1. Information we collect
1.1 Information you give us
- Account data: name, email address and password when you sign up.
- Site content: text, images and settings of the websites you create.
- Payment information: processed directly by PayPal or Mercado Pago; we don't store credit card data.
- Communications: messages you send us by email or through support forms.
1.2 Information collected automatically
- Usage data: pages visited, features used, session time.
- Technical data: IP address, browser type, operating system, language.
- Cookies: we use session cookies to keep you logged in. See section 6.
- Analytics: we use Google Analytics to understand how the platform is used.
2. How we use your information
- Provide, maintain and improve the Service.
- Process transactions and manage your subscription.
- Send you communications about the Service, updates and support.
- Send you marketing communications (always with an option to unsubscribe).
- Detect and prevent fraud and malicious activity.
- Comply with legal obligations.
- Analyze use of the Service to improve it.
3. Sharing information with third parties
We don't sell or rent your personal information. We only share it in these cases:
- PayPal: to process payments securely.
- Mercado Pago: to process payments in Argentine pesos.
- Google Analytics: anonymous usage data for analytics.
- Service providers: hosting (MongoDB Atlas), infrastructure (Vercel). These providers are contractually required to protect your information.
- Legal obligations: if the law requires us to disclose information.
- Protection of rights: to protect the rights, safety or property of GauchoFlow Builder.
4. Data retention
We keep your information while your account is active or as needed to provide the Service. If you delete your account, we will delete your personal information within 30 days, except what we must keep for legal or tax obligations.
5. Your rights
You have the right to:
- Access the information we hold about you.
- Correct inaccurate or incomplete data.
- Delete your account and personal data.
- Object to the processing of your data for marketing purposes.
- Portability: export your data in a structured format.
To exercise these rights, write to us at privacidad@gauchoflow.com.
6. Cookies
We use the following types of cookies:
- Session cookie (nezzed_token): essential to keep you logged in. The Service can't work without it.
- Google Analytics: analytics cookies (_ga, _gid) to understand how the platform is used. You can opt out by installing the Google Analytics opt-out browser add-on.
You can set your browser to reject cookies, although this may affect how the Service works.
7. Security
We implement technical and organizational security measures to protect your information, including:
- Password hashing with bcrypt
- Encrypted communications over HTTPS/TLS
- JWT tokens that expire after 30 days
- Restricted access to production databases
No system is 100% secure. If you find a vulnerability, let us know at privacidad@gauchoflow.com.
8. Minors
The Service is not intended for people under 18. We don't knowingly collect information from minors. If you know a minor has given us personal data, contact us so we can delete it.
9. Changes to this policy
We may update this Privacy Policy from time to time. We will notify you by email when changes are significant. The "Last updated" date at the top shows when it was last revised.