Política de privacidad

The privacy of your data—and it is your data, not ours!—is a big deal to us. In this policy, we lay out what data we collect and why, and how your data is handled. We promise we never sell your data: never have, never will.

This policy applies to the https://www.cocoalemana.com website (the "Service") and the downloadable Coco Alemana application (the "Application"), built and maintained by Coco Alemana, Inc. ("Coco Alemana", "us", "we", or "our").

This policy applies to our handling of information about site visitors, prospective customers, and customers. We refer collectively to these categories of individuals as "you" throughout this policy.

What we collect and why

Our guiding principle is to collect only what we need. Here's what that means in practice:

Identity and access

When you sign up for Coco Alemana — for example, when you create an account, join an early-access program, or request an academic license — we ask for identifying information such as your name and email address. That's so you can use your account, and we can send you product updates and other essential information. We may also send you optional surveys from time to time to help us understand how you use our products and to make improvements.

We'll never sell your personal information to third parties, and we won't use your name or company in marketing statements without your permission either.

Billing information

If you sign up for a paid plan, you will be asked to provide your payment information and billing address. Credit card information is submitted directly to our payment processor, Stripe, and doesn't hit Coco Alemana servers. We store a record of the payment transaction for purposes of account history, invoicing, and billing support.

Your data in the Application

The Application functions as a local analysis tool, not a data collection service:

• User credentials are NEVER stored on or sent to any of our servers
• User credentials are ONLY stored locally on your device
• User credentials are ONLY accessed when expressly needed to perform requested functions
• All communication of credentials is encrypted using industry-standard protocols
• By default, all data processing happens locally on your device, or on the authorized third-party server you connect to
• Your data remains entirely under your control at all times

Coco Intelligence Features

There is one exception to local-only processing, and we want to state it outright: when you use Coco Intelligence Features, the data needed to fulfill your request (for example, the relevant portions of the dataset or query you are working with) is sent to our servers and to the sub-processors listed below — for the sole purpose of processing that request and returning a response.

• Data sent for an Intelligence request is used ONLY to respond to that request
• We do NOT store this data, and our sub-processors operate on a zero-data-retention basis for inference — inputs and outputs are not retained beyond what is needed to process the request
• We do NOT use this data to train models, and our sub-processors have no right to use your data to train or improve their models

The sub-processors we use for Intelligence Features are:

• Baseten
• Fireworks AI
• Cerebras

Enclave Intelligence is different: when properly configured, Enclave Intelligence processes everything locally on your device and does NOT send any data to our servers or to any sub-processor.

Website interactions

We collect information about your browsing activity for analytics and statistical purposes such as conversion rate testing and experimenting with new product designs. This includes, for example, your browser and operating system versions, your IP address, which web pages you visited and how long they took to load, and which website referred you to us. The web analytics we use are described further in the Advertising and Cookies section.

Advertising and Cookies

Coco Alemana may run ads on third-party platforms. Users who click on one of our ads will be sent to our marketing site. Where permissible under law, we may load an ad-company script on their browsers that sets a third-party cookie and sends information to the ad network to enable evaluation of the effectiveness of our ads.

We also use persistent first-party cookies and some third-party cookies to store certain preferences, make it easier for you to use our applications, and support some analytics. The third-party analytics and marketing services we use on the website include Google Analytics, Google Tag Manager, Meta (Facebook) Pixel, PostHog, Vector.

A cookie is a piece of text stored by your browser. It may help remember login information and site preferences. It might also collect information such as your browser type, operating system, web pages visited, duration of visit, content viewed, and other click-stream data. You can adjust cookie retention settings and accept or block individual cookies in your browser settings, although some aspects of our service may not function properly if you turn cookies off.

Voluntary correspondence

When you email Coco Alemana with a question or to ask for help, we keep that correspondence, including your email address, so that we have a history of past correspondence to reference if you reach out in the future. If you schedule a call with us, the scheduling is handled by Cal.com and is subject to their privacy practices.

We also store information you may volunteer, for example, written responses to surveys. If you agree to a customer interview, we may ask for your permission to record the conversation for future reference or use. We will only do so with your express consent.

When we access or disclose your information

To provide products or services you've requested. We use third-party subprocessors to help run our website and provide the Services to you, including Amazon Web Services (hosting and downloads), Stripe (payments), and Cal.com (call scheduling), as well as the analytics providers listed above. For Coco Intelligence Features, we use Baseten, Fireworks AI, and Cerebras solely to process Intelligence requests, as described in the Coco Intelligence Features section.

Aggregated and de-identified data. We may aggregate and/or de-identify information collected through the services. We may use de-identified or aggregated data for any purpose, including marketing or analytics.

When required under applicable law. Coco Alemana, Inc. is a U.S. company and all data infrastructure is located in the U.S.

• Requests for user data. Our policy is to not respond to government requests for user data unless we are compelled by legal process or in limited circumstances in the event of an emergency request. However, if U.S. law enforcement authorities have the necessary warrant, criminal subpoena, or court order requiring us to disclose data, we must comply. Likewise, we will only respond to requests from government authorities outside the U.S. if compelled by the U.S. government through procedures outlined in a mutual legal assistance treaty or agreement. It is our policy to notify affected users before we disclose data unless we are legally prohibited from doing so, and except in some emergency cases.
• If we are audited by a tax authority, we may be required to disclose billing-related information. If that happens, we will disclose only the minimum needed, such as billing addresses and tax exemption information.

Finally, if Coco Alemana, Inc. is acquired by or merges with another company — we don't plan on that, but if it happens — we'll notify you well before any of your personal information is transferred or becomes subject to a different privacy policy.

How we secure your data

All data is encrypted via SSL/TLS when transmitted from our servers to your browser. As described above, data you process with the Application stays on your device or on the third-party systems you connect to, and data sent for Coco Intelligence Features is used only to process your request — it is never stored on our servers.

Data retention

We keep your information for the time necessary for the purposes for which it is processed. The length of time for which we retain information depends on the purposes for which we collected and use it and your choices, after which time we may delete and/or aggregate it. We may also retain and use this information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements.

Location of site and data

Our products and other web properties are operated in the United States. If you are located in the European Union, UK, or elsewhere outside of the United States, please be aware that any information you provide to us will be transferred to and stored in the United States. By using our websites or Services and/or providing us with your personal information, you consent to this transfer.

Changes and questions

We may update this policy as needed to comply with relevant regulations and reflect any new practices. Whenever we make a significant change to our policies, we will refresh the date at the top of this page and take any other appropriate steps to notify users.

Have any questions, comments, or concerns about this privacy policy or your data? Please get in touch by emailing us at support@cocoalemana.com and we'll be happy to try to answer them!

---

Adapted from the Basecamp open-source policies / CC BY 4.0