Privacy Policy

1. Data controller

The controller of your data (responsable de datos) is RHINNO IT SpA, RUT 76.787.938-5, located at Manquehue Sur 520, Las Condes, Chile. It acts through its legal representative.

For anything about your data, write to dev@rhinnoit.cloud or send a letter to that address.

2. Data we collect

We handle data about people who visit the site, write to us, request or buy a plan, or act on behalf of a company. We get it directly from you, from whoever fills in the form for your company, or from your browser. We don't use publicly accessible sources.

We don't ask for sensitive data, and we ask you not to include it in your messages. Our services aren't aimed at anyone under 18.

This is the data we handle:

• Contact form: name, email and message.
• Elite plan form: name, email, company and message.
• Order form for the Base, Plus and Pro plans: name, email, phone, domain, RUT, business name, chosen plan, billing document (boleta or factura) and your acceptance of the Terms and this policy.
• Email and WhatsApp: your address or number and whatever you send us through those channels.
• Payment: confirmation of your payment, such as the amount, date and reference. Your card or payment method details go to the external payment provider, not to us.
• Customers: the data needed to run your plan and support you, such as your domain and your requests.
• Technical data: IP address, country, browser, device and operating system type, page visited, the site you came from, date and time of access, load times and security signals, generated when you visit the site or submit a form.

3. How we use your data

We use your data for the purposes below. We don't sell it or use it to send you advertising.

• Answering your messages and questions.
• Scheduling a meeting if you're interested in the Elite plan.
• Processing your order and sending you the payment link and next steps.
• Providing the service you bought, supporting you and sending you notices about it.
• Issuing your boleta or factura and meeting other legal and accounting duties.
• Protecting the site and its forms from bots, spam and abuse.
• Measuring visits and site speed so we can improve it.
• Exercising or defending rights before courts or public bodies.

4. Legal basis

While Law 19,628 applies without the amendments of Law 21,719, we handle your data with your written authorization or when a law allows it. You give that authorization by submitting a form after seeing what we use the data for, and when you buy a plan you confirm it by accepting this policy. You can revoke it in writing, without retroactive effect.

Once Law 21,719 applies, these will be the legal bases, under the articles of Law 19,628 as amended by it:

• Answering messages and scheduling meetings: the pre-contractual steps you ask us to take (article 13, letter c) and, otherwise, your consent (article 12).
• Processing orders and providing the service: entering into and performing the contract (article 13, letter c).
• Issuing boletas and facturas and meeting legal duties: legal obligation (article 13, letter b).
• Protecting the site and its forms: our legitimate interest in preventing bots, spam, fraud and attacks, without affecting your rights and freedoms (article 13, letter d).
• Measuring visits and site speed: our legitimate interest in knowing how the site is used and improving it, with a cookie-free tool that only gives us aggregate figures (article 13, letter d).
• Exercising or defending rights: bringing, exercising or defending a right (article 13, letter e).

5. Who we share your data with

We only share your data with those who need it for the purposes of this policy:

• Cloudflare, Inc.: hosts this site, processes the forms, protects them with its Turnstile service and measures visits with its Web Analytics service.
• Resend (Plus Five Five, Inc.): sends the emails the forms generate.
• Google: hosts our email, where the forms and your messages arrive.
• Infrastructure and monitoring providers: supply the servers, technical services and monitoring tools we use to run the plans.
• External payment provider: processes your payment on its own site, under its own privacy policy. You'll see its name when you pay.
• WebPros International LLC: the cPanel® software used in the Base, Plus and Pro plans may send it usage data, such as the license status, the server's public IP address, its operating system, data used to prevent attacks and which features are used most. If your plan uses that software's AI features, it may also store your prompts and their output, as described in section 15 of the Terms and Conditions. In addition, its license requires us to give it a copy of our contracts if it asks.
• WhatsApp: if you write to us that way, your messages go through that service, under its own terms.
• Authorities and courts: when the law or an order requires it, including the information linked to boletas and facturas.

6. International transfers

The hosting plans use servers in Chile. This site, its forms and our email, however, rely on providers that operate outside Chile. Cloudflare, Resend, Google and WebPros are US companies, so your data may be handled in the United States and in other countries where they operate.

As of this version, we're not aware of an official Chilean list of countries with an adequate level of protection, or of model clauses approved in Chile. For that reason we don't claim that those countries offer an adequate level of protection.

These transfers rely on each provider's data protection terms, such as the data processing agreements of Cloudflare and Resend. Those terms weren't written specifically for Chilean law.

7. How long we keep your data

The site doesn't store forms in a database: it validates them and sends them by email. That's why your data ends up in our email, not on the site. Resend keeps sent emails and their logs for 30 days.

We keep it only for as long as the relevant purpose requires:

• Messages, questions and requests that don't lead to a contract: the time needed to answer you and follow up. After that we delete or anonymize them.
• Customer data: for the life of the contract and, afterwards, for the period the law requires or as needed to exercise or defend rights.
• Technical data: the retention periods of each provider's logs. For Web Analytics, according to Cloudflare, full data is kept for 7 days, after which only a sample remains. We can currently look back up to six months.

8. Security

We apply security measures suited to the data we handle. No measure removes all risk: if a security breach affects your data, we'll report it and tell you when the law requires it.

These are the main measures:

• Encrypted connections (HTTPS) across the site.
• Server-side form validation, Turnstile verification and attempt limits.
• No form database on the site.
• Access to our email limited to those who need to handle your request.
• Daily backups of the hosting plans, kept for 30 days.

9. Automated decisions

To stop bots, Turnstile automatically analyzes technical signals from your browser and connection. If a submission looks automated, the form may not go through. If that happens, you can reach us by email or WhatsApp.

We don't build profiles or make other automated decisions about you.

10. Your rights

Today, Law 19,628 lets you ask for information about your data and for its correction, deletion or blocking. Once Law 21,719 applies, you'll have these rights:

• Access: find out whether we handle your data and obtain that data, its source, purpose, recipients and retention period.
• Rectification: correct data that is inaccurate, out of date or incomplete.
• Erasure: ask us to delete your data, in the cases set by law.
• Objection: object to a specific use of your data, in the cases set by law.
• Portability: receive a copy of the data you gave us in a commonly used electronic format, when the processing is automated and based on your consent.
• Blocking: ask us to temporarily suspend processing while we resolve a request for rectification, erasure or objection.

11. How to exercise your rights

Write to dev@rhinnoit.cloud and tell us who you are or who you represent, an email or postal address for our reply, the data or processing involved and what you're asking for, with any relevant supporting information. We may ask for information to confirm your identity.

If the processing is based on your consent, you can withdraw it at any time at the same address, without affecting the lawfulness of earlier processing.

We don't charge for these requests, apart from the direct costs the law allows when you ask for access or portability more than once in a quarter.

While Law 19,628 applies without the amendments of Law 21,719, we'll answer within 2 business days. If we don't, or if we reject your request, you can go to the civil court (juez de letras en lo civil) for our address.

Once Law 21,719 applies, we'll answer within 30 calendar days, which can be extended once by up to another 30, and within 2 business days if you ask for a temporary block. If we reject your request or don't answer in time, you can file a complaint with the Personal Data Protection Agency (Agencia de Protección de Datos Personales) within 30 business days.

12. Storage in your browser

The site keeps only two preferences in your browser's local storage: the visual theme and the language. Those preferences don't leave your browser, and you can delete them in its settings.

If you haven't chosen a language yet, a script reads your browser's language when you open the home page, so it can show you the site in Spanish when that applies. That reading isn't stored.

We don't use our own cookies. Cloudflare may use technical security cookies, such as __cf_bm or cf_clearance, depending on which features are active. Opening a form loads Turnstile from Cloudflare's servers.

13. Analytics

We use Cloudflare Web Analytics to see how many visits the site gets, which pages are viewed, which sites and countries visitors come from and how fast pages load. Cloudflare adds its script to every page, and that script sends the details of your visit to Cloudflare from your browser.

According to Cloudflare, Web Analytics doesn't use cookies or your browser's local storage, doesn't use your IP address, browser or any other data to recognize you in its statistics, and currently doesn't log query strings, the part of a web address after the question mark. We only see aggregate figures.

If you don't want Web Analytics to measure your visit, block static.cloudflareinsights.com in your browser or with a content blocker. The site works the same.

We don't use advertising tools or tools that follow you across other sites or build a profile of you. If we add another analytics tool, we'll update this policy before turning it on.

14. Third-party sites

The site links to third-party services, such as WhatsApp, our system status page and the payment provider's site. Each one has its own privacy policy.

15. Data you host as a customer

This policy doesn't cover the personal data our customers host on their sites, such as a store's buyers. If that data is on one of our plans, the customer is the controller and we act as its processor (encargado), as described in section 16 of the Terms and Conditions. A Shopify store isn't hosted on our plans: that data stays on Shopify's platform, under the terms the customer has with it. If that data is about you, send your request to that customer.

16. Changes to this policy

This is version 2 of the policy, dated November 7, 2026.

If we change it, we'll publish the new version here with its date. If a change significantly affects how we handle your data and we have your email, we'll let you know that way. We'll also update it if the date Law 21,719 takes effect changes.

If the versions differ, the Spanish version prevails.