Privacy policy
Last updated: [CONFIRMAR: publication date]
This policy explains what personal data the Galpón AI website collects, what we use it for, who we share it with and how you can exercise your rights. We wrote it following Argentina's Personal Data Protection Law 25,326 and its regulations.
1. Who is responsible for your data
The data controller for this website is [CONFIRMAR: name or legal name of the controller], CUIT (Argentine tax ID) [CONFIRMAR: CUIT], with registered address at [CONFIRMAR: registered address].
For any question about this policy or your data, write to us at [CONFIRMAR: privacy contact email].
[CONFIRMAR: registration number of the database with the National Registry of Databases of Argentina's Agency for Access to Public Information, or whether it is in progress.]
2. Visit statistics, without cookies
We use Vercel Web Analytics to know how many people visit the site, which pages they see and where they come from. This tool does not use cookies and does not let us know who you are.
For each visit it records:
- the page you visit and the site you came from;
- your approximate country or region, derived from the connection;
- your device type, operating system and browser.
To count visits without cookies, Vercel groups requests from the same visitor with a temporary identifier that is computed from the request and discarded within 24 hours. We don't see data that identifies you and we don't combine it with other sources. We only use this information in aggregate, to improve the site.
3. Contact form or booking calendar
This section applies once the site adds the form or calendar to book a call.
To get back to you we will ask for your name, your email, your company's name and, if you want, a short description of what you need. We only use this data to reply, schedule the call and, if we move forward, prepare a proposal. We don't sell it or use it to send you advertising without your consent.
Filling in the form is voluntary. Without an email or another way to reach you, we can't reply.
If the calendar or form is provided by an external service, that provider processes the data on our behalf and only to deliver its service. [CONFIRMAR: calendar or form provider and the country where it stores data.]
We keep this data while the conversation lasts and for [CONFIRMAR: period] after the last contact, unless you ask us to delete it sooner or the law requires us to keep it.
4. AI demo
This section applies once the site adds the AI demo, where you describe a process in your company and get a first take on what could be automated.
What you type in the demo is stored anonymously: we don't link it to your name, your email, your IP address or any other data that identifies you. We use it to understand the problems companies bring and to improve the demo.
To generate the answer, the text is sent to an artificial intelligence model provider that processes it on our behalf. [CONFIRMAR: provider, country where it processes data, and that it does not use the texts to train its models.]
Please don't include personal data about yourself or others (names, phone numbers, ID documents, customer data) or sensitive data such as health information. Since we don't link the text to you, if you want us to delete something you wrote, tell us the date and roughly what it said.
We keep these texts for [CONFIRMAR: period].
6. Who we share data with
We don't sell or transfer your personal data. Only the providers we need to run the site have access to it; they process it on our behalf and can't use it for other purposes:
- Vercel Inc. (United States): website hosting and visit statistics.
- [CONFIRMAR: contact form or calendar provider.]
- [CONFIRMAR: AI provider for the demo.]
We may also have to hand over data if a competent judicial or administrative authority orders it, in the cases provided for by law.
7. Data stored outside Argentina
Some of these providers store or process data outside Argentina, for example in the United States, a country that the Argentine authority does not consider to offer an adequate level of protection. That's why we only work with providers that commit to protecting data with safeguards equivalent to those of Law 25,326. [CONFIRMAR: mechanism used with each provider (contractual clauses or express consent).]
Once the form and the demo are available, we will ask for your express consent before sending your data.
8. Security and confidentiality
We apply reasonable technical and organizational measures to protect data against loss, unauthorized access or alteration: encrypted connections (HTTPS), access limited to those who need it, and providers with recognized security standards. Everyone who works with the data is bound to keep it confidential.
9. Your rights
As the data subject, you can at any time:
- access the data we hold about you;
- ask us to correct or update it if it is wrong or incomplete;
- ask us to delete it;
- withdraw your consent and ask us to stop sending you communications.
To exercise these rights, write to us at [CONFIRMAR: privacy contact email] from the email you contacted us with, or tell us how to identify you. Access is free of charge. We answer access requests within 10 calendar days, and correction, update or deletion requests within 5 business days, as the law requires.
The data subject has the right to access their personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown, as established in article 14, subsection 3 of Law No. 25,326. The Agency for Access to Public Information, as the Supervisory Authority of Law No. 25,326, has the power to handle complaints and claims filed by anyone whose rights are affected by non-compliance with the rules in force on personal data protection.
10. Minors
The site is meant for companies and professionals. We don't knowingly collect data from anyone under 18.
11. Changes to this policy
If we change this policy, we will publish the new version on this page with its update date. If the change is significant, such as a new use of your data, we will announce it visibly on the site or by email, if we have yours.
12. Governing law
This policy is governed by the laws of the Argentine Republic, in particular Personal Data Protection Law 25,326 and its Regulatory Decree 1558/2001.