Legal Notice
Last updated: 2026-11-01
1. Identity of the Site Operator
This website and the related online services are operated by Apolaris AI ("Apolaris AI", "we", "us" or "our"), the publisher and operator of the website available at apolaris.net and its associated subdomains.
In accordance with Article 10 of Spanish Law 34/2002 of 11 July on Information Society Services and Electronic Commerce (LSSI-CE), the owner of this website and provider of the service is Apolaris AI S.L., a company established in Spain, with the following identification details:
- Registered name: APOLARIS AI S.L.
- Tax ID (NIF): B05659628
- Registered office: C/Ana Maria 33, 33209 Gijon, Asturias, Spain
- Email: [email protected]
- Website: apolaris.net
The service is provided by Apolaris AI S.L., a company established in Spain, from Spain to customers in the European Union, Mexico and other markets. Apolaris AI operates a public marketing website together with a multi-tenant Software-as-a-Service (SaaS) platform for service and retail businesses. The platform is provided as a fully-managed cloud (SaaS) service. On-premise (self-hosted) deployment is available only to large enterprise customers and is subject to review and approval.
2. Contact Details
For any question relating to this Legal Notice, the website, the platform, or the exercise of your data-protection rights, you can reach us at:
- Email: [email protected]
- Website: apolaris.net
The Apolaris AI services are organised across the following subdomains:
| Subdomain | Purpose |
|---|---|
| app.apolaris.net | The Apolaris AI application (tenant workspace) |
| portal.apolaris.net | Staff portal |
| docs.apolaris.net | Product documentation |
| support.apolaris.net | Customer support |
The user interface and these documents are provided in English, Spanish and French.
3. Hosting and Network Providers
The website and the hosted version of the platform are delivered through the following infrastructure and network providers:
- Cloudflare — DNS, network services, content delivery (CDN), WAF and DDoS protection, and the secure tunnel between our infrastructure and the public internet.
- Apolaris AI's own infrastructure (Spain) — the platform, its databases, files, AI models and backups run on servers owned and operated by Apolaris AI in Spain (European Union); no public-cloud hosting provider is used.
- OVHcloud (OVH SAS, France) — domain-name registration, email hosting and relay, SMS carrier, and an EU edge server used for network failover.
- Tailscale — private encrypted network between our own servers; it carries only end-to-end-encrypted traffic.
Where a large enterprise customer is approved for a self-hosted deployment, hosting and network responsibility for that environment rests with the customer and its own providers.
4. Intellectual Property
The website and the platform — including their structure, source code, software, databases, design, layout, graphics, logos, the "Apolaris AI" name and brand, text, documentation, illustrations and any other content (together, the "Content") — are protected by intellectual-property and related rights and are owned by Apolaris AI or used by it under licence.
Except as expressly permitted by law or by a written agreement with us, you may not reproduce, represent, modify, adapt, translate, distribute, publish, transmit, exploit commercially, extract, reuse or create derivative works from all or part of the Content without our prior written authorisation.
Trademarks, logos and brand names of third parties (including those of our payment, messaging, AI, network and hosting providers) referenced on the website remain the property of their respective owners and are used for identification purposes only. Nothing in this notice grants any right or licence to use them.
Content and data that a business customer or its end-customers enter into the platform remain the property of, and the responsibility of, that customer. We claim no ownership over such customer data.
5. Purpose of the Website
The purpose of the apolaris.net website is to:
- present Apolaris AI and its products and services;
- describe the platform's modules — appointment booking and calendar; point of sale and payments; inventory and supply; HR and payroll; customer CRM and a loyalty program; an omnichannel WhatsApp contact centre with an AI booking agent; AI security cameras and computer vision (event detection, people counting, attendance); an AI copilot; an AI automation builder for managers (scheduled and business-event-triggered automations, with manager-approval workflows for outward actions and SSRF-guarded webhooks); analytics and a data explorer with multi-format export (CSV, Excel, PDF, Word), scheduled automated report delivery and AI-assisted report generation; multi-site and franchise management; and a token-authenticated REST API;
- provide documentation, support and contact channels;
- allow prospective and existing customers to learn about, request and access the platform.
Feature availability and module mix depend on your selected subscription plan, as set out in your quote or subscription page.
Access to and use of the platform itself are governed by the applicable Terms of Service and the Privacy Notice, in addition to this Legal Notice.
6. Data Protection Roles and AI Transparency
Apolaris AI acts in two distinct capacities:
- As data controller for personal data relating to the marketing website, sales leads, and customer-account information that we collect and use for our own purposes.
- As data processor for the personal data that our business customers manage inside the platform — including their end-customers' personal data (names, contact details, booking and purchase history), employee and HR data including payroll, payment metadata, WhatsApp message content, optional camera footage and events, and AI prompts and queries. In that role we process such data solely on the documented instructions of the customer, who acts as controller. Apolaris AI does not store full card numbers; card-data processing is delegated to the payment providers.
In line with the EU AI Act (Article 50) transparency obligations and Mexico's LFPDPPP, we note that the platform offers AI-assisted features. The AI chatbot and AI booking agent are automated systems: where you interact with them, you are communicating with an artificial-intelligence system and not directly with a human, and a human may be involved on request or where review is required. The platform also offers an AI copilot for managers and AI-assisted features for analytics and for drafting automations. Camera and computer-vision features that may involve biometric or attendance-related processing are likewise identified as AI systems. The aviso de privacidad and Privacy Notice explain the existence of automated and AI-assisted decision-making, its significance, and whether and how a human is involved.
The personal data we handle, and the third parties and sub-processors involved, are described in the Privacy Notice. Sub-processors and third parties include Stripe, PayPal and Mercado Pago (payment processing), OVHcloud (SMS, email and domain names), Telnyx (voice telephony), Meta / WhatsApp via the WhatsApp Cloud API or a WAHA gateway (messaging), self-hosted AI models on our own infrastructure (AI features), Cloudflare (DNS, network, CDN and secure tunnel), Tailscale (private network between our servers) and the browser push services of Google, Apple and Mozilla (push notifications).
7. Security
We apply technical and organisational measures designed to protect the website and the platform, including:
- hardened sign-in with an offline arithmetic challenge, a honeypot and failed-attempt throttling, without third-party CAPTCHA services or CDN trackers;
- optional two-factor authentication;
- role-based access control with an activity audit log;
- strict per-tenant data isolation;
- encryption of data in transit.
8. Your Rights and How to Exercise Them
Depending on your location and your relationship with Apolaris AI, you may exercise your data-protection rights by contacting us at [email protected].
- Mexico (LFPDPPP): data subjects may exercise their ARCO rights — Acceso (Access), Rectificación (Rectification), Cancelación (Cancellation) and Oposición (Opposition) — as well as the right to revoke consent and to limit the use or disclosure of their personal data. Mexican data subjects may also contact the INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales).
- EU / EEA (GDPR and ePrivacy): users in the European Union and European Economic Area retain their rights under the GDPR — including access, rectification, erasure, restriction, portability and objection — and may lodge a complaint with their local data-protection supervisory authority or, as Apolaris AI is established in Spain, with the Spanish Agencia Española de Protección de Datos (AEPD).
Where Apolaris AI acts as processor, requests concerning data managed by a business customer inside the platform will be directed to, or handled in coordination with, that customer as controller.
9. Applicable Law and Jurisdiction
This Legal Notice and your use of the website are governed by the laws of Spain, without regard to conflict-of-laws rules, and the competent courts of Spain have jurisdiction over disputes — without prejudice to any mandatory consumer-protection or data-protection rules that may apply in your country of residence. The service is provided from Spain to customers in the European Union, Mexico and other markets.
Nothing in this notice limits the statutory rights that users in the EU/EEA hold under the GDPR and ePrivacy rules, including the right to lodge a complaint with their local supervisory authority or the Spanish Agencia Española de Protección de Datos (AEPD), or the rights that Mexican data subjects hold under the LFPDPPP, including the ARCO rights and the right to contact INAI.