Privacy policy

This policy explains what happens to the messages you send to the assistant on this site and on the sites we build for our clients. We wrote it so it’s easy to understand, not to protect ourselves.

Data controller: Vortex Labs, Uruguay. For any question about this policy, email info@vortexlabsia.com.

What information we collect

Only what we need to help you:

• What you type in the chat. The questions and answers in your conversation are saved.
• The name and contact information you leave, if at some point you ask to be contacted. Depending on the business, that’s an email address or a phone number. We never ask for it before it’s needed.
• Your IP address, but never in readable form. We store it as an irreversible code (a hash created with a secret key). This lets us count how many conversations start from the same place and stop abuse. That record is deleted after two days. Your actual IP address is never stored.
• A random number that identifies your browser. Your browser creates it the first time you open the chat and keeps it between visits. We use it to count how many conversations start from the same device. Without it, we’d have to count by IP address, and because thousands of people on mobile networks share the same one, we could end up cutting off your conversation because of something someone else did. We store it as an irreversible code, the same way as the IP address, and it’s also deleted after two days. It isn’t linked to your name, to what you type, or to the contact information you leave, and it’s different on each business’s site.

We don’t ask for ID or card details, and we don’t build an advertising profile about you. We don’t sell or share your information with anyone outside the list below.

How we use it

For two things only:

1. To answer you. The assistant reads the business’s information and your question, and replies.
2. To let the business owner know you’d like to be contacted. Once the conversation goes quiet, the owner gets an email with the chat and the contact information you left, so they can get back to you without you having to repeat everything.

Who else processes it

The assistant relies on third-party services, and several of them process information outside Uruguay, mainly in the United States. Here is the complete list, with what each one does:

Service	What it does	Where it processes data
Vercel	Hosts the assistant and routes requests to the AI model	United States
Google	The AI model that writes the reply (Gemini 3 Flash)	United States
Supabase	The database where the conversation is stored	United States
Resend	Sends the notification email to the business owner	United States
Upstash	The timer that sends that notification once the chat goes quiet	United States
Cloudflare	Delivers any PDF documents the assistant sends you, and checks that the person filling out the contact form is a real person (Turnstile)	Global network

What you type in the chat is sent to Google’s AI model so it can write the reply. The assistant can’t work any other way, and we’d rather tell you plainly in this table than tuck it away in a sentence.

Contact form verification

When you fill out the contact form, Cloudflare’s security check (Turnstile) confirms that a real person, not a program, is on the other end. To do that, Cloudflare sees your IP address. We use this check because without it, anyone could use our form to send automated emails in your name.

We chose Turnstile on purpose. It doesn’t make you pick out traffic lights or stairs, and it doesn’t set advertising tracking cookies.

Fonts

Our fonts are served from our own domain. Until August 26, 2026, the chat window loaded them from Google’s servers, and that connection let Google see your IP address. That connection is gone. The font files now come from the same server that delivers this page.

Cookies

The assistant doesn’t use cookies. It saves two items in your browser’s storage, and neither one is used for advertising:

• Your conversation number, which lets you pick up the chat where you left off if you move to another page. It’s deleted automatically when you close the tab.
• The random number that identifies your browser (described above), which helps us stop abuse without cutting off people who did nothing wrong. This one stays between visits until you clear the site’s data in your browser.

There’s no cross-site tracking and there are no advertising cookies. And because the browser number is different on each business’s site, it can’t be used to tell that the same device visited two of our clients.

How long we keep it

• The IP address and browser number records, both stored as irreversible codes: two days.
• The conversation and your contact information: for as long as the business remains our client, because these are its inquiries and its customers. If you email us asking us to delete your information, we’ll delete it.

Your rights

Uruguay’s personal data protection law (Law 18.331) gives you the right to know what information we have about you, correct it, and ask us to delete it. To make a request, email info@vortexlabsia.com and tell us which site you chatted on and roughly when, so we can find it. We’ll reply within five business days.

If you’d like to file a complaint, the supervisory authority in Uruguay is the Personal Data Regulatory and Control Unit (Unidad Reguladora y de Control de Datos Personales, URCDP).

If you’re writing from the European Union or the United Kingdom, the same rights apply to you, and you can use the same email address to exercise them.

Children

The assistant is designed to answer business inquiries from adults. We don’t ask for or seek information from minors. If we learn that a minor’s information was submitted, we’ll delete it.

Changes

If this policy changes, the date at the top will change. We don’t send email notices about updates, because we don’t have your email address unless you left it with us.