Privacy Policy

Starknot is a web development agency based in Costa Rica. For the purposes of this policy, we are the data controller of personal data we collect through this website and during the provision of our services.

We collect only the information strictly necessary to operate our business and provide our services. Specifically:

Information you give us directly

• Contact data when you fill out a form on the site: name, email, phone number, business name, message.
• Project information when you engage our services: details about your business, content you send us (texts, images, logos), technical access required for project development.
• Billing information when a commercial relationship is established: tax information, billing email, payment information necessary to process transactions.

Information collected automatically

• Browsing data when you visit our site: IP address, browser type, pages visited, time on site, referring site, device used.
• Cookies and similar technologies as described in the Cookies section below.

Information we do NOT collect

To make this absolutely clear, Starknot does not collect or store sensitive information that we do not need to operate:

• We do not store detailed financial information (credit card numbers, banking credentials). Payment processing is handled by specialized providers.
• We do not access personal or private information about your business outside the scope of the contracted project.
• We do not collect data about your end customers unless strictly necessary for the project and previously informed.

We use your information exclusively for the following purposes:

• Responding to your inquiries sent through the website or contact channels.
• Preparing quotes and personalized commercial proposals.
• Executing contracted projects according to the agreed scope.
• Processing payments and issuing invoices.
• Providing technical support and maintenance if you have an active plan.
• Communicating about your project: updates, deliveries, payment reminders, relevant technical news.
• Improving our website by analyzing how it is used (in an anonymous and aggregated way).
• Complying with applicable legal and tax obligations.
• Managing and executing obligations arising from strategic commercial alliancesformalized by contract, including the authorized use of the partner's brand image, trade name, and work developed, within the limits agreed in each contract.

We do not sell, rent, or share your personal information for advertising or third-party commercial purposes. Period.

Your information is only shared with third parties under strictly limited circumstances:

Technical service providers

To operate, we use trusted third-party services that may have partial access to information necessary for their function:

• Hosting and storage services where your site or project data is hosted.
• Communication platforms we use for emails, messaging, and video calls.
• Payment processors that handle financial transactions (we do not handle cards directly).
• Web analytics tools that help us understand site usage.

These providers are contractually obligated to protect your information and may only use it for the specific purposes for which they were contracted.

Strategic commercial partners

In the context of the strategic commercial alliances that Starknot formalizes by written contract with certain businesses or individuals, there may be limited shared use of information, specifically:

• Partner's brand image:the partner's trade name, logo, visual identity, and visual references of their business may be used by Starknot in its public portfolio, sales materials, social networks, case studies, and any other commercial presentation medium, as agreed in the alliance contract.
• Work developed:the website, system, or digital product created by Starknot for the partner may be displayed as a case study or reference in Starknot's showcase, under the same terms and scope contractually defined.

This use only proceeds when there is an alliance contract signed by both parties. The partner has full knowledge and express consent regarding the use of their image and work within the agreed terms. Any use not contemplated in the contract will require additional written authorization.

Legal compliance

We may disclose your information when legally required: judicial requirements, tax authorities, or formal legal processes.

Business transfer

In the unlikely event of a merger, acquisition, or sale of Starknot, your information could be transferred to the new owner, always under the same protection conditions established in this policy. In such case, we would notify you in advance.

We implement reasonable technical and organizational measures to protect your information:

• Encryption in website communications (HTTPS/SSL).
• Restricted access to sensitive information only to authorized people within Starknot.
• Secure storage with providers that meet professional security standards.
• Deletion of information no longer necessary for the purposes described.
• Best practices for credential and technical access management.

Despite our best practices, no transmission or storage system is 100% secure. We do our best to protect your information, but we cannot guarantee absolute security against sophisticated attacks or circumstances beyond our reasonable control.

We keep your information only as long as necessary for the purposes described:

• Inquiries not converted into projects: up to 12 months, then deleted.
• Active project information: for the duration of the project and maintenance plan, if applicable.
• Commercial alliance information: for the duration of the alliance contract and up to 12 months after its termination, after which it is deleted or anonymized.
• Billing information: according to applicable legal and tax timelines in Costa Rica (typically 5 years per tax regulations).
• Site analytics data: kept anonymously and aggregated for limited periods.

Once timelines are met, your information is securely deleted or anonymized.

Our website uses cookies and similar technologies to function properly and improve your experience. Cookies are small files saved on your device when you visit the site.

Types of cookies we use

• Essential cookies: necessary for the site to function (navigation, forms, language preference). They cannot be disabled without affecting site functionality.
• Analytics cookies: help us understand how the site is used to improve it. The information collected is anonymous and aggregated.
• Preference cookies:remember settings you make (such as language) so you don't have to configure them every time.

Your control over cookies

You can manage cookies from your browser settings: accept them, reject them, or delete those already stored. Note that rejecting certain cookies may affect site functionality.

You have clear rights over your personal information. You can exercise them at any time by contacting us through the official channels on the site.

Your rights include

• Access: request a copy of the information we have about you.
• Rectification: ask us to correct inaccurate or incomplete information.
• Deletion: request that we delete your information when it is no longer necessary (subject to legal obligations requiring its retention).
• Objection: object to certain uses of your information.
• Portability: receive your information in a structured and reusable format.
• Withdrawal of consent: revoke consent you have given, without affecting the legality of prior processing.

We will respond to your request within a reasonable timeframe, normally within 30 calendar days.

Our services are directed exclusively to businesses and adults. We do not intentionally collect or process personal information from minors. If we discover that we have collected information from a minor without proper consent, we will delete it without delay.

Our site may contain links to third-party websites (providers, tools, social networks, project examples). This privacy policy does not apply to those sites. We recommend reviewing the privacy policy of each external site before providing personal information.

As an agency operating in Latin America that uses global technology tools, part of your information may be stored or processed on servers located outside Costa Rica. When this happens, we ensure the provider complies with data protection standards equivalent to those applicable locally.

We may update this Privacy Policy when necessary to reflect changes in our practices, applicable legislation, or services we offer. The version in force will always be the one published on this website, with the update date indicated at the beginning of the document.

If changes are significant, we will notify you prominently on the website or by email to active clients.

This policy is governed by the applicable legislation of the Republic of Costa Rica, particularly the Law on the Protection of Persons in the Processing of Their Personal Data (Law No. 8968) and its regulations.

If you have questions, concerns, or requests related to your personal information or this policy, you can contact us through the form available on our website or through the official contact channels listed on the homepage.

We are committed to responding transparently and promptly.