Privacy Policy

TrifectaSoftware.com is the party responsible for the personal information described here (the "controller" or "responsable de la base de datos" under Costa Rican law).

Address: Torre Mercedes, Paseo Colón, San José, Costa Rica. Email: [email protected]. Phone: (+506) 4036-9890.

We only collect what we need to answer you, do the work you hire us for, and keep the site running.

• Contact form: your name, email address, phone number (optional), subject and message.
• Direct correspondence: whatever you choose to share by email, phone, WhatsApp, SMS or video call, plus the date and channel of the conversation.
• Business contact information: name, job title, company, business email and business phone of professionals we may want to work with, taken from company websites, professional directories and similar public business sources.
• Digital transformation diagnostic (/diagnostico/): your answers stay in your own browser (local storage). They are not sent to us unless you choose to share the downloadable summary.
• Usage data: pages viewed, approximate location (city or country), device and browser type, referring site and similar statistics collected by Google Analytics.
• Technical data: IP address and request logs that our hosting and security provider records to deliver the site and protect it from abuse.
• Client project data: when you hire us, the information you give us to build, test or support your software. That data is governed by our contract with you (see section 8).

• To reply to your inquiry, prepare proposals and quotes, and schedule meetings.
• To deliver, support and invoice the services you hire, and to keep the records the law requires.
• To contact business professionals about services relevant to their company. Every such message identifies us and tells you how to stop receiving them.
• To understand how the site is used and improve it.
• To keep the site, our systems and our clients secure, and to detect spam and abuse.
• To meet legal, tax and accounting obligations, and to defend our rights if we ever need to.

We process personal information with your consent (for example, when you send the contact form or opt in to messages), to take steps you ask for before a contract and to perform it, to comply with legal obligations, and for our legitimate interest in running and promoting a business-to-business company, always balanced against your rights. You can withdraw consent at any time; doing so does not affect what was done before.

We do not sell, rent or trade personal information. We share it only with service providers that help us operate, under terms that limit them to that purpose:

• Web3Forms, which receives contact form submissions and forwards them to our inbox.
• Google (Google Analytics), for site statistics.
• Cloudflare, which hosts the site and protects it from attacks.
• Our email, calendar, messaging and office software providers, to communicate with you and keep our records.
• Professional advisers (accountants, lawyers) and authorities, when the law requires it or to protect our rights.

If you give us your mobile number and agree to receive text or WhatsApp messages, we use it only for the conversation you agreed to, such as project updates, appointment reminders or replies to your inquiry. Message frequency varies. Message and data rates may apply.

Mobile numbers and text-messaging opt-in consent are never shared with third parties or affiliates for their marketing purposes. Reply STOP to unsubscribe from text messages or HELP for help, or simply tell us on WhatsApp that you no longer want to hear from us.

Google Analytics sets cookies (named _ga and _ga_*) to count visits and tell new visitors from returning ones. You can block or delete them in your browser settings, or install the Google Analytics opt-out browser add-on.

We also save your light or dark theme preference, and your diagnostic answers, in your browser's local storage. That information never leaves your device. We do not use advertising or cross-site tracking cookies.

When we build or support software for a client, we often handle personal information that belongs to the client's own customers or employees. In that role we act on the client's instructions (as a "processor"), we use the data only to deliver the agreed work, and the client's own privacy policy applies to those people. Our contract with each client sets the confidentiality and security terms.

We do not use client data to train AI models, and we only send it to AI services when the client has approved it and the service's terms do not allow it to be used for training.

We are based in Costa Rica and work with clients in other countries. Some of our providers store data in the United States or elsewhere. When information crosses borders, we rely on providers that offer contractual and technical safeguards appropriate to the data involved.

We keep inquiries and prospect contact details for up to 24 months after our last interaction, unless you become a client or ask us to delete them sooner. We keep client records for as long as the relationship lasts and then for the period Costa Rican tax and commercial law requires. Analytics data is kept for 14 months. When we no longer need information, we delete it or make it anonymous.

Governance is one of our three principles, and it applies to our own house first. We use encrypted connections, access limited to the people who need it, multi-factor authentication on our accounts and reputable providers. No system is perfectly secure; if a breach affects your information, we will notify you and the authorities as the law requires.

Wherever you live, you can ask us to:

• Tell you what personal information we hold about you and give you a copy.
• Correct information that is wrong or incomplete.
• Delete your information, or stop using it for a given purpose.
• Stop sending you marketing or outreach messages.
• Withdraw a consent you gave us.

Write to [email protected] with the subject "Privacy request". We may ask you to confirm your identity before acting. We answer within the time the applicable law sets, and in any case within 30 days. Requests are free.

Costa Rica: under Law 8968 (Protection of the Person against the Processing of their Personal Data) you have the rights of access, rectification, deletion and opposition, and you can file a complaint with the Agencia de Protección de Datos de los Habitantes (PRODHAB).

European Economic Area and United Kingdom: you also have the rights to data portability and to restrict processing, and you can complain to your local data protection authority.

United States: residents of California and other states with privacy laws can exercise the rights their state grants, including knowing, correcting and deleting personal information. We do not sell or "share" personal information for cross-context behavioral advertising, and we will not treat you differently for exercising your rights.

Our site and services are meant for businesses and adults. We do not knowingly collect information from anyone under 18. If you believe a minor has sent us information, tell us and we will delete it.

If we change how we handle personal information, we will update this page and the date at the top. If the change is significant, we will also tell clients directly.

Questions about this policy or your data: [email protected], (+506) 4036-9890, or by mail to Torre Mercedes, Paseo Colón, San José, Costa Rica.

If this policy and its Spanish version ever differ, the Spanish version prevails for users in Costa Rica.