04Privacy policy

The controller of the data in this policy is Bottari Studio (company details), under Ley 25.326, the Personal Data Protection Law.

We have two different roles:

• Controller, for the data we process for ourselves: the people who write to us, our clients, payments and visits to our sites.
• Processor, for the data of each client's store (its buyers and its team): we process it on behalf of the client, who is the controller (art. 25 of Ley 25.326). The data processing agreement explains this.

If you do not give us your contact details, we cannot reply to you. If you do not give us your billing details, we cannot sell you a plan. We never ask you for sensitive data (health, religion, political opinions).

The data of the people who buy from your business belongs to your business. It lives in your accounts and we process it only so that your store and your dashboard work. If you are a buyer at a store we built, read that store's privacy policy: it tells you who to ask about your data.

If a buyer writes to us, we pass the request on to the store within 2 business days and let the buyer know we did.

Your accounts: Clerk, Convex, Cloudflare R2, PostHog, Sentry, Resend, Vercel. Your business signs up for them with its Google account, and we set them up. Each one processes data under its own contract with you.

Our AI server: the messages, voice notes and photos you send to Bottari IA and Estudio IA go through a server of our own. TO BE COMPLETED: provider and country of our own AI server.

AI model providers: today Bottari IA uses Groq, Cerebras, Google (Gemini API). Estudio IA is in development: the candidates are Google (Gemini API) and fal.ai, and we publish the final list before turning it on. TO BE COMPLETED: final providers of the AI Studio.

Payments: TO BE COMPLETED: whether we charge in pesos or dollars, and with which payment provider (Mercado Pago, Stripe or other).

We do not sell or rent data. We only hand it over to an authority if a law or a judge requires us to.

Several of these providers process data outside Argentina. The law only allows sending data to countries with an adequate level of protection (art. 12 of Ley 25.326). The list of those countries is in Disposición 60-E/2016, as amended by Resolución AAIP 34/2019.

When the country is not on that list, we sign with the provider the model contract clauses approved in Argentina (Disposición 60-E/2016 or Resolución AAIP 198/2023), which require the provider to protect the data as Argentine law requires.

When a piece of data is no longer needed, we delete it (art. 4 of Ley 25.326).

• Each client has its own accounts: one business's data is not mixed with another's.
• Connections are encrypted (HTTPS).
• We use two-step verification on the admin accounts.
• Each person at Bottari Studio can access only what they need for their work, and has a duty of confidentiality (art. 10 of Ley 25.326).
• If an incident affects your data, we tell you without delay and explain what we did.

Regarding your personal data, you can:

• Access it: find out what data we have about you. It is free every 6 months (or sooner if you have a legitimate interest), and we reply within 10 calendar days (art. 14 of Ley 25.326).
• Correct, update or delete it: we do it within 5 business days (art. 16).
• Ask us not to send you advertising: we take you off the list right away (art. 27).
• Withdraw your consent where you gave it, for example for statistics.

How: write to us at legal@bottaristudio.com with the subject “Personal data”, tell us what you want and which e-mail or which business we know you by. If needed, we ask you to confirm that it is you.

If your data is in a client's dashboard (because you are on its team or bought from its store), we pass your request on to that business, which is the controller, and help it answer you on time.

Our services are for businesses and for people over 18. We do not ask for data about minors.

If we change something substantial, we let you know by e-mail and in the dashboard 30 days in advance. Old versions stay in the history below.