Privacy policy

The controller for the data described in this policy is Fabricio Vazquez, founder of Alzu (brand name), tax ID (CUIT) 20-95775033-9.

For inquiries or to exercise your rights: hola@alzu.io.

SaaS account data: what you provide when you sign up, access the hub (app.alzu.io), manage subscriptions, and contact platform support.

Business data: operational information you enter or generate in each business panel (catalog, sales, customers, settings, invited users, etc.). We use it to provide the software contracted for that business.

Store end-customer data: when your business uses ecommerce or other channels, data those visitors or buyers give your store is processed in the context of your relationship with them. Toward those third parties, your business is the controller, not Alzu as the platform, unless the law says otherwise.

Alzu Studio data: name, email, phone, messages, briefs, attachments, and other information you send us to request a proposal, quote, or custom work (UI design, marketing, automations, or development).

Account: name, email, access credentials, and security preferences.

Business: trade name, alias, industry, configuration, memberships, and user invitations.

Use and support: technical logs needed to operate the service, tickets, messages, and attachments you send to Alzu support.

Alzu Products subscription billing: plan, service status, and information needed to charge the agreed monthly fee (this does not include payments your business receives from its own customers in the store).

Studio: contact details, proposal content, deliverables shared on the project, and communications related to the agreed scope.

Provide, maintain, and improve the software, infrastructure, and updates included in the contracted service.

Manage your account, access, per-business subscriptions, and operational communications.

Handle inquiries, incidents, and platform support requests.

Review proposal requests, prepare quotes, and deliver Alzu Studio work according to the scope agreed in writing.

Comply with applicable legal obligations when required.

Hosting and API: Alzu's frontend and backend run on cloud providers that host the application and database per the product architecture.

Transactional email: operational notifications (for example support and service notices) may be sent through a transactional email provider (Resend), with credentials configured in the platform environment.

SaaS subscription billing: today billing from Alzu to your business may be handled manually as agreed; it does not automatically access payment methods you use with your end customers.

Mercado Pago and other business payments: when you enable payment integrations for your store or point of sale, those credentials and transactions belong to your business and those providers. They must not be confused with billing for your Alzu Products subscription.

The marketing site and operational apps may use cookies or local storage strictly necessary for session, security, and operation.

Alzu's public marketing code does not integrate third-party analytics cookies (for example Google Analytics / gtag). If measurement tools are added in the future, this policy will be updated.

We retain data while your account or business has an active relationship with the service and as needed for the purposes above.

After you cancel the software, your account stays in read-only mode for 30 days so you can export your data (products, customers, sales, and invoices). We then keep it 60 more days and delete it 90 days after cancellation. Receipts, invoices, and accounting records are kept for 10 years as required by law (Argentine Civil and Commercial Code), along with information needed for pending claims.

Data linked to an Alzu Studio project is kept for the commercial relationship of the engagement and as long as needed for legal obligations or claims, unless you request deletion when the law allows.

Under Argentine personal data protection law (Law 25.326 and related rules), you may request access, rectification, update, or deletion of your account data, and object to processing when the law allows.

To exercise these rights, email hola@alzu.io with your account email and your specific request. We will respond through the service's usual channels.

Deletion you request is subject to the same legal retention limits in section 7.

The Public Information Access Agency, the supervisory body for Law 25.326, handles complaints about breaches of personal data protection rules.

If your question is about data your business stores about its end customers, we will refer you or explain that you must handle it as the business owner toward those third parties.