Privacy
What is stored, why, and how to have it deleted. Costa Rica Law 8968.
Last updated: September 2026.
Who is responsible
Stuard Duran Quirós, San José, Costa Rica, as data controller. Write to hola@zoaftware.com about anything concerning your personal data.
What is collected
Only what you type: name, email, phone if you provide it, and your message. If you use the audit, also the address of the site you asked about. From the visit itself: technical data such as pages viewed, browser and traffic source, plus your IP address stored as a one-way hash that cannot be reversed.
What it is used for
To reply to you, to prepare a quote, and to understand which parts of the site are useful. Nothing else. It is never used for third-party advertising.
Who it is shared with
Nobody, commercially. Your data is never sold. It is touched only by the technical services required to run the site — the hosting provider and the email relay — which act on instructions and cannot use it for anything else.
How long it is kept
Enquiries that do not become projects are deleted after 24 months. Audits that never captured a contact are deleted after 180 days along with their report. Client records are kept for the length of the relationship and afterwards as tax law requires.
Your rights
Under Costa Rica Law 8968 on the protection of personal data, you may request access to your data, its correction, its deletion, and you may withdraw consent. You get an answer within five business days, at no cost.
Security
The site runs entirely over an encrypted connection. Passwords are stored using one-way derivation functions and IP addresses are stored hashed. There are daily backups and automatic blocking of addresses attempting intrusion.
Minors
This site is aimed at businesses and adults. Data from minors is not knowingly collected.
You may also want
The four documents were written together and read better together.
Any question about what this page says? I answer it myself, not a form.