to limit the information sent to AI providers to what is necessary for the requested functionality.
We do not intentionally use AI consultation submissions to train our own public AI models.
We do not authorise the AI assistant to disclose private credentials, perform unauthorised actions or access customer systems.
The operation of third-party AI infrastructure may involve processing outside the European Economic Area. Applicable safeguards must be assessed before enabling such processing.
Visitors should not submit confidential business information or sensitive personal data that is unnecessary for an initial consultation.
7. Contact Forms and Email Notifications
When you submit an enquiry, the information may be forwarded internally to authorised representatives of Miguelito AI and Bricat Media.
Enquiry notifications may be delivered to:
- trabajo@miguelitoai.pro
- aurisonea@gmail.com
- hello@bricatmedia.com
These addresses are used for internal enquiry handling and follow-up.
Access is limited to authorised personnel responsible for responding to enquiries and managing business operations.
We may retain an enquiry record within a secure administrative system to track communication, consultation status and follow-up activity.
Email delivery may involve third-party hosting, mail transport and infrastructure providers.
We take reasonable measures to protect correspondence and restrict unnecessary access.
8. WhatsApp, Viber and Other Messaging Services
We may offer messaging options as alternative ways to contact our team.
If you choose to contact us through WhatsApp, you are redirected to the relevant WhatsApp service.
Where supported, a consultation summary may be prepared for you to review before sending.
Opening WhatsApp does not automatically send a message or schedule a consultation.
Personal data exchanged through WhatsApp is also subject to the relevant service provider's privacy practices.
Viber
Where a Viber integration is available, visitors may be offered the option to receive a consultation summary through an authorised Viber business messaging service.
Such delivery requires an appropriate messaging connection and any necessary permissions.
We do not assume that providing a telephone number automatically authorises us to send messages through Viber.
Other messaging services
If additional messaging channels are introduced, we will update this policy where necessary and provide appropriate information before collecting or sharing relevant data.
We encourage visitors to avoid sending sensitive information through ordinary messaging applications.
9. Telegram and Internal Business Notifications
Where enabled, Telegram may be used as an internal notification channel for new consultation enquiries.
These notifications help authorised staff identify incoming requests and respond promptly.
A notification may contain limited information such as:
- Enquiry reference.
- Business category.
- General enquiry summary.
- Relevant service interests.
- Preferred contact method.
- Follow-up status.
We aim to avoid including unnecessary personal information or complete AI conversation transcripts in Telegram notifications.
Telegram is an independent service provider and may process information according to its applicable terms and privacy practices.
Any international processing associated with the service must be considered as part of our data protection arrangements.
Telegram notifications are intended for internal business use, not public distribution.
10. Website Analytics
We use Google Analytics 4, where enabled, to understand how visitors interact with the website and how our services can be improved.
Analytics may provide information about:
- Pages visited.
- General traffic sources.
- Device and browser categories.
- Approximate geographic location.
- Visitor interactions.
- Engagement with consultation features.
- Relevant conversion events.
We configure optional analytics to operate in accordance with the choices provided through our cookie consent interface.
Where consent is required, optional analytics technologies are not activated before the necessary consent has been obtained.
The currently deployed GA4 measurement identifier is G-43S2WSNFS8.
We do not intentionally send names, email addresses, telephone numbers or full consultation messages to Google Analytics.
You can find more information about these technologies in our Cookie Policy.
11. Cookies and Similar Technologies
Our website uses cookies and browser storage for limited operational and analytical purposes.
These may include:
Necessary technologies
Used to support website functionality, security, form validation and consent preferences.
Consent preference storage
Used to remember whether you have accepted, rejected or customised optional technologies.
Analytics technologies
Used, subject to the applicable consent requirements, to understand website traffic and engagement.
The current website uses a local-storage preference key named miguelito_cookie_prefs_v1.
This preference may remain until you change your settings or clear the relevant browser storage.
You can manage your choices through the website's cookie preference controls where available.
Our Cookie Policy explains the relevant technologies and available controls in greater detail.
12. Sharing Personal Information
We do not sell personal information to advertisers, data brokers or other third parties.
We may share limited information with service providers where necessary to operate our website and respond to enquiries.
Depending on the services in use, these may include:
- Website hosting and infrastructure providers.
- Email hosting and delivery providers.
- AI processing providers.
- Analytics providers.
- Internal notification and messaging platforms.
- Technical maintenance and security providers.
- Professional advisers where necessary.
- Public authorities where disclosure is legally required.
Where a provider acts as a processor on our behalf, we seek appropriate contractual and organisational safeguards as required by applicable law.
Some providers may act as independent controllers for certain activities.
We do not grant service providers unrestricted rights to use personal information for unrelated purposes.
13. International Data Transfers
Miguelito AI operates from Cyprus, within the European Union.
However, some technology providers may process or store information outside Cyprus or the European Economic Area.
This may arise through AI infrastructure, email services, analytics platforms, messaging applications or other supporting technology.
Where international transfers are subject to GDPR requirements, we assess the applicable transfer mechanism.
Depending on the circumstances, relevant safeguards may include:
- An applicable adequacy decision.
- Standard contractual clauses.
- Supplementary technical or organisational protections.
- Other transfer mechanisms permitted by applicable law.
The safeguards relied upon are confirmed for the providers used in production. You may contact us for further information about relevant international transfer arrangements.
14. Data Retention
We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, subject to applicable legal obligations.
Our retention approach considers the following categories.
General contact enquiries
Retained while the enquiry is being handled and for a defined subsequent period needed for follow-up, business administration or dispute resolution.
AI consultation conversations
Temporary conversation data is retained only to support the consultation experience, technical operation and appropriate security checks.
If the visitor submits a lead request, the relevant consultation summary and necessary contact details may become part of the business enquiry record.
Business proposals and project correspondence
Retained for the relevant business relationship and any additional period required by applicable legal or contractual obligations.
Technical and security logs
Retained for a limited period proportionate to operational and security requirements, unless an incident or legal obligation justifies longer retention.
Analytics data
Retained according to the configured analytics retention settings and applicable consent arrangements.
Cookie preferences
Stored until the visitor changes the relevant settings or clears browser data, subject to the actual storage mechanism.
Deletion and anonymisation
When information is no longer necessary, we delete or anonymise it where practicable, unless continued retention is legally justified.
Specific retention periods are maintained in an operational retention schedule and may be refined further in this policy as that schedule is finalised.
15. Information Security
We apply technical and organisational measures appropriate to the nature of the information we process.
Depending on the system, these may include:
- Encrypted connections using HTTPS.
- Restricted administrative access.
- Server-side input validation.
- Spam and abuse prevention.
- Controlled access to enquiry records.
- Secure management of API credentials.
- Monitoring and security logging.
- Software updates and maintenance.
- Backup and recovery procedures.
- Appropriate access management for staff and service providers.
We aim to limit access to personal information to those who need it for legitimate operational purposes.
No internet-based system can guarantee absolute security.
If you believe information submitted to us may have been exposed or mishandled, please contact us promptly.
16. Your Data Protection Rights
Depending on applicable law and the circumstances of the processing, you may have the following rights.
Right of access
Request information about personal data we hold concerning you.
Right to rectification
Request correction of inaccurate or incomplete personal data.
Right to erasure
Request deletion of personal data where the applicable legal conditions are met.
Right to restriction
Request that certain processing activities be restricted.
Right to object
Object to processing based on legitimate interests where applicable.
Right to data portability
Receive certain personal data in a structured, commonly used and machine-readable format where the relevant legal conditions are met.
Right to withdraw consent
Withdraw consent where processing relies on it, without affecting the lawfulness of earlier processing.
Rights relating to automated decision-making
Exercise applicable rights concerning decisions based solely on automated processing that produce legal or similarly significant effects.
You may also object to processing for direct marketing purposes at any time.
Exercising your rights
Contact:
trabajo@miguelitoai.pro
or
hello@bricatmedia.com
Please provide sufficient information for us to identify your request.
For security reasons, we may request reasonable verification before disclosing or changing personal information.
We aim to respond within the period required by applicable law, generally within one month under the GDPR, subject to permitted extensions.
Certain rights are subject to legal exceptions and limitations.
17. Complaints and Supervisory Authorities
If you have concerns about how we handle personal information, we encourage you to contact us first so we can investigate.
You also have the right to lodge a complaint with a competent data protection supervisory authority.
In Cyprus, the relevant authority is:
Office of the Commissioner for Personal Data Protection
Official website: https://www.gov.cy/dataprotection/en/
Complaint information: https://www.gov.cy/dataprotection/en/information-for-the-public/lodge-a-complaint/
Depending on your circumstances, you may also have the right to contact another competent supervisory authority.
18. Third-Party Websites and External Links
Our website may link to external websites, software platforms, social networks and other services.
These websites operate independently and may have different privacy practices.
This includes external project websites presented in our Our Work section.
We are not responsible for the privacy practices of unrelated third-party websites.
We encourage visitors to review the privacy information provided by those services before sharing personal information.
19. Marketing Communications
We may respond to an enquiry with information about the services relevant to your request.
Submitting a consultation request does not automatically mean that you have subscribed to general promotional emails.
Where we send direct marketing communications, we do so in accordance with applicable electronic communications and data protection laws.
Where consent is required, we will request it separately.
You may withdraw marketing consent or object to direct marketing at any time.
We do not treat a request for a callback as blanket consent for unrelated promotional campaigns.
20. Children's Privacy
Miguelito AI provides business-to-business technology and consulting services.
Our website and consultation services are not intended to collect personal information from children.
We do not knowingly solicit personal data from children for business consultations.
If you believe a child has provided personal information through our website, please contact us so that we can assess the situation and take appropriate action.
21. Changes to This Privacy Policy
We may update this Privacy Policy to reflect:
- Changes to our website or services.
- New consultation features.
- Changes to AI or messaging providers.
- Changes to data-processing practices.
- Updates to security arrangements.
- Changes in applicable legal requirements.
The latest version will be published on this page with an updated revision date.
Where a material change requires additional notice or consent, we will take appropriate steps under applicable law.
22. Contact Us
For questions about this Privacy Policy or how your personal information is processed, please contact:
Miguelito AI | Part of Bricat Media
Paphos, Cyprus, European Union
Miguelito AI: trabajo@miguelitoai.pro
Bricat Media: hello@bricatmedia.com
Telephone / WhatsApp: +357 96441069
Website: https://miguelitoai.pro/