Privacy policy

When a client business connects its WhatsApp Business account to our application, we process on its behalf the data needed to provide the service: the phone number and profile name of the people who write to it, the content of the messages and files they exchange, and the appointment, payment and service data the business enters into the system.

Solely so the client business can serve, schedule, send appointment reminders to and follow up with its own customers. We do not sell data, we do not use it for our own advertising, and we do not share it with third parties, except for the infrastructure providers needed to operate: Meta Platforms (WhatsApp), Cloudflare (hosting), Anthropic (automated assistant) and Mercado Pago (payments), each under its own policies.

The client business is the controller of its own customers’ data. Gryff acts as a data processor, following its instructions.

For as long as the client business keeps the service. When it ends, the data is handed over to the business in full and deleted from our systems within 30 days.

Data travels encrypted, access to the system requires an individual username and password, and each member of the business’s team sees only what concerns them.

Apart from the applications, this website (gryff.com.ar) collects data on its own, and Franco Forconi is the controller of that data. The only place it does so is the contact form, and only with what you choose to send:

• Name
• Email address
• Your project description and the form’s optional fields (project type, status, estimated budget and timeline)

We use that data exclusively to answer your inquiry and, if we move forward, to prepare a work proposal. We do not use it to send you advertising, we do not sell it, and we do not share it with third parties for commercial purposes. The legal basis for processing is your consent, which you give by submitting the form and can revoke at any time by writing to us.

Each inquiry reaches us by email and is also stored in a database of our own (hosted on Cloudflare) that only we can access from a private panel, so we can follow up on it. Along with what you write we record the date, the site language and the approximate location (country and city) derived from your IP address; the IP itself is not stored. You can ask us to delete it at any time.

We keep the messages we receive for as long as the conversation, or the business relationship that follows from it, lasts.

To run the site and receive your messages we use infrastructure providers that act as data processors:

• Web3Forms: the service that relays the form’s content to our email inbox.
• Cloudflare: hosts and serves this website (hosting and CDN) and the database that stores form inquiries and the anonymous analytics.
• Instagram (Meta Platforms): the home page shows our latest posts. The images and videos load from Instagram’s servers, which therefore receive your IP address like any site you visit. We do not embed their tracking code or cookies.
• DolarApi: on the pricing page your browser requests the day’s US dollar exchange rate to show values in Argentine pesos. Only the rate is requested; none of your data is sent beyond the connection itself.

This site uses no tracking cookies and no advertising tools. The only things stored in your browser are your theme preference (light or dark) and a temporary session identifier for analytics, which is deleted when you close the tab. Neither contains personal information.

We use our own anonymous analytics to understand how the site is used and improve it. We record aggregate behavioral data: page views, time and scroll per page, traffic source, button clicks, device type and browser, language, and the approximate location (country, region and city) derived from your IP address. We do not store your IP, we use no persistent or third-party cookies, and we do not combine this data to identify you.

On the contact form we record only behavior —whether you started filling it in, which field you left it at, and whether you submitted it— never the content of what you type before submitting.

You can ask to access, correct or delete your data under Argentina’s Personal Data Protection Law No. 25,326. Write to us at hola@gryff.com.ar. The Agency for Access to Public Information (AAIP) is the law’s enforcement authority.

If we adopt tools or services that change how we handle personal data, we will update this page before they go into use.