This policy explains what personal data this website collects, why, who it is shared with and how you can exercise your rights. It follows Ecuador's Organic Law on Personal Data Protection (LOPDP) and its Regulations. If you are in the European Union or the United Kingdom, the rights described below also reflect the GDPR / UK GDPR.
1. Data controller
The controller of your data is David Alvarado, an independent software developer based in Guayaquil, Ecuador, operating under the trade name Cornerstone Develop.
For any privacy question or to exercise your rights, email lui.alv.ron.25@gmail.com. Given the size of the activity, no data protection officer has been appointed; the controller handles these requests directly.
2. Data we collect
- Contact form: name, email address, service of interest and your message.
- Virtual assistant (chat): the options you pick (service, scope, approximate budget), any text you type and, only if you choose to give it, your email address.
- Technical data: IP address and browser data received by the server on each visit, used for security and abuse prevention.
- Anonymous, aggregated usage statistics (pages viewed, country, device type, browser and referrer), with no cookies or personal identifiers.
We do not ask for sensitive data (health, ethnicity, religion, biometrics, etc.). Please do not include it in your messages.
3. Why we use your data
- To reply to your enquiry and prepare a proposal or quote if you request one.
- To notify the controller in real time that a new enquiry has arrived, so we can reply faster.
- To protect the site against spam and abuse.
- To understand, in aggregate, how the site is used in order to improve it.
We do not sell or rent your data, we do not use it for third-party advertising and we will not send you newsletters or promotions without your explicit consent.
4. Legal basis
- Your consent, given by ticking the box on the contact form or by typing in the chat after seeing the privacy notice. You can withdraw it at any time.
- Steps taken at your request prior to entering into a contract, when you ask for a proposal or quote.
- Legitimate interest in keeping the site secure, for technical data and abuse prevention.
5. About the virtual assistant
"Alex" is an automated assistant with scripted replies: it is not a person and does not use generative AI. Its replies vary depending on the options you choose, but it makes no decisions with legal effects on you and creates no profiles. When the conversation ends, a summary is sent to David so he can reply to you personally.
6. Who we share data with (processors) and international transfers
To run the site we use the following providers, which process data on the controller's behalf and only for the stated purpose:
Site hosting, server technical logs and anonymous statistics (Vercel Web Analytics, cookieless).
Delivering contact-form messages to the controller's inbox.
Receiving and managing the controller's email.
Notifying the controller's phone about new form and chat enquiries (includes the enquiry summary).
Only if you choose to book a call: Calendly collects the booking data directly under its own policy.
7. International transfers
As listed above, some providers are located outside Ecuador, mainly in the United States, which currently has no adequacy recognition from Ecuador's Personal Data Protection Authority. These transfers are made with your explicit consent and under the contractual safeguards and security measures offered by those providers. If you do not agree, you can contact us directly by email instead of using the form or the chat.
8. How long we keep your data
- Enquiries that do not become a project: up to 12 months after the last communication, then deleted.
- If you hire a service: for the duration of the contract and afterwards for as long as Ecuadorian tax and accounting rules require.
- Technical data for abuse prevention: kept in memory only and discarded within minutes.
- Statistics: the temporary visit identifier is discarded after 24 hours; only aggregated data remains.
9. Your rights
As the data subject you may exercise, free of charge, the rights granted by the LOPDP (and, where applicable, the GDPR):
- Information: to know how your data is processed (this policy).
- Access: to know what data we hold about you.
- Rectification: to correct inaccurate or incomplete data.
- Erasure: to have your data deleted.
- Objection: to object to a specific processing activity.
- Portability: to receive your data in a structured, commonly used format.
- Restriction (suspension) of processing.
- Not to be subject to decisions based solely on automated processing.
- To withdraw your consent at any time, without affecting prior processing.
10. How to exercise your rights
Email lui.alv.ron.25@gmail.com stating the right you want to exercise and a detail that lets us find your enquiry (for example, the email address you wrote from). We will reply within 15 days at most.
If you believe your request was not handled properly, you can file a complaint with Ecuador's Superintendency of Personal Data Protection or, if you are in the EU/UK, with your local data protection authority.
12. Security
We apply reasonable technical and organisational measures: encrypted connections (HTTPS with HSTS), service credentials stored server-side only, validation of incoming data and rate limits against abuse. No system is completely infallible; if a security breach affecting your data occurs, we will notify the authority and the people affected within the legal deadlines.
13. Minors
The services on this site are aimed at businesses and adults. We do not knowingly collect data from anyone under 18; if we find that a minor has sent us data, we will delete it.
14. Links to other sites
The site links to third-party services (GitHub, LinkedIn, WhatsApp, Calendly). Their own privacy policies apply when you visit them, and we have no control over them.
15. Changes to this policy
We may update this policy to reflect legal changes or changes to how the site works. The current version will always be published on this page with its update date. Significant changes will be clearly flagged on the site.