Privacy Policy
Last updated: August 3, 2026
Ekua Inc. ("Ekua", "we"), a company incorporated in Delaware, United States, operates the ekua.io website and is the controller of the data described here. This Privacy Policy describes what personal data we collect through this site, how we use it, and how you can exercise your rights over it. It covers the ekua.io website only; the "Data we process on behalf of our clients" section below separately explains the processing Ekua performs for its enterprise clients.
What data we collect
The ekua.io site has a single form and runs no advertising or analytics tools. We collect the following:
- Demo form: the name, company, email address, and message you type, along with the site language you submitted it in. Only the message is optional.
- Your IP address, which our server receives when you submit the form and which we use solely to limit automated submissions. It is not included in the email our team receives.
- Anti-abuse signals from the submission itself: how long the form was open before you sent it, and a hidden field that people never fill in. These exist only to tell people apart from bots.
- Server logs generated by our hosting provider as it serves each page (for example, IP address, browser type, page requested, date and time).
Cookies and storage on your device
We use two pieces of storage, both strictly functional. We use no advertising, analytics, or tracking cookies. If you never submit the form and never switch languages, the site stores nothing on your device.
- ekua-lang — a cookie created only if you click the language switcher. It stores your language choice for 12 months so you find the site in the language you prefer.
- ekua-demo-last — a timestamp saved in your browser's local storage when you submit the form, to prevent accidental duplicate submissions. It stays on your device until you clear your browser data.
No advertising, no tracking, no sale of your data
We do not sell your personal data, and we do not share it with third parties for advertising or profiling purposes.
This site loads no advertising pixels, no analytics tools, and no third-party scripts: the only servers that receive a request while you browse ekua.io are ours and our hosting provider's.
Because we run no tracking technologies, there is nothing here for browser signals such as Do Not Track or Global Privacy Control to switch off.
How we use your data
Form data: to respond to your request, contact you, and follow up on any business conversation that results.
Language cookie: to show you the site in the language you chose.
IP address and anti-abuse signals: to cap submission volume, block bots, and protect the form from abuse.
Server logs: to operate the site securely and reliably, and to diagnose faults.
These uses rest on your consent when you send us the form and on our legitimate interest in operating, protecting, and improving the site.
Third parties and providers
We work with the following providers, which process data on our behalf and under contract, solely to operate the site:
- Vercel — site hosting and server logs.
- Resend — delivery to our inbox of the email carrying your form submission.
- Web3Forms — a backup delivery service for that same email when the primary one is unavailable.
- Upstash — temporary storage of the submission-limit counter, keyed to your IP address and expiring automatically after roughly ten minutes.
- Our business email provider, where form submissions arrive and are kept.
International transfers
Ekua Inc. is incorporated in Delaware, United States, and the providers listed above operate servers in the United States and other countries.
This means that if you write to us from Ecuador or anywhere else in Latin America, your data is transferred and processed outside your country. We require every provider to commit contractually to confidentiality and security safeguards for that data.
Data retention
We keep each type of data only for as long as the purpose behind it requires:
- Form messages: kept in our inbox for as long as the conversation and any resulting business relationship last. We delete them sooner if you ask.
- IP address used for submission limits: expires automatically about ten minutes after the submission.
- Language cookie: 12 months from your last click on the switcher.
- Local-storage timestamp: until you clear your browser data.
- Server logs: according to our hosting provider's standard retention periods.
How we protect your data
We apply technical measures proportionate to a site that collects one contact form. No method of transmission over the internet is completely secure, but the safeguards we maintain include:
- All traffic is encrypted over HTTPS, and the site requires secure connections.
- A content security policy restricts what code is allowed to run on the page.
- Everything typed into the form is validated and sanitized before it is processed.
- We rate-limit submissions per sender to contain abuse.
- We minimize data: your IP address stays server-side and is not included in the internal email, and our production logs never record form content.
Data we process on behalf of our clients
In addition to the website data described above, some of our AI agents process personal data belonging to third parties (for example, an enterprise client's own end-customers or debtors) on behalf of our enterprise clients. In those cases, the client company is the data controller and Ekua acts as a processor, following its instructions.
If an Ekua-powered agent contacted you on behalf of a company, please direct any request about your personal data to that company directly, not to Ekua.
Your rights
We recognize your right to access, rectify, delete, and object to the processing of your personal data, among others.
These rights include those recognized under Ecuador's Organic Law on Personal Data Protection (LOPDP), where it applies.
How to exercise your rights
To exercise any of these rights over the data we collect through the website, email us at ekua@ekua.io. We will respond within the timeframes required by applicable law.
If your request concerns data processed on behalf of a client company (see the previous section), please contact that company directly.
Children
The ekua.io site is aimed at businesses and at people acting on behalf of a business. It is not directed at children, and we do not knowingly collect their personal data. If you believe a child has sent us data through the form, email us and we will delete it.
Changes to this policy
We may update this policy from time to time. We will post any changes on this page along with the date of the last update.
Questions about this policy? Email us at ekua@ekua.io. See also our Terms of Service.