Privacy Policy
Last updated: August 19, 2026
Ekua Inc. ("Ekua", "we"), a company incorporated in Delaware, United States, operates the ekua.io website and is the controller of the data described here. This Privacy Policy describes what personal data we collect, how we use it, and how you can exercise your rights over it. It covers the ekua.io website and the WhatsApp communications described in the "WhatsApp communications" section; the "Data we process on behalf of our clients" section below separately explains the processing Ekua performs for its enterprise clients.
What data we collect
The ekua.io site has a single form and runs no advertising or analytics tools. We collect the following:
- Demo form: the name, company, email address, and message you type, along with the site language you submitted it in. Only the message is optional.
- Your IP address, which our server receives when you submit the form and which we use solely to limit automated submissions. It is not included in the email our team receives.
- Anti-abuse signals from the submission itself: how long the form was open before you sent it, and a hidden field that people never fill in. These exist only to tell people apart from bots.
- Server logs generated by our hosting provider as it serves each page (for example, IP address, browser type, page requested, date and time).
Cookies and storage on your device
We use two pieces of storage, both strictly functional. We use no advertising, analytics, or tracking cookies. If you never submit the form and never switch languages, the site stores nothing on your device.
- ekua-lang — a cookie created only if you click the language switcher. It stores your language choice for 12 months so you find the site in the language you prefer.
- ekua-demo-last — a timestamp saved in your browser's local storage when you submit the form, to prevent accidental duplicate submissions. It stays on your device until you clear your browser data.
No advertising, no tracking, no sale of your data
We do not sell your personal data, and we do not share it with third parties for advertising or profiling purposes.
This site loads no advertising pixels, no analytics tools, and no third-party scripts: the only servers that receive a request while you browse ekua.io are ours and our hosting provider's.
Because we run no tracking technologies, there is nothing here for browser signals such as Do Not Track or Global Privacy Control to switch off.
How we use your data
Form data: to respond to your request, contact you, and follow up on any business conversation that results.
Language cookie: to show you the site in the language you chose.
IP address and anti-abuse signals: to cap submission volume, block bots, and protect the form from abuse.
Server logs: to operate the site securely and reliably, and to diagnose faults.
These uses rest on your consent when you send us the form and on our legitimate interest in operating, protecting, and improving the site.
Third parties and providers
We work with the following providers, which process data on our behalf and under contract, to operate the site and the communications described in this policy:
- Vercel — site hosting and server logs.
- Resend — delivery to our inbox of the email carrying your form submission.
- Web3Forms — a backup delivery service for that same email when the primary one is unavailable.
- Upstash — temporary storage of the submission-limit counter, keyed to your IP address and expiring automatically after roughly ten minutes.
- Our business email provider, where form submissions arrive and are kept.
- Meta Platforms — transmission and delivery of WhatsApp messages, under its own WhatsApp Business Platform terms.
International transfers
Ekua Inc. is incorporated in Delaware, United States, and the providers listed above operate servers in the United States and other countries.
This means that if you write to us from Ecuador or anywhere else in Latin America, your data is transferred and processed outside your country. We require every provider to commit contractually to confidentiality and security safeguards for that data.
Data retention
We keep each type of data only for as long as the purpose behind it requires:
- Form messages: kept in our inbox for as long as the conversation and any resulting business relationship last. We delete them sooner if you ask.
- IP address used for submission limits: expires automatically about ten minutes after the submission.
- Language cookie: 12 months from your last click on the switcher.
- Local-storage timestamp: until you clear your browser data.
- Server logs: according to our hosting provider's standard retention periods.
How we protect your data
We apply technical measures proportionate to a site that collects one contact form. No method of transmission over the internet is completely secure, but the safeguards we maintain include:
- All traffic is encrypted over HTTPS, and the site requires secure connections.
- A content security policy restricts what code is allowed to run on the page.
- Everything typed into the form is validated and sanitized before it is processed.
- We rate-limit submissions per sender to contain abuse.
- We minimize data: your IP address stays server-side and is not included in the internal email, and our production logs never record form content.
Data we process on behalf of our clients
In addition to the website data described above, some of our AI agents process personal data belonging to third parties (for example, an enterprise client's own end-customers or debtors) on behalf of our enterprise clients. In those cases, the client company is the data controller and Ekua acts as a processor, following its instructions.
If an Ekua-powered agent contacted you on behalf of a company, please direct any request about your personal data to that company directly, not to Ekua.
WhatsApp communications
Ekua and the agents it powers may communicate with you on WhatsApp. Messages are transmitted through the WhatsApp Business Platform, a Meta Platforms service that processes them under its own terms and its own privacy policy.
When you take part in a WhatsApp conversation with us or with one of our agents, we receive and process your phone number, your WhatsApp profile name, the content and timestamps of the messages exchanged, and the technical data needed to deliver them.
We use this data only to hold the conversation, respond to your messages, and follow up accordingly. We do not use it for advertising, and we do not sell it.
You can stop receiving WhatsApp messages from us at any time: say so in the same conversation or email us at ekua@ekua.io, and we will honor your request.
When an Ekua-powered agent communicates with you on WhatsApp on behalf of a client company, that company is the controller of your data, as described in the previous section.
Your rights
We recognize your right to access, rectify, delete, and object to the processing of your personal data, among others.
These rights include those recognized under Ecuador's Organic Law on Personal Data Protection (LOPDP), where it applies.
How to exercise your rights
To exercise any of these rights over the data we collect through the website, email us at ekua@ekua.io. We will respond within the timeframes required by applicable law.
If your request concerns data processed on behalf of a client company (see the previous section), please contact that company directly.
Data deletion
You can request at any time that Ekua delete the personal data it has collected about you, including data associated with WhatsApp conversations. Email us at ekua@ekua.io with the subject "Data deletion" and include the phone number or email address you used to interact with us.
We may ask you for additional information to verify your identity before processing the request.
We will confirm your request and delete the data within 30 days, except for data we must keep to meet a legal obligation; if that is the case, we will tell you.
If your request concerns data we process on behalf of a client company, we will forward it to that company and notify you, since that decision belongs to the data controller.
Children
The ekua.io site is aimed at businesses and at people acting on behalf of a business. It is not directed at children, and we do not knowingly collect their personal data. If you believe a child has sent us data through the form, email us and we will delete it.
Changes to this policy
We may update this policy from time to time. We will post any changes on this page along with the date of the last update.
Questions about this policy? Email us at ekua@ekua.io. See also our Terms of Service.