Legal
Privacy Policy
Last updated: May 2026
Softwave Studios ("Softwave", "we") is the data controller for personal data processed via softwavestudios.tech. This policy explains what we collect, why, and your rights under Costa Rica's Law 8968 on data protection.
1. Data controller
Softwave Studios — San José, Costa Rica. Contact: hello@softwavestudios.tech.
2. Data we collect
Contact form: name, email, message content. Booking flow: name, email, phone (optional), preferred slot. Analytics: anonymized page views, device type, country, referrer (no personal identifiers).
3. Why we collect it
Respond to inquiries. Schedule scope calls. Send quotes. Comply with tax and accounting obligations (Costa Rica). Improve the site via aggregated analytics. We do NOT sell or rent your data.
4. Legal basis
Your consent when you submit a form or message. Contractual necessity once a quote is signed. Legal obligation for tax records (kept 5 years per Costa Rica Tax Code).
5. Third-party processors
We share data only with processors necessary to deliver service: email (Resend), database (Supabase), rate limiting (Upstash), payment processing (Tilopay). Each has its own privacy policy and acts under our instructions.
6. Cookies
We use minimal cookies and localStorage: language preference (stored locally, no tracking), session cookies for internal areas (HttpOnly), aggregate analytics. No third-party advertising trackers.
7. Your rights
Under Costa Rica Law 8968 you may: access your data, correct inaccuracies, delete data (right to be forgotten), object to processing, request a copy in portable format, withdraw consent at any time. Send requests to hello@softwavestudios.tech; we respond within 5 business days.
8. Retention
Inquiry data: kept up to 12 months after last contact unless you request earlier deletion. Project data: kept for the legal accounting retention period (5 years). Aggregated analytics: indefinite (no personal identifiers).
9. Security
Data is transmitted over HTTPS. Access controls limit who can read project files. Third-party processors are vetted for security practices. No internet system is 100% secure — we take reasonable measures but cannot guarantee absolute security.
10. Minors
The site is not directed at minors under 13. We do not knowingly collect data from minors. If you believe we have, contact us and we will delete it.
11. International transfers
Some processors operate outside Costa Rica (US, EU). Transfers occur under standard contractual clauses or processor-side certifications equivalent to Costa Rica's data protection level.
12. PRODHAB
If you cannot resolve a concern with us, you may file a claim with PRODHAB (Agencia de Protección de Datos de los Habitantes), Costa Rica's data protection authority.
13. Changes
We may update this policy; substantive changes will be communicated via the site or by email if you have an active project. Continued use after an update implies acceptance.
14. Contact
Privacy or data requests: hello@softwavestudios.tech.