Privacy Policy

The controller of your personal data is Torisoftt, based in Cuenca, Ecuador, contact email info@torisoftt.com.

This policy applies to the website torisoftt.com, to its contact and quote forms, and to the software development services we provide to clients in Ecuador, Spain and other countries.

If you live in the European Union, we process your data under the General Data Protection Regulation (GDPR, Regulation EU 2016/679) and, in Spain, Organic Law 3/2018 on Data Protection and digital rights.

2.1 Data you provide:

• Name, email address, phone or WhatsApp number and company, when you fill in a form or write to us

• Description of your project, indicative budget and timeline

• Billing details required for contracting

2.2 Data collected automatically, only if you accept the relevant cookies:

• Pages visited, time on site and traffic source (Google Analytics, Hotjar)

• Advertising identifiers used to measure campaigns (Google Ads, Meta Pixel)

• IP address, device type and browser

Details are available in our Cookie Policy.

We process your data for the following purposes, each with its legal basis:

• Answering your enquiries and sending proposals: pre-contractual measures (art. 6.1.b GDPR)

• Providing the contracted service, managing payments and issuing receipts: performance of the contract (art. 6.1.b) and legal obligations (art. 6.1.c)

• Analysing site usage to improve it: your consent (art. 6.1.a), which you may withdraw at any time

• Measuring advertising campaigns and showing relevant ads: your consent (art. 6.1.a)

• Sending you information about our services if you are already a client: legitimate interest (art. 6.1.f), with the option to object in every message

We do not sell your data. We only share it with:

• Providers we need to deliver the service: web hosting (Hetzner, Germany; Vercel, Frankfurt), email (Hostinger), payment gateways (Stripe, PayPal, PayPhone)

• Analytics and advertising tools, only if you accept their cookies: Google (Analytics and Ads), Meta (Pixel) and Hotjar

• Public authorities or courts when required by law

All providers are bound by agreements requiring them to process data only on our instructions.

Torisoftt is established in Ecuador, outside the European Economic Area. The contact and project data you send us is processed from Ecuador with the safeguards described in this policy and under Ecuador's Organic Law on Personal Data Protection.

Analytics and advertising providers (Google, Meta, Hotjar) may process data in the United States. Google and Meta are certified under the EU-US Data Privacy Framework, recognised by the European Commission as an adequate safeguard. For other providers we rely on the Standard Contractual Clauses approved by the European Commission.

Projects for European clients are hosted on servers located in the European Union when the client requires it.

• Enquiries and proposal requests that do not lead to a contract: 12 months from the last contact

• Client data: for the duration of the relationship and afterwards for as long as tax and contractual obligations require (up to 7 years)

• Analytics and advertising data: according to each cookie's lifetime, listed in the Cookie Policy (maximum 2 years)

• Your cookie choice: 12 months

After these periods, data is deleted or anonymised.

You may exercise the following rights at any time:

• Access: know which data of yours we process

• Rectification: correct inaccurate data

• Erasure: ask us to delete your data

• Objection: object to processing based on legitimate interest

• Restriction: ask us to stop using your data while a claim is resolved

• Portability: receive your data in a structured format

• Withdraw consent: without affecting the lawfulness of prior processing

To exercise them, write to info@torisoftt.com stating the right you wish to exercise. We will reply within one month.

If you believe we have not handled your request properly, you may lodge a complaint with your national supervisory authority. In Spain this is the Spanish Data Protection Agency (www.aepd.es). In Ecuador, the Superintendencia de Protección de Datos Personales.

On your first visit we show a notice that lets you accept all cookies, accept only necessary cookies, or configure the analytics and marketing categories.

Analytics and marketing cookies are not set until you give consent. You can change your choice at any time from the "Cookie settings" link in the footer.

Details of each cookie, its provider and lifetime are in our Cookie Policy.

We apply technical and organisational measures to protect your data:

• Encrypted connection (HTTPS) across the site and in all forms

• Data access limited to staff who need it to assist you

• Encrypted backups and servers with access controls

• Breach notification procedure to the authority and affected persons where required by law

We may update this policy to reflect legal or service changes. The current version will always be published on this page with its update date. If the change is significant and you are a client, we will notify you by email.