Privacy Policy

1. Information I collect

• Website visits: I use Umami, a cookieless analytics tool that stores no personally identifiable data, to understand traffic in aggregate (for example, how many people open the form).
• “Pide tu demo” (request a demo) form: name, email, WhatsApp number, company, the channel through which you receive quote requests today and, if you choose to add them, a sample file and a short note. I also store the submission date and time, the visit source (UTM parameters and the referring domain), your time zone and whether you interacted with the demo on the page.
• Abuse protection: to limit repeated submissions I store an irreversible keyed hash of your IP address, never the IP itself.
• Booked calls: if you book the call on Cal.com, I receive your name, email, time zone, the time, the video call link and your booking answers, to notify me and send you reminders.
• Direct messages: if you write to me by email, WhatsApp or Instagram, I receive the data you send.
• Connected platform data: when a client authorizes the connection of an account (for example, Instagram), I access the data described in section 4.

2. How I use the form data

• To reply by WhatsApp and email, schedule your demo and, if you ask for it, send you a proposal.
• To send you an immediate email confirming I received your request and, if I haven't replied within one hour (counting only my response window, 8:00 a.m. to 9:00 p.m. Colombia time), a second email with a link to book a call.
• If you book the call, to send you email reminders 24 hours and 1 hour before, with the links to join or reschedule.
• To prepare your demo with the sample file or note you share. You can change the names before uploading it.

I don't use this data for mailing lists or advertising, and I don't sell it. The basis for processing it is your request: you ask for a demo and consent, when submitting the form, to me contacting you about it.

3. Who processes it

Only the providers needed to run the form and to reply to you:

• Cloudflare: hosts the site, receives the form, and stores your request in a database and the sample file in private storage.
• Resend: sends the confirmation, follow-up and call reminder emails from sergio@prosperastudio.com.
• Cal.com: the scheduler where you book the 20-minute call; it receives your name, email, booking answers and the time.
• Telegram: I receive a private alert with your request details so I can reply quickly. The file is not sent through Telegram; I open it with a private link that expires after 7 days.
• Google Workspace: my mailbox sergio@prosperastudio.com, where I receive your replies.
• WhatsApp (Meta): the channel I use to write to you.
• Artificial intelligence providers: if your demo requires it, I process the sample you send with an AI service via API, only to build the demo.

I delete Telegram alerts and email or WhatsApp conversations manually after 12 months.

Some of these providers may process data outside your country. I don't share your data with anyone else unless required by law.

4. Meta / Instagram data

My automation services operate on Instagram professional accounts through Meta's Instagram API, always with the explicit authorization of the person or business that owns the account. Through this integration I may process:

• Public comments made on the connected account's posts.
• Direct messages sent to the connected account.
• Instagram user identifiers (Instagram-scoped IDs), username, and public name of those who interact with the account.
• Mentions and interactions received by the connected account.

Purpose: I use this data solely to provide the contracted service: running automations such as comment replies, direct messages, and support flows defined by the account owner.

I do not sell this data nor use it for third-party advertising. I do not share it except with providers strictly necessary to operate the service (for example, hosting infrastructure) or when required by law.

My use of Meta data complies with the Meta Platform Terms and applicable Developer Policies.

5. How long I keep data

6. Security

I apply reasonable technical and organizational measures: encryption in transit (HTTPS), restricted access to my accounts, files in private storage that only open through signed, expiring links, credentials stored as secrets, and Cloudflare perimeter protection. No system is infallible, but I work to keep your data protected.

7. Access, correction and deletion

Depending on your jurisdiction, you may have the right to access, correct, delete or object to the processing of your personal data. You can ask at any time:

• By emailing sergio@prosperastudio.com with the subject «Data deletion» (or «Data access»). If it concerns an Instagram account, indicate which one.
• For Instagram, you can also revoke the app's access from your account settings (Settings → Apps and websites), which stops any future processing.

I handle every request within a maximum of 30 days, permanently deleting the associated data, except for what I must retain by law.

8. Changes to this policy

If I change this policy, I'll publish the current version here and update the «Last updated» date. Significant changes will be communicated through appropriate means.

9. Contact

Prospera Studio LLC
sergio@prosperastudio.com