What we do with your data

What this policy covers

EmmaTech Solutions is a software shop in Costa Rica. This page explains what data is collected and what happens to it in three different places: this site, the custom systems we build for our clients, and the Google Drive connection those systems offer for storing backups.

If anything below is unclear, write to info@emmatechcr.com and we will gladly explain it.

This site

There is no analytics and no tracking. This site does not use Google Analytics, carries no social media pixels, and sets no cookies in your browser.

The WhatsApp buttons go through no server of ours. They open the WhatsApp app with a suggested message. You read it, change it if you like, and decide whether to send it.

The three free tools work without a server. Quotes, payroll and inventory calculate everything in your browser and store what you type in the local storage of your own machine. None of it reaches us. If you clear this site’s data in your browser, that information is gone, and we never had a copy.

The only thing that leaves is the typefaces. The site loads its fonts from Google Fonts, so Google can see the IP address you visit from. We pass along nothing else.

The custom systems

The systems we build for a client run on that client’s infrastructure, and the data they hold belongs to the client and not to us. We handle it as processors: we go in only when the client asks, to give support, with access that expires on its own, and every entry and every change is written to a log the client can review at any time.

If you use one of those systems as an employee or as a customer of a business, the one who decides what is stored and for how long is that business. Contact them, or write to us and we will put you in touch.

The Google Drive connection

Our systems keep a daily backup. Once a month, they can also send a copy to the client’s own Google Drive, so their backups do not all live in the same place. That connection is optional, and a client administrator turns it on by pressing a button.

What permission we ask for

Exactly one: https://www.googleapis.com/auth/drive.file

What the app does with it

Create a folder in your Drive and upload the backup file of your own system there, once a month. Nothing else.

What it cannot do

With that permission, the app only sees the files it created itself. It cannot read, list, modify or delete the rest of your Drive: not your documents, not your photos, not your spreadsheets, and not the files other apps put there. This is not a promise you have to take on trust: it is the limit Google places on that permission.

What is stored, and where

The backup stays in your Drive, in a folder in your account. We receive no copy, and we store none of your data on any machine of ours.

Of the authorization, the system keeps the token Google issues so it can upload the monthly file without bothering you again. It is stored encrypted, inside the database of that same client system, and serves that single purpose. It is shared with no one.

Limited use

Information received from Google APIs is used solely to provide the backup service described above. It is not sold, not transferred to third parties, not used for advertising and not used to train models, and no human reads it, unless the client expressly asks us to in order to resolve a problem of theirs.

EmmaTech Solutions’ use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How to cut it off

Two ways, and either one is enough on its own:

• From the system, on the Backups screen, with the disconnect button. The token is deleted from the database right then.
• From your Google account, by removing the app’s access under third party apps with access to your account.

Files already in your Drive remain yours and stay there. If you want them gone, delete them yourself, since they are in your account.

How long each thing is kept

• Daily backups: four weeks.
• Monthly copies: one year.
• The Google authorization token: until you disconnect.
• Emails and messages you send us: while there is a working relationship, and afterwards for as long as the law requires us to keep them.

Who it is shared with

No one. We do not sell data, we do not rent it and we do not send it to third parties for advertising.

The services a system needs in order to work, which are Cloudflare to host it and Google for the Drive copy when the client turns it on, process data because without them the service would not exist. We hand it to them for nothing else.

Your rights

You can ask us what we hold about you, ask us to correct it, or ask us to delete it. Write to info@emmatechcr.com and we will reply.

Changes

If this changes, the date above changes too, and the new text is published at this same address.

Contact

EmmaTech Solutions, Costa Rica.
info@emmatechcr.com
+506 6273 6462

This policy is also available in Spanish.