Privacy policy

Who is responsible

Cristian Gutiérrez, trading as EfiziAI Studio, working from Colombia. There is no company behind this and no data-protection department: the person behind your account is the same one who answers your questions about it. Contact: cdgutierrez6@gmail.com, or the WhatsApp number in the footer.

What is collected

This is what is collected, and you can verify each item:

• Your account details: your email and your password. The password is not stored as-is: its argon2id hash is stored, so not even the studio can read it.
• The content you put in the editor for your landing: your text, your images, your logo, your colors, the template you picked and what you want a visitor to do.
• Contact details you give us: your business name, your phone or WhatsApp and your current website, if you provide them.
• Two first-party cookies: one keeps you signed in; the other stores the language you chose, holding the letters en or es and nothing else.
• Ordinary server logs, which include the IP address of the request. They exist to curb abuse and automated sign-ins, and they are not linked to your landing's content.

What is not collected

There is no analytics tool, no advertising pixel, no heatmap, no session recorder and no third-party script of any kind on this site. That is not a promise on paper: the site ships a Content Security Policy that blocks scripts from any other origin, and the fonts are served from this domain, so a tracker could not run here even if someone added one by accident. About payment: there is an account and a password, but your card details are not collected on this site. Payment happens in a checkout hosted by Paddle that you are redirected to; you enter the card number there, and efiziai.com never receives or stores it.

Why it is collected

To build the page you assembled and to talk to you about it. The content you put in the editor is the material your landing is built from. Your email and phone are used to reply, to notify you about your download and to ask a question if something is missing. Nothing is used for advertising and nothing is sold, rented or shared for marketing, by anyone, ever.

Where it goes

Your account data and your landing's content are stored on this site's server and its database. When you pay, you are redirected to Paddle, which processes the charge as Merchant of Record and handles your card under its own terms; the studio receives the payment confirmation from Paddle, not your card details. If you write on WhatsApp, that conversation is on WhatsApp, operated by Meta under its own terms. Beyond this, nothing else touches your data.

How long it is kept

Accounts and enquiries that do not turn into a purchase are deleted within twelve months, along with their hashed password and the editor content. If you buy, the project material is kept for as long as the work needs it and for three years afterwards, which is the practical window for questions about what you downloaded. You can ask for deletion earlier and it will be done, except for what has to be kept as evidence of a payment that actually happened.

Your rights

Wherever you are, you can ask for the following, and the answer is the same regardless of which law happens to apply to you:

• A copy of everything held about you.
• A correction, if something is wrong or out of date.
• Deletion of your data.
• Withdrawal of your consent, which stops any further contact.
• An explanation of how any of the above was handled.

How to exercise them

Write to cdgutierrez6@gmail.com from your account's email, say what you want, and you get an answer within 10 business days. No form to fill in and no identity document required, unless the request is for a copy of the data and the message does not come from the email it is about, in which case there has to be some way to confirm it is you.

Security

The site is served over HTTPS, the editor's form is validated on the server as well as in the browser, and the endpoints refuse requests that do not come from this site. Passwords are never stored in plaintext: their argon2id hash is stored. Your card details are not stored here at all, because payment is handled by Paddle. These are real measures and not a guarantee: no one can honestly promise a system cannot be breached. What can be said is what is here to protect and what is not: there are accounts and hashed passwords; there are no card numbers.

Data crossing borders

The studio operates from Colombia and most of its buyers are in the United States, so if you write from the United States your message is read in Colombia. Saying so plainly is the point of this section: using this site means accepting that your data is handled in a country that is not yours.

Not for minors

This is a business-to-business service and it is not aimed at anyone under 18. If you believe a minor has created an account or sent data through this site, write to cdgutierrez6@gmail.com and it will be deleted.

Changes to this policy

If this policy changes, the new version replaces this one at this same address and the review date at the bottom changes with it. There is only ever one privacy policy on this domain: an old one left behind somewhere else is a contradiction waiting to be quoted against whoever wrote it.

This is not legal or tax advice

Cristian Gutiérrez is a software developer. He is not a lawyer and he is not an accountant, and nothing on this page should be read as if he were. These documents describe how the service works and what each side owes the other, which is commercial evidence of the agreement and nothing more. What your business has to do to comply with the law where you operate is a question for a professional in your own jurisdiction.

EfiziAI Studio is Cristian Gutiérrez, working from Colombia and selling in United States dollars.