Privacy Policy

1. Data Controller

Name: Eddy Fonseca Rojas

Trade name: ForoFlow (by EddyForo)

Location: Costa Rica — Global remote services

Contact: +506 6087-0815

This site operates under the laws of the Law on the Protection of Persons against the Processing of their Personal Data (Law 8968) of Costa Rica.

2. What data do we collect?

We only collect data that you voluntarily provide to us through the contact form:

• Full name
• Company name
• Corporate email
• Phone number / WhatsApp
• Preferred communication channel
• Area of interest (chatbots, leads, RFID, etc.)
• Optional message with description of your challenge

We do not collect browsing data, tracking cookies, or financial information.

3. What do we use your data for?

The data provided is used exclusively for:

• Contacting you to schedule the requested diagnosis session
• Sending you the preliminary roadmap or agreed commercial proposal
• Responding to inquiries related to our automation services
• Coordinating follow-up of the consulting process if there's progress

We do not use your data for: spam, unsolicited bulk mailing lists, third-party advertising, or behavioral analysis.

4. Legal basis for processing

The processing of your data is based on your explicit consent, given by marking the acceptance box in the contact form. You can withdraw this consent at any time.

5. Who do we share your information with?

We do not share your personal data with third parties for commercial purposes. In strictly necessary cases to operate the service (for example: CRM or internal communication tools), data is transmitted under confidentiality agreements and with the same protection guarantees.

Currently we use the following platforms to manage communication:

• WhatsApp Business (Meta Inc.) — for direct messaging
• Email — for proposals and follow-up
• RetellAI — AI platform for phone calls. If you request a diagnosis, our virtual assistant will contact you from +1 582-233-2649 to coordinate details.

All these platforms are data processors under our instructions and are subject to confidentiality agreements.

6. How long do we keep your data?

We keep your personal information for as long as necessary to fulfill the purposes described in this policy, including the management of the business relationship (active or potential), the provision of services contracted, and compliance with applicable legal obligations.

The basis for this retention is our legitimate interest in maintaining a record of business contacts that allows us to offer you relevant services in the future, provide support on previous projects, and comply with eventual contractual or legal obligations. This is the same foundation used by widely recognized CRM platforms (HubSpot, Salesforce, etc.).

Your control over your data: You can request at any time the total deletion of your information from our records by writing to us via WhatsApp or email. We will process your request within a maximum of 30 business days, unless there is a legal obligation that prevents us from doing so.

7. Information for European Union Residents (GDPR)

If you reside in the European Economic Area (EEA), you have additional rights under the General Data Protection Regulation (GDPR):

• Legal Bases: We process your data under (a) Consent (Art. 6.1.a) when sending the form, and (b) Legitimate Interest (Art. 6.1.f) to manage the business relationship.
• International Transfers: Your data may be processed outside the EEA (in Costa Rica or USA by providers like n8n or RetellAI). We use Standard Contractual Clauses (SCCs) or equivalent privacy frameworks to ensure adequate protection.

8. Cookie Policy

We use our own cookies to improve your technical experience. We do not use third-party advertising tracking cookies.

• Technical Cookies: Necessary for the operation of the site and to remember your privacy preferences.
• Control: You can manage your preferences through the consent banner that appears at the beginning or by configuring your browser.

9. Your rights

Under Law 8968 and the GDPR, you have the right to:

• Access: know what data we have about you
• Rectification: correct incorrect data
• Erasure: request that we delete your data ("right to be forgotten")
• Restriction: request that we limit the processing
• Portability: receive your data in readable format
• Objection: object to processing at any time

To exercise any of these rights, contact us via WhatsApp: +506 6087-0815

10. Information security

We apply reasonable technical and organizational measures to protect your information against unauthorized access, loss, or alteration. Communication with our site uses HTTPS protocol.

11. Changes to this policy

We may update this policy occasionally. The date in the header indicates the current version. In case of significant changes, we will inform you through the registered communication channel.