Privacy Policy.

The controller of your personal data is WUMEZAY S.A.S., tax ID (RUC) 1793236238001, domiciled in Quito, Ecuador ("we" or "us").

For any matter related to this policy or your data, you can write to us through the form on our contact page or via WhatsApp.

This policy applies to the data we process when you visit this website, write to us through forms, WhatsApp, or social media, request a proposal, or hire our services.

When we process data on behalf of a client, for example in systems we build or operate for them, we act as a data processor and that processing is governed by our contract with that client.

We process only the data needed for each purpose:

• Data you provide: name, email, phone or WhatsApp, company, service or plan of interest, and the content of your message.
• Client data: what we need to deliver and invoice services, such as legal name, tax ID, address, and contact details.
• Technical data: IP address, browser type, date and time of access, and requested pages, logged for security and operation.
• Language preference: a session cookie that remembers the language you browse in.
• Usage and performance statistics: anonymous, aggregated data about pages visited, device type, country, and loading speed, collected without cookies.

We do not request sensitive data such as health information, beliefs, or ethnic origin. Please do not include it in your messages.

We use your data to:

• Answer your inquiries and prepare proposals.
• Deliver, invoice, and support contracted services.
• Comply with legal, tax, and accounting obligations.
• Protect the website, prevent abuse, and detect unauthorized access.
• Improve the website's operation and content.

We do not sell or rent personal data. We do not make automated decisions or build profiles that produce legal effects on you.

We process your data based on:

• Your consent, when you submit a form or write to us.
• Pre-contractual measures or the performance of a contract, when you request a proposal or hire a service.
• Compliance with legal obligations, such as tax obligations.
• Our legitimate interest in keeping the website and our systems secure.

We share data only with providers that help us operate and are required to protect it:

• Website hosting, infrastructure, and statistics providers, such as Vercel Inc. (United States), including its Web Analytics and Speed Insights services.
• Internal communication tools where we receive form submissions, such as Discord Inc. (United States).
• WhatsApp, by Meta Platforms, when you choose to write to us there.
• Domain, hosting, and email providers, when needed to deliver contracted services.
• Competent authorities, when required by law or a legitimate order.

Some providers process data outside Ecuador, mainly in the United States. We carry out these transfers with providers that offer adequate protection guarantees, as provided in the LOPDP.

• Inquiries that do not lead to a contract: up to 24 months after the last contact.
• Client data: for the duration of the relationship and then for the periods required by tax and commercial law.
• Technical security logs: up to 90 days, unless needed to investigate an incident.

When these periods end, we securely delete or anonymize the data.

Under the LOPDP, you may exercise at any time your rights to:

• Access your data.
• Rectification and updating.
• Deletion.
• Objection.
• Portability.
• Suspension of processing.
• Not be subject to decisions based solely on automated processing.
• Withdraw your consent, without retroactive effect.

To exercise them, write to us through the contact page or WhatsApp describing your request. We may ask for information to verify your identity. We will respond within the periods set by law.

If you believe your rights have not been addressed, you may file a complaint with Ecuador's Superintendency of Personal Data Protection.

We apply technical and organizational measures to protect your data, such as encryption in transit (HTTPS), access control, data minimization, and protection against automated submissions. Learn more on our Trust & Security page.

If a security breach affects your data, we will notify the authority and those affected under the terms of the LOPDP.

This website uses a single technical session cookie to remember your language during your visit. It is necessary for the site to work and is deleted when you close your browser.

To measure visits and performance we use Vercel Web Analytics and Speed Insights, which work without cookies and do not identify individuals.

We do not use analytics or advertising cookies. If we add any in the future, we will ask for your consent before enabling them.

Our services are intended for businesses and people over 18. We do not knowingly collect data from minors.

We may update this policy to reflect legal changes or changes in our services. The current version will be published on this page with its update date.