Privacy policy

1. Introduction

This policy explains the information we receive when you browse, contact PuntoStack, request a project, or use invited client access; why we use it and which providers are involved.

Submitting a form does not automatically subscribe you to advertising campaigns.

2. Who operates PuntoStack

PuntoStack is a technology services brand operated from the Dominican Republic.

Services may be provided directly by its owner or, where applicable, through the legal entity identified in the relevant proposal, invoice, or agreement. For questions about your data, use our contact form.

3. Information submitted through forms

We receive the information you choose to provide in the flow you use:

• General contact: name, email address, optional company or organization, and message.
• Quotes: contact details, service, description, approximate budget, timeline, and contact preferences; phone number or a description of another contact method where applicable.
• Additional information by invitation: project details, phone, country, budget, website, timeline, or additional context, depending on the form version and its questions.
• Files you attach when that feature is enabled, together with their name, type, size, and associated request.
• Language, source page, campaign parameters when present, privacy acknowledgement, identifier, dates, and request status.

4. Client portal and project management

There is no open public registration. If you receive portal access, account and session data are processed to identify you and protect that access.

Depending on the features you use, requests, messages, files, and records related to your project are stored. Administrative features support client and project management and follow-up.

5. Technical and security information

We process the connection address to check requests and limit abuse. These controls use a fingerprint derived from the IP address; we do not store the raw IP as a field in contact or quote requests.

Operational records include identifiers, dates, routes, statuses, and security or error events. Sessions and authentication mechanisms have their own records.

Cloudflare Turnstile processes technical browser and connection signals to help distinguish people from automated traffic. Infrastructure providers also process network information needed to serve and protect the site.

6. Cookies and similar technologies

We distinguish necessary security and session functions, language and theme preferences, and optional analytics.

The site remembers language through NEXT_LOCALE and theme through browser storage. Private access uses session cookies where applicable.

The banner has an Accept button and a link to this policy. You can keep browsing without accepting: Google Analytics does not load until you accept. The puntostack_cookie_consent cookie remembers acceptance for one year unless you delete it earlier.

There is no preferences panel or reject button. To withdraw acceptance in this browser, delete puntostack_cookie_consent and the site's analytics cookies through your browser settings, then reload open pages. Without stored acceptance, the site will not load Analytics again. This does not delete data already sent. Not accepting analytics is not the same as rejecting the Terms of Use.

7. Analytics

We use Google Analytics to understand how people use our website, see which pages they visit, and identify opportunities for improvement. Its cookies help us analyze browsing activity and improve the site experience.

Analytics starts when you accept the cookie notice, provided it is enabled on the site. It may collect page visits and browser interactions. We do not enable Google signals or advertising personalization.

8. How we use information

We use information to:

• Answer enquiries and assess requests.
• Request additional context and prepare proposals.
• Manage projects, communications, and agreed maintenance, support, and improvements.
• Maintain request history and status.
• Protect access, prevent abuse, and diagnose problems.
• Understand site usage through analytics when configured and accepted.

9. Providers and external services

The implementation uses Cloudflare for hosting and execution, the D1 database, and Turnstile protection. Transactional email uses its email service when enabled; it processes recipients and the content needed to deliver messages.

File flows use private Cloudflare R2 storage when enabled. Google is involved only in the analytics described in this policy when activated.

External services linked from the site, including communication channels you choose to open, apply their own policies.

10. Information retention

Request and project records are stored for handling and follow-up. There is currently no general automatic deletion of these records based on a single time limit.

The need to retain information depends on the request, project, and applicable obligations. You can request review or deletion through our contact form; we may need to verify your identity and assess relevant obligations.

Technical expiry of sessions or access links does not mean the associated record is deleted. Recovery copies may temporarily retain information removed from the active database, depending on provider settings.

11. Security

The implementation includes form validation, access controls, usage limits, and strengthened authentication for administrative features. Access to private files is subject to authorization checks.

No Internet-connected system can guarantee absolute security. Do not send passwords, private keys, full card details, or unnecessary sensitive information through general forms.

12. Privacy rights and requests

You can use our contact form to request access, correction, or deletion where applicable, raise an objection, withdraw consent, or ask about the use of your data.

Mention privacy in your message and describe your request. The form stores an identifier, dates, content, and status for follow-up; it does not have a separate privacy category.

We may ask for reasonable information to verify your identity. Our response will take applicable obligations and the circumstances of your request into account.

13. International processing

Cloudflare and Google operate international services. When involved in the functions described, information may be processed outside the Dominican Republic or the country you access from, depending on the provider's infrastructure and terms.

14. Minors

The site is not specifically directed at minors. Minors using service forms should have permission from a parent or legal guardian where required.

If you believe a minor's information was provided without the necessary permission, let us know through our contact form so we can review it.

15. Changes to this policy

We may update this policy when features, providers, or data handling change. The current version shows its update date.

16. Contact