1. Who We Are
Soto Apex is operated by Alvin Soto, an independent AI engineering studio based in San José, Costa Rica. Contact: hello@sotoapex.com.
2. Data We Collect
Contact form submissions: When you fill out the contact form at /contact, we collect your name, email address, company or organization (if provided), and the message you submit. This data is stored in our CRM (a database on our own server in Germany) and used solely to respond to your inquiry.
Free preview requests: When you request an EKO-I preview, we send the website address or brief, the email address you give and your IP address to our build server (runner.sotoapex.com). The IP address is used only to limit how many previews one visitor can request. The build server uses AI model providers to write and design the preview, so your brief and the content of the site you name are sent to them. We email you the link through Cloudflare. If the build server cannot take the request (for example, it is down or you have reached the preview limit), the request is saved in our CRM and we follow up by hand.
Newsletter: If you subscribe, we store your email address in our CRM to send it.
Analytics: This site does not run an analytics service today and sets no analytics cookies. If we turn on Google Analytics 4, we will update this section first. It would run with advertising storage denied everywhere, analytics storage denied by default in the EEA, the UK and Switzerland, and IP addresses anonymized.
Engagement data: During active client engagements, we handle data as described in your scope document and, where applicable, under a signed NDA. Client engagement data is stored in isolated Supabase projects with row-level security.
3. What We Don't Collect
We do not set advertising cookies. We do not use Meta Pixel or other advertising trackers. We use Google Analytics 4 to measure how the site is used: page views and clicks on booking links, with IP addresses anonymized. Advertising data collection is denied by default, and analytics is off by default for visitors in the EEA, the UK and Switzerland. We do not sell, rent, or share your data with any third party for marketing purposes.
4. How We Use Your Data
Contact form data is used to respond to your inquiry and assess whether an engagement is appropriate. We may follow up once if we don't receive a response, after which your data remains in our CRM for 12 months and is then deleted unless you become a client.
We do not send unsolicited marketing emails. If you become a client, we will send engagement-related communications (scope documents, invoices, delivery notifications) until the engagement closes.
5. Data Retention
Contact inquiries and free preview requests: 12 months from last contact, then deleted. Newsletter: until you unsubscribe or ask us to remove you. Client engagement data: retained for 5 years from engagement close for legal and accounting requirements, then deleted.
6. Your Rights
You have the right to: access the data we hold about you; request correction of inaccurate data; request deletion of your data (subject to legal retention requirements); object to processing; and receive a copy of your data in a portable format.
To exercise any of these rights, email hello@sotoapex.com with the subject "Privacy request." We will respond within 5 business days.
7. Infrastructure & Security
Your data is stored in a database on our own server in Germany and served through Cloudflare (SOC 2 Type II, global network). Free previews are built on our own server at runner.sotoapex.com, and our emails are sent through Cloudflare. All data in transit is encrypted via TLS 1.2+. Access to CRM data is limited to authorized personnel (currently: Alvin Soto only). See our Security page for the full infrastructure description.
8. Cookies
This site uses a small set of localStorage entries to remember your light/dark mode and language preference. These are not cookies and are not transmitted to any server. No other cookies, trackers, or persistent identifiers are set.
9. Changes to This Policy
If we make material changes to this policy, we will update the "Last updated" date at the top of this page. We may notify active clients by email for significant changes.
10. Contact
Privacy questions: hello@sotoapex.com. We respond within 2 business days.