Privacy Policy

Who is responsible

Qirai Technologies, operated by 3-101-960370 Sociedad Anónima, a Costa Rican corporation registered and active in Costa Rica, is the data controller for the personal data described in this policy.

Registered address: Río Segundo, Alajuela, Costa Rica.

Privacy enquiries: privacy@qirai.tech

Information you provide

We receive the data you choose to send us. Through this site’s contact form, that is your name and email address, optionally your organization and phone number, and whatever you write in your message.

If you write directly to one of our addresses, we receive whatever that message contains.

Website usage information

As with any internet service, our infrastructure records the technical data needed to deliver the site and protect it from abuse: IP address, browser and device type, and the time of the request.

These records are generated by our infrastructure provider to operate and secure the service. We do not use them to build profiles of individuals.

Cookies and analytics

This site uses no advertising cookies and sells data to nobody. It does use analytics, and this is exactly which.

We store one functional cookie, NEXT_LOCALE, solely to remember the language you chose. It does not identify a person.

Cloudflare Web Analytics measures visits in aggregate. It sets no cookies and builds no cross-site profile of you.

Google Analytics 4 helps us understand how the site is used. It does set cookies (_ga and _ga_<id>) that tell your browser apart between visits, and sends data to Google as a processor. You can prevent it with Google’s opt-out add-on, by blocking third-party cookies in your browser, or by enabling “Do Not Track”.

The form’s anti-abuse protection (Cloudflare Turnstile) may set a temporary technical identifier to distinguish genuine traffic from automated traffic.

None of these tools receives the content of what you write in the contact form.

Contact forms

The contact form is validated on the server and protected against automated submissions. The message is delivered by email to our inbox.

The site does not store enquiries in its own database, and does not write their content to operational logs.

Application and service data

Beyond this site, Qirai Technologies builds and operates applications and services, some distributed through the App Store and Google Play.

Each application has its own privacy policy, which is the one that governs that application and sets out what data it handles, on what legal basis, and for how long. The principles in this policy apply there too.

An application may handle data this site does not: account identifiers, saved progress, or crash diagnostics. None of that happens simply by installing it: where a feature needs the cloud, it is optional and switched on from settings, and until then there is no account and no record tied to you.

Where the processing depends on your consent, the application asks before collecting anything and you can withdraw it from its settings.

Purchases made inside an application are processed by the relevant platform. Qirai Technologies does not receive or store your payment details.

Providers who process data on our behalf

We rely on providers acting as processors on our behalf:

• Cloudflare, Inc., which provides site hosting, the domain’s DNS, and the form’s anti-abuse protection.
• Amazon Web Services, Inc., which relays the message you send through the form to our company mailbox.
• Google LLC, through Google Workspace, which hosts the company mailboxes where enquiries and email correspondence are received and answered.
• Apple Inc. and Google LLC, when you obtain one of our applications through their stores, under their own policies.
• Google LLC also through Firebase: the infrastructure some of our applications run on — authentication, database, server functions, analytics and crash diagnostics. Each application states in its own policy which of those it uses and which depend on your consent.

International processing

Our infrastructure runs on a global network, so your data may be processed on servers outside your country of residence, including outside Costa Rica and the European Economic Area.

Where a transfer leaves the European Economic Area it relies on the Standard Contractual Clauses approved by the European Commission; Google additionally participates in the EU-US Data Privacy Framework. Write to privacy@qirai.tech for a copy of the safeguards that apply.

How long we keep it

We keep enquiries for a maximum of 12 months from the last contact, unless an ongoing commercial relationship justifies keeping them longer or the law requires us to.

Technical records are retained for the period set by our infrastructure provider for operational and security purposes.

Security

We apply reasonable technical and organizational measures to protect the data we handle: encryption in transit, access limited to those who need it, server-side validation, and credentials kept out of application code.

No system is completely secure, and we cannot guarantee the absolute security of information transmitted over the internet.

Children’s privacy

This site is intended for adults in a professional context and does not request data from children. We do not knowingly collect personal data from children through it; if you believe a child has provided us with data here, write to us and we will delete it.

The applications we operate may address other audiences and set their own minimum age. Each states this on its store listing and in its own privacy policy, which is the one that governs that application.

Write to: privacy@qirai.tech

The basis on which we process your data

Each purpose has its own basis. Saying which matters: it determines what you can require of us in each case.

• Contact form: your consent when you send it and, where the enquiry seeks to engage us, the pre-contractual steps you asked for.
• Google Analytics: your consent, which we ask for before switching it on and which you can withdraw at any time.
• Cookieless visit measurement, anti-abuse protection and technical operating and security logs: our legitimate interest in keeping the site available, secure and usable.
• Retaining communications where a legal or accounting obligation requires us to keep them.

Your rights

Under Costa Rica’s Law 8968 on the Protection of Persons regarding the Processing of their Personal Data and, where applicable, the European Union’s General Data Protection Regulation, you may:

• Access the personal data we hold about you.
• Ask us to correct it where it is inaccurate or incomplete.
• Ask us to delete it.
• Object to processing, or ask us to restrict it.
• Withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal.
• Request portability of the data you provided to us.

How to exercise your rights

Write to us saying which right you wish to exercise. We will respond within the timeframes set by the applicable law.

If you believe we have not handled your request properly, you may complain to the Agencia de Protección de Datos de los Habitantes (PRODHAB) in Costa Rica or, if you live in the European Union, to your national supervisory authority.

Privacy requests: privacy@qirai.tech

Changes to this policy

If we change this policy we will update the date shown at the top. Changes are published on this page.

Contact

For anything concerning personal data, write to our privacy address. For legal or contractual matters, write to legal@qirai.tech.

Privacy: privacy@qirai.tech