Privacy Policy

1. Scope

This policy explains how Shadow Corp (“we,” “us”) collects, uses, and protects the personal data you provide when you browse this website, contact us, or subscribe to our newsletter.

2. Data we collect

We only collect the information you choose to submit:

• Contact form: your name, email address, company, and the message you send us.
• Newsletter and waitlists: your email address and the list you joined.
• Technical data: like any website, our hosting provider processes your IP address and basic request data to deliver pages and protect the service. We store only a one-way hash of your IP for a short time to enforce anti-abuse rate limits.

We do not ask for sensitive personal data, and we do not use advertising or cross-site tracking cookies.

3. How we use your data

We use your data to respond to your inquiries, prepare proposals you request, and send you the content you subscribed to. We do not sell or rent your personal data to third parties.

4. Service providers

We rely on a small number of trusted providers to operate this website:

• Vercel hosts this website and processes request logs (including IP addresses) to deliver and secure it.
• Supabase stores form submissions and subscriber records. Data is hosted in the United States.
• Resend delivers our transactional and newsletter emails.
• Cloudflare Turnstile protects our forms from bots and abuse. It may process technical signals from your browser to tell humans from automated traffic.

These providers process data on our behalf and only as needed to deliver their services. Because some of them operate outside your country, your data may be transferred to and processed in the United States.

5. Newsletter: double opt-in and unsubscribing

Our newsletter uses double opt-in: after you sign up, we send a confirmation email, and you are only added to the list once you click the confirmation link. You can unsubscribe at any time using the link included in every newsletter issue, or by writing to contacto@sh4dowcorp.com.

6. Legal basis and applicable laws

We process your data based on your consent and, for inquiries, on our legitimate interest in responding to you. We aim to handle personal data in line with applicable data protection laws, including Peru’s Personal Data Protection Law (Law No. 29733) and, where applicable, the GDPR and other regional regimes.

7. Your rights

You may request access to, correction of, or deletion of your personal data, or withdraw your consent at any time, by emailing contacto@sh4dowcorp.com. We will respond within a reasonable timeframe.

8. Retention and security

We keep personal data only for as long as needed for the purposes described above, or until you ask us to delete it. We apply security controls consistent with our standards as a cybersecurity firm, although no method of transmission or storage is completely secure.

9. Changes to this policy

We may update this policy from time to time. The “last updated” date at the top of this page reflects the most recent revision.

10. Contact

For any privacy questions or requests, contact us at contacto@sh4dowcorp.com.