Policies and Privacy

1. Scope

This page describes Marfina's general policies for the provision of software development, process automation, technology consulting, web applications, mobile applications, integrations and custom digital solutions.

These policies apply to the use of our website, contact forms, business communications, proposals, meetings, assessments, contracted projects and support related to our services.

2. Data Controller

Marfina is the controller of the personal data it receives through its digital and business channels. You can contact us with any privacy question at:

• Sales email: comercial@marfina.io
• Phone: +51 955 569 903
• Website: marfina.io

3. Data We May Collect

To handle requests, prepare proposals and carry out projects, we may collect the following categories of information:

• Name, job title, company and contact details.
• Information sent through forms, emails, calls, messages or meetings.
• Functional requirements, internal processes, operational documentation and business needs.
• Technical information needed to integrate systems, diagnose issues or provide support.
• Billing, contracting and sales follow-up data where applicable.
• Basic technical website data, such as IP address, browser type, device, and date and time of access.

4. Purposes of Data Use

We use the information received to:

• Respond to inquiries and business requests.
• Assess automation, software or integration needs.
• Prepare proposals, estimates and work plans.
• Design, develop, test, deploy and maintain technology solutions.
• Provide support, resolve issues and improve our services.
• Manage contractual, administrative, accounting and legal relationships.
• Send communications related to services requested or contracted.

5. Project Confidentiality

We treat client information, processes, databases, credentials, documentation, business models and operational decisions as confidential information. We use it only for the purposes agreed with the client and limit access to the team involved in serving, developing or supporting the project.

When a project requires additional confidentiality terms, these may be formalized through a contract, a non-disclosure agreement or specific clauses in the accepted proposal.

6. Information Security

We apply reasonable technical and organizational security measures to protect information against unauthorized access, loss, alteration or improper disclosure. These measures may include access control, credential management, environment separation, backups, permission reviews and secure development best practices.

No system is completely immune to risk. For this reason, we recommend that clients share credentials through secure channels, grant the minimum permissions necessary and revoke access when a collaboration ends.

7. Third-Party Services

To provide our services we may use third-party tools, such as hosting providers, analytics, email, code repositories, task managers, payment gateways, APIs, cloud services or communication systems.

When these tools process personal or technical information, we seek to use them only to the extent necessary to deliver the service and in accordance with their own privacy and security policies.

8. Data Processing in Messaging Channels

Marfina SAC develops and integrates messaging channels, including WhatsApp, into its clients' systems. When a person writes to a client company's service number, the processing of that data is governed by the following.

Who is responsible for the data. The client company is the controller of the data of the people who contact it. Marfina SAC acts as the data processor: it operates the platform on the client's behalf and following its instructions, without using that data for its own purposes.

What data is processed. The phone number, the profile name shown by the messaging application, the content of the messages exchanged and the date and time of each one. When the person identifies themselves to the channel, those messages are linked to their record in the client company's system.

What it is used for. Only to handle the inquiry: replying, managing appointments, sending requested documents and handing the conversation over to a team member when appropriate. Also to keep a record of who handled each conversation.

Where it is stored. In the infrastructure of each client company's system, separate from that of other clients. Marfina SAC accesses it only to provide the contracted support and maintenance service.

What we do not do. We do not sell or transfer this data. We do not use it for advertising or to segment audiences. We do not use it to train models. We do not cross-reference it between clients.

Third-party platforms. The channel runs on Meta Platforms' WhatsApp Business platform, which processes data in accordance with its own policies. Marfina SAC does not control that processing. It can be reviewed at https://www.whatsapp.com/legal/business-data-transfer-addendum

Sensitive content. Our channels are not designed to transmit clinical, financial or other sensitive information. When a service requires delivering information of that kind, it is done through authenticated access and not through the messaging channel.

Retention. Conversations are kept for as long as the person's relationship with the client company lasts and for the period the company defines for audit purposes, after which they are deleted or anonymized.

Individuals' rights. Anyone may request access, rectification, cancellation or objection regarding their data, as well as the deletion of their conversations. The request may be addressed to the company that served them or to Marfina SAC at comercial@marfina.io, in which case we will forward it to the controller and handle it according to its instructions.

Withdrawal of consent. Anyone who no longer wishes to receive messages can say so through the same channel, and their number will stop receiving messages, without affecting any service they request on their own initiative.

9. Cookies and Similar Technologies

Our website may use cookies or similar technologies to improve browsing, measure performance, understand how the site is used and facilitate business communications. Users can configure their browser to block or delete cookies, although some features may be limited.

10. Data Retention

We keep information for as long as necessary to fulfill the purpose for which it was collected, comply with contractual or legal obligations, resolve disputes, maintain administrative records and provide continuity of support. When the information is no longer needed, it may be deleted, anonymized or archived with restricted access.

11. Data Subject Rights

The owner of personal data may request access, rectification, updating, cancellation, objection, restriction or deletion of their data, as applicable under the relevant regulations. To exercise these rights, you can write to us at comercial@marfina.io.

We may request additional information to verify the requester's identity before handling a request.

12. Intellectual Property and Deliverables

The terms regarding intellectual property, licenses, use of code, deliverables, dependencies, trademarks, designs and documentation are governed by the proposal, contract or service order accepted by the client.

Unless otherwise agreed, Marfina may reuse technical know-how, architecture patterns, general components, methodologies and non-confidential experience gained during its projects.

13. Service Policies

Timelines, scope, prices, milestones, approvals, warranties, support, maintenance and responsibilities are defined in the corresponding proposal or contract. Scope changes, new features or unplanned integrations may require an additional estimate and approval.

To move forward with a project, the client must provide information, access, approvals and feedback within the agreed timeframes. Delays in these dependencies may affect the delivery schedule.

14. Changes to These Policies

We may update these policies to reflect changes in our services, processes, tools or legal requirements. The version in force is the one published on this page with its last updated date.

15. Contact

For questions about these policies, privacy, confidentiality or data processing, write to us at comercial@marfina.io.