Privacy policy

1. Who we are

XUUX is a software development studio serving clients in Ecuador, LATAM, the United States and Europe. We are the data controller for the information you share with us through this site.

2. What data we collect

When you submit the contact form, we collect:

• Full name
• Email address
• Phone number (with its country code)
• The project description or need you write to us
• Your IP address (recorded automatically when the form is submitted)

3. What we use it for

We use your data to handle your request: replying to you, preparing a proposal, and communicating with you by email or WhatsApp. Your IP address is used only for security and abuse prevention (for example, rate-limiting spam submissions). We don't use your data for advertising or add you to mailing lists without your consent.

4. Where it's stored and for how long

When you submit the form, your request (including the contact details and, where applicable, your IP) is processed on our hosting and email systems so it isn't lost. We keep that information only as long as needed to handle your request, prevent abuse, and any business relationship that follows. If you ask us to, we delete it.

5. Who we share it with

We don't sell or rent your data. To run the site we may use technical providers (hosting, email delivery) that process data only on our instructions and under contract. If you continue the conversation on WhatsApp, that communication is also governed by WhatsApp's (Meta's) privacy policy.

6. Your rights

You can ask us at any time to access the data we hold about you, correct it, or delete it entirely. If you're in the European Union or the United Kingdom, these rights are guaranteed under the GDPR (access, rectification, erasure, restriction, objection and portability, as applicable). To exercise them, message us on WhatsApp or email and we'll handle your request promptly.

7. Cookies, analytics and monitoring

We don't use advertising or third-party commercial tracking cookies. We only store your language preference (ES/EN) in your browser.

We may use cookieless aggregate analytics (e.g. Plausible) to see which pages are visited, without identifying individuals. We may also use error monitoring tools (e.g. Sentry) to detect technical failures; those logs don't include your message content and aren't used for advertising.

8. Changes to this policy

If this policy changes, we'll publish the updated version on this same page with its new date. Changes will never reduce the protection of data you've already shared with us.