Draft for legal review — October 8, 2026
This policy explains what personal data we collect when you visit ai-promote.com, write to us or hire a service from AI Promote, what we use it for, who we share it with and what rights you have. We wrote it in plain language because trust starts with understanding what happens to your information.
Data controller
The AI Promote brand is operated by two companies, depending on where the service is delivered:
- Pasas Technology LLC, based in San Francisco, California, United States. It owns the brand and is the data controller for the website, our advertising campaigns and services contracted outside Peru.
- AI Promote Perú E.I.R.L. (RUC 20611068132), with an office in Lima, Barranco, Peru. It is the data controller for services contracted in Peru and the owner of the corresponding personal data banks.
- For any question about this policy or your data, write to leonardozea@ai-promote.com. We reply in English and Spanish.
Data we collect
We only ask for the data we need to reply to you, deliver the service and measure how the site performs. Depending on how you interact with us, we may process:
- Contact and quote forms: name, company, email, phone, website and the message you send us. The contact form opens your email app with the message ready; we do not store the text on the site.
- WhatsApp: your number, profile name and the content of the conversation when you message us through our WhatsApp link. That processing is also governed by WhatsApp's (Meta's) privacy policy.
- Meeting scheduling: name, email, phone, time zone and any answers you give when you book a meeting through iClosed, our scheduling provider.
- Payments: card payments are processed by Stripe. Stripe receives your card details directly on its own servers; we never store or see your full card number. We keep only billing details (name or company name, tax ID, address, email), the amount, the date and the transaction ID.
- Client relationship: contracts, proposals, access to advertising accounts or platforms you hand over so we can deliver the service, invoices and communications.
- Cookies and analytics: technical and browsing data (pages viewed, traffic source, device, browser, truncated IP address, cookie identifiers) collected through Google Analytics 4, Google Tag Manager and the Meta and TikTok pixels. Details are in the cookies section.
Purposes and legal basis
We use your data for the following purposes, each supported by a legal basis:
- Replying to your inquiries and preparing proposals. Legal basis: your consent when you write to us and, where applicable, the pre-contractual steps you ask us to take.
- Delivering and invoicing the services you hire, including support and communication during the project. Legal basis: performance of the contract and compliance with legal, tax and accounting obligations.
- Scheduling and managing meetings. Legal basis: your consent when you book.
- Measuring how the site is used and improving its content. Legal basis: your consent, given in the cookie notice.
- Showing relevant ads and measuring our campaigns on Google, Meta and TikTok, including remarketing to people who visited the site. Legal basis: your consent, given in the cookie notice.
- Sending you commercial information about our services if you allow it or if you are already a client. Legal basis: consent or our legitimate interest in maintaining the business relationship. You can unsubscribe at any time.
- Protecting the site and preventing fraud. Legal basis: our legitimate interest in keeping our systems secure.
We do not make automated decisions with legal effects on you based solely on this data.
Retention
- Inquiries that do not become a contract: up to 24 months from the last contact.
- Clients: for the duration of the business relationship and, afterwards, for the period required by the tax and accounting rules of each country (generally 5 to 7 years).
- Payment data held by Stripe: as long as Stripe keeps it under its own policy; we keep the invoice and the transaction record for the legally required period.
- Access to accounts and platforms: removed or returned when the service ends.
- Cookies: each one lasts as long as shown in the table in the cookies section; your choice in the notice is stored in your browser until you change it.
Recipients and international transfers
We do not sell your personal data. We share it only with providers we need in order to operate, who process it on our behalf under contract:
- Hosting, email and work tools: hosting, email and project management providers.
- Payments: Stripe, Inc. (United States).
- Scheduling: iClosed (meeting bookings).
- Messaging: WhatsApp, by Meta Platforms.
- Analytics and advertising: Google (Analytics 4, Tag Manager, Google Ads), Meta Platforms (pixel and Meta Ads) and TikTok (pixel and TikTok Ads).
- Professional advisers and authorities: where a law, legal process or competent authority requires it.
AI Promote operates from the United States and Peru, and most of our providers host data in the United States. If you write to us from Peru, your data may be transferred to the United States; if you write to us from the United States, part of the team that handles it is in Peru. In both cases we apply the safeguards required by the law of origin: contractual clauses with each provider, technical and organizational security measures and, for visitors from the European Economic Area or the United Kingdom, Standard Contractual Clauses approved by the European Commission or the provider's certification under the EU-U.S. Data Privacy Framework. If you would like a copy of these safeguards, email us.
Your rights
You can exercise your rights at any time by writing to leonardozea@ai-promote.com with the subject line "Personal data". We will ask you to verify your identity in a reasonable way and will reply within the deadlines set by the law that applies to you. Exercising your rights is free and will not change how we treat you.
If you are in Peru (Law No. 29733, Personal Data Protection Law, and its Regulations)
- Rights of information, access, rectification, cancellation and objection (ARCO rights) over the data we process in our data banks.
- Right to withdraw your consent and not to be subject to decisions based solely on automated processing.
- If you believe we have not handled your request properly, you can file a complaint with the National Authority for Personal Data Protection of Peru's Ministry of Justice and Human Rights.
If you are a California resident (CCPA/CPRA)
- Right to know what personal information we collect, use and disclose, and for what purpose, and to receive a copy of it.
- Right to delete and right to correct the personal information we hold about you, subject to the exceptions in the law.
- Right to opt out of the sale or "sharing" of personal information. We do not sell personal information. Using the Meta, TikTok and Google advertising pixels for behavioral advertising may count as "sharing" under the CPRA; you can opt out by choosing "Essentials only" in the cookie notice or by emailing us. We honor Global Privacy Control signals when your browser sends them.
- Right to limit the use of sensitive personal information. We do not collect sensitive personal information as defined by the CPRA.
- Right to non-discrimination for exercising any of these rights. You may designate an authorized agent to exercise them on your behalf.
- In the past 12 months we have not sold personal information, and we have no actual knowledge of selling or sharing the personal information of anyone under 16.
If you are in the European Economic Area or the United Kingdom (GDPR / UK GDPR)
- Rights of access, rectification, erasure, restriction of processing, data portability and objection, including the right to object to behavioral advertising.
- Right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before.
- Right to lodge a complaint with the supervisory authority in your country of residence.
Cookies
A cookie is a small file the site stores in your browser. We use first-party and third-party cookies for three purposes. On your first visit you will see a notice with two options: "Accept all" enables all three categories; "Essentials only" keeps just the ones the site needs to work. Your choice is stored in your browser (key aip_cookies) and you can change it by clearing the site's data.
| Category | What it does | Cookies and provider | Duration |
|---|---|---|---|
| Essential | Remembers your choice in the cookie notice and enables basic functions such as secure checkout. No consent required. | aip_cookies (AI Promote); Stripe session cookies (__stripe_mid, __stripe_sid) when you start a payment. | Up to 12 months; session or up to 12 months. |
| Analytics | Tells us how many people visit the site, where they come from and which pages they read, in aggregate, so we can improve the content. | Google Analytics 4 via Google Tag Manager: _ga, _ga_*. | Up to 14 months (GA4 data is retained for 14 months). |
| Marketing | Measures whether our ads work and shows relevant ads to people who already visited the site (remarketing). | Meta pixel: _fbp, _fbc. TikTok pixel: _ttp, _tt_enable_cookie. Google Ads: _gcl_au. | Between 90 days and 13 months, depending on the cookie. |
How to turn them off
- Choose "Essentials only" in the cookie notice: the analytics and marketing tags are not loaded.
- In your browser settings you can block or delete cookies from this site or from all sites. If you block the essential ones, some features may stop working.
- Google offers a Google Analytics opt-out browser add-on; Meta and TikTok let you adjust ad preferences from your account settings on each platform.
- Turn on Global Privacy Control in your browser: we treat it as a valid opt-out request.
Children
Our services are aimed at businesses and professionals. We do not offer services to anyone under 18 and do not knowingly collect data from minors. If you believe a minor has given us personal data, write to us and we will delete it.
Security
We apply reasonable technical and organizational measures to protect your data: encrypted connections (HTTPS), access limited to the team members who need it, passwords and two-step verification on the tools we use, and providers with recognized security certifications. No system is infallible; if we detect an incident affecting your data, we will inform you and notify the authority where the law requires it.
Changes to this policy
We may update this policy when our services, providers or the law change. We will publish the current version on this page with its update date and, if the change is significant, we will flag it on the site or email our clients. We recommend checking back from time to time.
Contact
- Email: leonardozea@ai-promote.com (subject line "Personal data").
- Pasas Technology LLC: San Francisco, California, United States.
- AI Promote Perú E.I.R.L. (RUC 20611068132): Lima, Barranco, Peru.
- If you prefer, you can message us on WhatsApp or book a meeting from the contact page.