Privacy policy

Data controller

The controller is the site owner, whose identification details appear in the legal notice.

This policy applies to personal data we process through ingeniarte.app. We respect the right to personal data protection recognized in the Constitution of the Bolivarian Republic of Venezuela and, when you visit the site from the European Union or the European Economic Area, Regulation (EU) 2016/679 (GDPR).

The legal bases stated in this policy follow the GDPR; we apply the same safeguards to visitors from other countries.

For any privacy question or to exercise your rights, write to hola@ingeniarte.app.

• Read the legal notice

Our principles

We handle your data with a few simple rules:

• We ask only for the data each tool needs.
• We do not sell personal data or share it for advertising.
• Analytics only run if you accept them, and rejecting is as easy as accepting.
• Data we do not need to keep expires by design in minutes, hours, or days.

Contact form

When you write to us from the contact page or submit a brief, we use your data to reply and prepare the conversation.

• Data: name, company, email, project type, and summary (required) and, if you provide them, budget, urgency, company stage, and how you found us. If your browser keeps the origin of your visit (UTM parameters, landing page, and referrer), it is attached to the message.
• Purpose: handling your request and, where appropriate, preparing a proposal.
• Legal basis: pre-contractual measures at your request (Art. 6.1.b GDPR) and your consent when you accept the privacy policy in the form (Art. 6.1.a GDPR).
• Retention: while we handle your request. If no engagement follows, we block the data during the applicable statutory limitation periods before deleting it.

AI brief generator

The brief tool turns your guided answers into a draft project summary. It is optional and does not ask for your name or email.

• Data: the goal, current situation, and desired outcome you write and, if you provide them, services of interest, budget, urgency, and company stage.
• How it works: your answers are sent to Google (Gemini) to generate the draft. We do not store them in our systems; they only reach us if you choose to submit the brief through the contact form.
• Legal basis: providing the tool you request (Art. 6.1.b GDPR).
• Tip: avoid including personal data of third parties or confidential information.

Newsletter

We only email you editorial updates if you subscribe and confirm your address.

• Data: email, language, the place on the site where you subscribed, and the consent date.
• Legal basis: your express consent, confirmed through double opt-in (Art. 6.1.a GDPR).
• Retention: while the subscription is active. If you unsubscribe, we keep only what is needed to honor that choice and prove consent.
• Unsubscribe: at any time from the link in every email or by writing to hola@ingeniarte.app.

AI chat assistant

The assistant answers questions about Ingenia and its services using a Google (Gemini) AI model.

• Data: the messages you write (up to 500 characters each; we use the last six as context), the language, and technical data to limit abuse. We do not ask for personal data: please avoid including it.
• Purpose: answering your questions and protecting the service from abusive automated use.
• Internal notice: if the conversation looks like a potential project, we send our team an email with an excerpt of the conversation (messages truncated) to decide whether to contact you. It contains no contact details unless you wrote them yourself.
• Legal basis: legitimate interest in handling inquiries, internal commercial follow-up, and protecting the service (Art. 6.1.f GDPR). You can object by writing to hola@ingeniarte.app.
• Retention: we do not keep the history on our servers or in your browser between visits; only the internal notice remains in our mailbox, when one is generated.

Direct email

If you write to hola@ingeniarte.app, we process your address and the content of your message to reply, on the same legal basis and with the same retention as the contact form. Part of the incoming email is forwarded to our inbox through Resend.

Site analytics

They only run if you accept the analytics category in the banner or preference center. If you reject it, no analytics tool is loaded and no events are sent.

• Data: pages visited, interactions with buttons, sections, and forms, the origin of the visit (UTM and referrer), and technical device and browser data, including approximate country or region.
• What we do not do: we do not record sessions, we do not autocapture form fields, and we do not identify you by name or email.
• Tools: PostHog (product analytics), Vercel Analytics and Speed Insights (aggregate visits and performance), and our own aggregate counters, with no personal identifiers.
• Legal basis: your consent (Art. 6.1.a GDPR), which you can withdraw at any time.
• Retention: only as long as needed to analyze site performance. Our own counters expire after 90 days.

• Read the cookie policy

Security and technical errors

Regardless of your analytics choice, we process some technical data so the site works securely (legitimate interest, Art. 6.1.f GDPR):

• Hosting: Vercel logs technical access data (such as IP address, browser, and date) to serve and protect the site.
• Usage limits: to curb abuse in the form, the brief, and the chat we use a non-reversible fingerprint of your IP and, in the brief, a random session identifier. They expire in minutes.
• Errors: Sentry receives technical failure information (for example, the error trace and the affected page). It is configured not to collect cookies, headers, request bodies, or user data, and it does not receive the content of your forms or chat.

Recipients and providers

We do not sell personal data. We only share it with providers that help us run the site and act as processors (Art. 28 GDPR), and with authorities where there is a legal obligation.

• Vercel: site hosting and, with your consent, analytics and performance.
• Resend: sending and receiving email (form, internal notices, incoming mail) and newsletter management.
• Google (Gemini API): generating the assistant’s answers and the brief drafts.
• Upstash (Redis): usage limits, aggregate counters, and notice deduplication.
• PostHog: product analytics, with consent only.
• Sentry: technical error monitoring.

International transfers

The owner operates from Venezuela and several of our providers have infrastructure in the United States or other countries, so your data may be processed outside your country of residence.

If you visit the site from the European Union or the EEA, please note that Venezuela does not have a European Commission adequacy decision. These transfers rely, as the case may be, on the request you make to us or on your consent and, with providers, on standard contractual clauses or the EU–US Data Privacy Framework when they are certified. You can ask us for more information at hola@ingeniarte.app.

Retention periods

Each processing activity above states its main retention period. These are the technical ones:

• Cookie and language preferences: 12 months.
• Aggregate analytics counters: 90 days.
• Internal notice of potential projects from the chat: duplicates are avoided for 24 hours.
• Forwarding records for incoming email: 7 days.
• Usage limits: the length of each control window, in minutes.

AI and automated decisions

The assistant and the brief generator use AI models to produce answers and drafts. We do not make decisions with legal or similarly significant effects on you based solely on that processing.

The assistant may internally assess whether a conversation points to a potential project so it can notify the team; a person then decides whether and how to contact you.

Minors

The site is aimed at professionals and companies. We do not knowingly process data of minors. If you believe we have, write to hola@ingeniarte.app and we will delete it.

Your rights

You can request access, rectification, erasure, restriction of processing, objection, and portability of your data, and withdraw your consent at any time without affecting the lawfulness of prior processing.

Write to hola@ingeniarte.app stating the right you want to exercise and a way to identify you. We will reply within one month, extendable by two further months if the request is complex (Art. 12 GDPR).

If you are in Venezuela, you also have the right of access, rectification, and update of your data recognized in Article 28 of the Constitution.

If you are in the European Union and believe we have not handled your request properly, you can lodge a complaint with the data protection authority of your country (in Spain, the Spanish Data Protection Agency, www.aepd.es).

Changes to this policy

If a relevant processing activity changes, we will update this page and its date. When a change requires new consent, we will ask for it again.