Privacy policy

What is collected

When you submit the calculator, the contact form, the Cael list or the newsletter: your email address. From the Cael list, your business name, and optionally a telephone number, your trade and what kind of line that number is — used to work out whether the service can serve you, and to set it up. From the contact form, optionally your name, company, phone number and message. From the calculator, the figures you entered and the result computed from them. In all cases: the page you submitted from, campaign attribution (utm_source, utm_medium, utm_campaign), the referring URL, your browser's user agent, and the time of submission.

Why

To send you the breakdown you asked for, to reply to your message, and to follow up about whether the work is worth doing. Nothing is collected for advertising, and nothing is sold or shared for it.

Who processes it

Supabase (database hosting, United States) and Resend (transactional email, United States), both acting as processors on our instructions. The web application's database credential can write a record and cannot read any record back. No other third party receives your data.

Cael accounts and your customers' messages

This website and the Cael service are separate systems. Nothing about your customers — their telephone numbers, their messages, their bookings — is processed by this website, and this website never sees a caller's number. When you open a Cael account you are given that service's own Privacy Policy and Data Processing Agreement, and those govern how conversations with your customers are handled.

Google Calendar data

What we access. Only when a business owner connects Google Calendar in Cael's settings, and only with two permissions. calendar.freebusy: we read free/busy times only, never event titles, descriptions or attendees. calendar.events: we create events for the appointments Cael books (customer name, phone, service address, time and service), and we update or cancel only the events Cael created.

Why. So Cael does not offer callers a time when the owner is busy, and so booked jobs appear in the owner's calendar.

Storage and protection. The OAuth tokens are stored encrypted at rest (AES-256-GCM, with the key held outside the database), and data is transmitted over TLS. We keep calendar data only as long as needed to provide the booking.

Sharing. We do not sell Google user data, we do not use it for advertising, and we do not use it to train generalized AI or ML models. We do not transfer it to third parties except as needed to provide the feature, to comply with law, or with the user's consent. Humans do not read it, except with the user's consent, for security purposes, or as required by law.

Control. Disconnect at any time in Cael → Settings → Google Calendar → Disconnect, or at https://myaccount.google.com/permissions. On disconnect we stop accessing the calendar, and when an account is deleted we delete the stored tokens.

Cael's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Text messaging

No text message is ever sent from this website. Where the Cael service sends one on a business's behalf, the recipient can stop it at any time by replying STOP, and that block is enforced permanently. Mobile numbers and consent data are never sold, and never shared with third parties or affiliates for their own marketing.

Analytics

None. This site loads no analytics script, sets no cookies, and does not track you across sites. There is nothing here to consent to.

How long it is kept

Enquiry records are kept for 24 months from your last contact, then deleted. If you become a client, records relating to the engagement are kept for the period required by Costa Rican commercial and tax law.

Your rights

You may ask for a copy of what is held about you, ask for it to be corrected, or ask for it to be deleted. Write to info@palancasur.com and it will be actioned within 30 days. You may also reply to any email received from this site and ask not to be contacted again; that is honoured immediately.

International transfer

3-102-878347 Sociedad de Responsabilidad Limitada is established in Costa Rica and its processors are in the United States, so your data is processed outside your country of residence if you are elsewhere. Submitting a form is your consent to that transfer.

Contact

3-102-878347 Sociedad de Responsabilidad Limitada, Residencia Puruses, Casa 58, Granadilla, Curridabat, San José, 11802, Costa Rica. info@palancasur.com · +506 6048-7491.