Privacy notice

How your data is handled

This notice explains what personal data is received through this site and contact channels, how it is used, and how you can exercise your rights, in accordance with Costa Rica’s Law on Protection of the Person in the Processing of Personal Data (Law 8968) and its regulations.

Controller

Aaron Soto Alvarado, trading as Soto AI Consulting, Costa Rica. Contact: [email protected].

What data is collected

This site does not use tracking or advertising cookies. Personal data arrives only when you send it:

• Email, WhatsApp, or calendar: typically name, organization, role, contact details, and the content of your message.
• Self-assessments (forms on each service page): name, email, organization, role, organization size, an optional field about the process (automation only), consent, whether you accept updates, questionnaire answers, and the calculated result. That data is requested to send you the PDF report and contact you about the result.

The site may record aggregated visit statistics, without cookies and without identifying you personally.

How it is used

• To send your self-assessment report and contact you about that result, if you requested it.
• To respond to your inquiry and coordinate conversations.
• To prepare and follow up on service proposals you requested.
• To send articles or updates only if you checked that box.
• To meet legal, accounting, and tax obligations when there is a commercial relationship.

Your data is not sold or shared with third parties for commercial purposes. It is processed with providers needed to operate: site hosting (Cloudflare), email and calendar (Google Workspace), and for self-assessments, a spreadsheet and script in the Soto AI Consulting Google Workspace account that generates the PDF and sends email. Each provider applies its own confidentiality terms.

How long it is kept

Self-assessment data is kept for up to 24 months unless you request deletion sooner. Other data is kept while needed for the stated purpose or to meet legal obligations. If no commercial relationship is formed, you may request deletion at any time.

Your rights

You may request access, correction, or deletion of your data, or withdraw consent, by writing to [email protected]. Requests are handled within the timeframes of Law 8968. You may also contact the Agency for the Protection of Inhabitants’ Data (PRODHAB).

Changes

This notice may be updated. The current version is the one published on this page.

Last updated: October 2026.