Privacy Policy

The party responsible for your data is to be confirmed, located at address to be confirmed, Paraguay. In this policy we call it "PAUTIK" or "we".

For any question about your data, write to email to be confirmed.

Your account. Your name, your email and your password. Your password is never stored as is: we keep only a one-way hash (Argon2id) that cannot be turned back into the password. We use this data to create your account, sign you in and recognize you.

Your sessions. Each time you sign in we store the IP address, the browser and operating system you used, and the session dates. This keeps you signed in and lets you see, under "My account", where your account is open and close any session you don't recognize.

Two-step verification. If you turn it on, we store your authenticator app key and your backup codes in encrypted form.

Your businesses. The name of each business and what you enter under "Business details": industry, description, website, currency, WhatsApp, opening hours, tone, brand colors, audience, address and reach radius in kilometers. Also the products or services you add (with description, price and link) and who belongs to each business and in what role. This is what we build your campaigns on.

Security. We log sign-ins, failed attempts, sign-ups and lockouts, with the date, the IP and the email typed into the form, even if that email has no account. This helps us stop attacks, such as someone guessing passwords on your account, and investigate problems. We never log passwords.

What we don't ask for: ID documents, card details or your device's location. You type in the business address yourself.

PAUTIK has not launched yet. Connecting your Meta account, generating copy and images with artificial intelligence and reading your website are not yet active on pautik.app. Today we receive no data from Meta and send none of your data to artificial intelligence providers.

Before turning on each of these features we will update this policy with the data involved and the name of each provider. What is already decided about Meta is under "Your Meta account".

To provide the service you asked for: without your account and your business details we cannot prepare your campaigns.

To protect your account and the service: that is what the security log, the attempt limits and the anti-bot check are for.

With your consent: connecting your Meta account is your choice, and you can withdraw it at any time.

To comply with the law: if a competent authority requires it under Paraguayan law.

We use few cookies. The necessary ones make the site work; the measurement one (the Meta pixel) only if you accept it.

The session cookie (__Secure-better-auth.session_token) keeps you signed in. It lasts up to 30 days and is renewed while you use PAUTIK; signing out deletes it.

The two_factor cookie lasts 10 minutes and only appears while you sign in with two-step verification.

The sidebar_state cookie remembers whether you left the dashboard menu open or closed. It lasts 7 days.

The pautik_cookies cookie stores your cookie choice (all or only necessary) for one year.

Meta pixel: if you accept in the cookie notice, we load the Meta pixel (from Meta Platforms) to measure PAUTIK's ads. It records the pages you visit on pautik.app and Meta may link it to your Facebook or Instagram account. If you choose “Only necessary”, it is not loaded. You can change your choice at any time from “Cookies”, at the bottom of every page. We don't use any other analytics tools. The site's fonts and images are served from pautik.app.

The sign-up and sign-in screens load Cloudflare Turnstile, an anti-bot check. Cloudflare may use its own cookies or technical data for that check, under its privacy policy.

We don't sell or rent your data.

Cloudflare. All traffic to pautik.app goes through Cloudflare, which provides the secure connection, attack protection and caching of public pages. It therefore processes technical data about each visit, such as your IP and the page requested. On sign-up and sign-in, Cloudflare Turnstile also checks signals from your browser to rule out bots, and we verify its answer.

Meta, through the pixel: only if you accept measurement cookies. Meta receives the pages you visit on pautik.app and technical browser data, and handles them under its own privacy policy.

People in your business. Members of a business can see its details and the name and email of the other members. Your sessions and security settings are visible only to you.

Meta and artificial intelligence providers: only once those features are turned on, and on the terms we will publish here first.

We don't use an email provider today: PAUTIK does not send you automated emails.

Authorities: only if the law requires it, and only to the extent required.

Your data is stored in a PostgreSQL database on a server of our own, run by to be confirmed. We don't use a third-party cloud for the database.

Because traffic goes through Cloudflare's network, which has data centers in many countries, data about your visits may be processed outside Paraguay in transit.

Your account and business data, for as long as you have an account. If you delete it, the data is removed as explained under "Deleting your account".

A session stops working when you close it or after 30 days without using PAUTIK.

The security log deletes itself after 90 days. Per-IP attempt counters, after 24 hours.

Technical server logs rotate by size and overwrite themselves.

Database backups are kept for up to 14 days. What you delete disappears from the backups as they expire.

Encrypted connection (HTTPS) across the whole site, with HSTS.

Passwords of at least 10 characters, stored as Argon2id hashes.

Optional two-step verification, with an authenticator app and single-use backup codes.

Per-IP attempt limits, temporary lockout of an account under attack and an anti-bot check on sign-up and sign-in.

The website reaches the database with limited permissions, and a business's data is read only after checking that you belong to that business.

No system is foolproof. If an incident affects your data, we will tell you and explain what we did. On your side: don't reuse your password on other sites, and turn on two-step verification.

You can ask to access, correct or delete your data, or object to a use of it, under Paraguayan law on personal data protection.

You can do much of this from the dashboard. Under "My account" you change your name and password, turn two-step verification on or off and close sessions. Under "Business details" you correct your business information, if you are its owner or an admin.

For anything else (a copy of your data, changing your email or deleting your account), write to email to be confirmed from your account's email address. We may ask you to confirm your identity before acting.

You can delete your account from “My account” in the dashboard: we ask for your password to confirm and the deletion happens after 30 days. Until then you can cancel it from the same place. If you can't sign in, write to email to be confirmed from the email you signed up with.

When we delete your account we remove your data, your sessions, your two-step verification and your place in each business.

Businesses where you are the only member are deleted entirely, with their details and their products or services. Where there are other members, you leave and the business stays. If you are the only owner of a business with other members, we will first ask you who should take charge of it.

Your entries in the security log are kept without your user, email or IP, and are deleted when they reach 90 days.

Once the Meta connection is available, you will connect your account in a Meta window, where you choose which ad accounts, Pages and Instagram accounts PAUTIK may use. Connecting it is optional and requires your consent.

We will use that access only for what you ask: creating in your ad account the campaigns you approve, always paused, and showing you their status and results. PAUTIK never turns campaigns on by itself and does not handle the money for your ads. The access Meta grants is stored encrypted.

You can remove PAUTIK's access at any time from Meta's settings: on Facebook, under Settings & privacy › Settings › Business integrations; or, if you connected it through a business portfolio, in that portfolio's settings, in the integrations or connected apps section.

Removing access does not delete your PAUTIK account. To have us also delete the data we received from Meta, write to email to be confirmed. What Meta does with your data is governed by Meta's privacy policy.

PAUTIK is not intended for anyone under 18, and we don't knowingly collect their data. If you know a minor has created an account, write to email to be confirmed and we will delete it.

If we change this policy, we will publish the new version on this page with its date. If the change is significant, such as a new provider receiving your data, we will let you know before it takes effect.

If this English translation differs from the Spanish version, the Spanish version prevails.

to be confirmed · address to be confirmed, Paraguay · email to be confirmed