Privacy policy
Last updated: January 2025
1. Data controller
AppFactoryCR ("we" or "the company") is a software development company based in Costa Rica. We are responsible for the processing of personal data we collect through this website and the services we provide.
2. Data we collect
We only collect data necessary for the stated purposes: (a) Data you provide: when you use the contact form or email us, we collect name, email address, company or project, and message content. (b) Technical data: IP address, browser type, operating system, and date/time of access, for security and site improvement. We do not collect sensitive data or sell your personal data.
3. Purpose and legal basis
We use your data to: respond to your inquiries and quote requests; manage the business relationship if a project follows; and improve our services and the operation of the site. The legal basis is your consent (contact form) and, where applicable, performance of a contract or our legitimate interest (security, service improvement).
4. Retention
We retain contact data and communications for as long as needed to handle your request and, if a business relationship is established, for the duration of that relationship plus any period required by law for claims. Technical and access data are retained for short periods unless required by law.
5. Sharing and recipients
We do not sell or rent your personal data. We may share data with providers who perform services for us (e.g. web hosting or email delivery), who act as processors and are bound to use data only as we instruct and to ensure its security. In Costa Rica and the European Union, such processors must comply with applicable data protection rules.
6. Your rights
You have the right to access, rectify, delete, restrict processing, and object to processing of your data, and where the basis is consent, to withdraw it. You may exercise these rights by writing to the contact email at the end of this policy. If you believe the processing does not comply with the law, you may lodge a complaint with the relevant data protection authority.
7. Security
We apply appropriate technical and organizational measures to protect your data against unauthorized access, loss, or alteration. Communication with our site may be carried out over a secure connection (HTTPS) when available.
8. Changes
We may update this privacy policy. The current version will be published on this page with the last updated date. We recommend that you review it periodically.
9. Contact
For any questions about this policy or the processing of your personal data, you may contact us through the contact form on this site.