Privacy Policy
01 · Who is responsible
GADDEV GROUP, SOCIEDAD POR ACCIONES SIMPLIFICADA DE CAPITAL VARIABLE, a Salvadoran company with its registered address in San Salvador, El Salvador, NIT 0623-270726-119-6, NRC 390271-7, trading as GadDev, is the controller of the personal data described in this policy. Contact for privacy matters: hello@gaddev.com · +503 7109 5449.
02 · Scope: two different roles
This policy covers the data we handle as controller: the data of people who visit gaddev.com, write to us, or book a call. That is different from the data we handle as processor on behalf of our clients. When we build or operate a system for a clinic, a company or a professional, that data belongs to that client, who is the controller to their own data subjects; we handle it only under their instructions and the contract that binds us. If you are looking for information about your data in a system operated by one of our clients, the policy that applies is theirs, not this one.
03 · Data we collect
This site has no contact form. If you write to us by email or WhatsApp, we receive whatever you choose to tell us in that message, and nothing else.
- Scheduling data: if you book a call, Cal.com collects your name, your email address, the date and time you choose and any note you write in the booking form. That form is the Cal.com form, not ours, and the data is processed under their policy as well as this one.
- WhatsApp data: if you write to us on WhatsApp, we receive your number, your profile name and the content of your message.
- Cookieless aggregate analytics: page visited, device type and browser, with no personal identification. Always on.
- Cookie-based analytics (Google Analytics), only if you accept: the above plus a random identifier stored in your browser that recognises repeat visits, your country and approximate city, and how you reached the site. We do not receive your name, your email or your exact address.
04 · How we use it
Only to respond to your request, schedule and conduct our call, and improve the site. We do not sell data to third parties. We do not use the data for external marketing. The legal basis varies by data type: Google Analytics cookies are processed with your consent, which you can withdraw at any time; scheduling and contact data are processed under precontractual relationship or legitimate interest, so we can respond to you and conduct the call you request.
05 · Processors and third parties
We work with these processors. None of them has permission to sell us your data or sell it themselves. Outside this list, we disclose personal data only where a public authority legally requires it: How we handle public authority requests.
| Provider | Function | Where it processes data |
|---|---|---|
| Cal.com | Call scheduling | United States |
| Plausible | Cookieless analytics, always on | European Union |
| Google Analytics | Analytics, only with your consent | United States |
| Google Workspace | United States | |
| Vercel | Site hosting | United States |
| Meta / WhatsApp | Messaging, if you write to us on WhatsApp | United States |
06 · WhatsApp and the WhatsApp Business Platform
If you write to us on WhatsApp, that message passes through WhatsApp, owned by Meta, under Meta's terms in addition to this policy. We receive your number, your profile name and the content of your message, and we use them only to reply to you. When we operate WhatsApp on behalf of a client, GadDev builds and integrates the WhatsApp Business Platform into its clients' systems. In those cases the client is the controller of their own users' data and GadDev acts as a processor under contract. We do not use the content of those messages for advertising, we do not sell it, and we do not use it to train models. Meta handles those messages as part of providing its messaging service, under its own terms.
07 · International transfer
Google Analytics, Google Workspace, Cal.com, Vercel and Meta process data on servers outside El Salvador, principally in the United States; Plausible processes it in the European Union. These transfers happen under contract with each provider. Accepting analytics cookies authorises the transfer to Google Analytics. You can withdraw consent at any time from the Cookies page, and we stop sending data to Google Analytics from that moment.
08 · Retention
| Data | Period | Criterion |
|---|---|---|
| Scheduling and contact data | 24 months from last contact | Commercial follow-up and contractual obligations |
| WhatsApp and email messages | 24 months from last message | Same criterion as contact data |
| Google Analytics cookies | 14 months | GA4's retention setting |
| Access and infrastructure logs | 12 months | Security and technical diagnostics |
09 · Security
Data is stored on managed infrastructure, with encryption in transit and at rest, and access restricted to the personnel who need it to provide the service.
10 · Your rights
You may exercise your rights of access, rectification, cancellation or deletion, objection, and portability where applicable, by writing to hello@gaddev.com. We respond within 10 business days. If you believe we have not properly handled your request, you may escalate it to the ACE as the supervisory authority. You may also accept or decline analytics cookies at any time from the Cookies page, and declining limits no part of the site. If you are looking to delete your data, follow the steps in How to request deletion of your data.
11 · Minors
gaddev.com is not directed at minors, and we do not knowingly collect personal data from minors through the site. If you are a parent or guardian and believe a minor has provided us with personal data, write to us at hello@gaddev.com so we can delete it.
12 · Contact
hello@gaddev.com · San Salvador, El Salvador
13 · Changes and version
Any material change to this policy will be posted on this page. The "last updated" date reflects the current version.