Privacy policy

This is a courtesy translation. The Spanish version, Política de privacidad, is the one that governs.

1. Who is responsible for your data

The party responsible for your data is Andrei Komarov, CUIT 27-19156435-4, at Tte. Benjamin Matienzo 2652. For any privacy question, write to contacto@concobro.com.

This policy covers the concobro.com site and its forms, the app for your computer, and your Concobro account and subscription. It follows Argentine Law 25.326 on the Protection of Personal Data and its Regulatory Decree 1558/2001.

2. What data we process

Contact and waitlist forms: your name, how to reach you (WhatsApp or email), your type of business and your message, if you write one.
Withdrawal and cancellation form: your name, the account’s CUIT or email, the request type and the reason, if you give one.
Your account: your business details (name, legal name, CUIT and address) and the account holder’s name and email. We process your team’s login details on behalf of your business.
Your subscription: the charges and their invoices. Mercado Pago processes your card details. We only see the brand, the last four digits and the expiry date.
Technical data: your IP address and browser details, to protect the forms and measure visits.

The data your business enters into Concobro, such as sales, the customers you invoice or your team, belongs to your business. We process it only to provide the service, as article 25 of Law 25.326 provides.

3. What we use it for

Answering your enquiry and arranging a demo.
Writing to you when your free trial is ready, if you joined the waitlist.
Creating your account and providing the service.
Charging the subscription and issuing its invoice.
Handling your withdrawal and cancellation requests.
Emailing you about changes to prices and to the terms of service.
Measuring, in aggregate, how the site is used, to improve it.
Keeping spam out of the forms.

We do not sell your data or use it for third-party advertising.

4. Legal basis

We process your data with your consent, which you give when you send a form, or because we need it to perform our contract with you or to meet a legal obligation, such as invoicing. Article 5 of Law 25.326 provides for both.

We share your data only with the providers we need to operate, and only for what they do for us:

Cloudflare, which hosts this site and the images you upload to Concobro, carries our API traffic, measures visits with Cloudflare Web Analytics and protects the forms with Cloudflare Turnstile.
Vultr, which hosts our servers, in the United States.
Turso, which hosts the database, in the United States.
Resend, which sends our emails.
Umami Cloud, which measures how the site is used.
Mercado Pago, which processes subscription payments.
WhatsApp (Meta), if you choose to be contacted that way.

Some of these providers process data outside Argentina. ARCA receives the details of every invoice we issue to you, as tax rules require, and we may also hand data to an authority that requests it on legal grounds.

6. Payment processors

When your business takes card or QR payments through Concobro, the payment data goes to Clover (Fiserv) or Mercado Pago, depending on the payment method you use. The payment terminal reads and processes the card data and sends it to the processor. Concobro receives only the result of the transaction: the amount, the status and, when the processor reports them, the card brand and its last four digits. The full card number, its expiry date and its security code never reach Concobro. Each processor handles that data under its own privacy policy.

7. How long we keep it

Enquiries: as long as we need to answer you and follow up.
Waitlist: until we write to you that your free trial is ready, or until you ask us to delete it.
Your account: while it is active. After it ends, you can ask us for a copy of your data for 90 days. After that we delete it, except what the law requires us to keep.
Subscription invoices: for the period tax rules require.
Site statistics: Umami keeps them for 6 months.

8. How we protect it

We protect your data with reasonable measures: encryption in transit, restricted access and backups. No system is infallible, so we do not guarantee absolute security.

9. Your rights and how to exercise them

You can ask to access your data and ask us to rectify, update or delete it. These are the rights in articles 14 and 16 of Law 25.326, known in Argentina as ARCO rights. You can also ask us to stop sending you marketing emails.

To exercise them:

Write to contacto@concobro.com from your account’s email, or with something that proves your identity.
Tell us what you want to do: see, correct, update or delete your data.
We answer within the legal deadlines: 10 calendar days for an access request and 5 business days for a rectification, update or deletion request.

Correcting inaccurate or incomplete data costs you nothing.

10. Supervisory authority

The Agency for Access to Public Information (AAIP) enforces Law 25.326. If you believe we have not respected your rights, you can file a complaint with it. Argentine rules require the following notice, which stays in Spanish:

LA AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, en su carácter de Órgano de Control de la Ley N° 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales.

11. Cookies

Our pages set no cookies of their own. Cloudflare, which hosts the site, may store a technical cookie while protecting it from an attack. Cloudflare Web Analytics and Umami measure visits without cookies. The contact, waitlist and withdrawal and cancellation forms use Cloudflare Turnstile to check that you are not a bot, and Turnstile may store technical data in your browser to do so.

12. Changes to this policy

If we change this policy, we publish the new version on this page, with the date it takes effect, and email you if you have an account.