Privacy Policy

This policy explains what personal data Strappberry collects through strappberry.com, what we use it for, who we share it with and how you can exercise your rights under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, LFPDPPP).

1. Who is responsible for your data

Strappberry, an app and custom software development company based in CDMX, México, is responsible for the personal data we collect on this website. For anything related to your data, email us at [email protected].

2. What data we collect

When you submit the contact form, you share:

• your name;
• your phone or WhatsApp number;
• your company name;
• your email address;
• whatever you tell us about your idea or project.

Along with your message, the form automatically sends:

• the language and the page you submit the form from;
• the first page you visited on the site and the address of the site you came from (referrer);
• the campaign parameters in the link you arrived with, if any: utm_source, utm_medium, utm_campaign, utm_term, utm_content and gclid;
• your browser and operating system type (user agent);
• your approximate location (country, state or region, and city), which our network provider, Cloudflare, infers from your IP address, and your browser's time zone; it is not your exact location and we don't use your device's GPS;
• a keyed hash of your IP address, stored with your request; we don't store your full IP address in our database. We also use your IP temporarily to limit how many submissions come from the same connection.

Our team also adds internal notes and a follow-up status to your request.

We don't ask for sensitive or financial personal data. Please don't include it in your message.

3. How we use your data

We use your data for these purposes, which are necessary to handle your request:

• replying to your message and contacting you by phone, WhatsApp or email;
• understanding your project and, if you ask for it, preparing a proposal;
• following up on the business conversation you started;
• protecting the form against spam and abusive submissions; if we mark a request as spam, we keep its email and IP hash in a block list, even if we delete the request, to prevent new submissions.

We also use the origin information (landing page, referrer, campaign parameters and approximate location) to learn which pages and channels bring us requests and to improve the site. If you don't want us to use it for that, email us at [email protected]; we'll still handle your request.

We don't sell your data. Your name, email, phone and message are not shared with Google or any advertising platform. We do use Google Ads to measure our ads and to show Strappberry ads to people who visited the site (remarketing), with the cookies explained in section 5. That purpose is optional and you can turn it off without affecting how we handle your request.

4. Information stored in your browser

The first time you visit the site, we store your landing page, the site you came from, the link's campaign parameters and the date it was saved in your browser's local storage (localStorage, under the name sb_attribution), and use it for 90 days; after that it is replaced on your next visit. That information stays on your device and only reaches us if you submit the form. You can delete it at any time by clearing this site's data in your browser settings.

5. Analytics and advertising cookies: Google Analytics and Google Ads

We use Google Analytics 4 to measure, in aggregate, how many people visit the site, which pages they view and how many forms are submitted. Google Analytics sets its own cookies (_ga and _ga_ followed by the measurement ID), which last up to 13 months. When you submit the form, we record the generate_lead event with the page and language, without your name, email, phone or message.

You can block or delete cookies in your browser and the site will keep working. Google also offers a browser add-on to opt out of Google Analytics: tools.google.com/dlpage/gaoptout

We also use Google Ads. The same Google tag sets the _gcl_au and _gcl_aw cookies on this site, which last 90 days, and Google sets cookies on its own domains (google.com, doubleclick.net and googleadservices.com). They tell us whether you arrived through one of our ads (with the link's gclid parameter), count how many requests each campaign brings, and show Strappberry ads on other sites to people who visited ours (remarketing). Google receives the pages you visit here and an identifier of your browser, not the data you type into the form.

To stop seeing personalized Google ads, including remarketing, go to Google's My Ad Center: myadcenter.google.com

Here is how Google explains its use of information from sites that use its services: policies.google.com/technologies/partner-sites

6. Who we share your data with

We don't sell or rent your data. It is processed by the providers we need to run the site:

• our hosting provider and Cloudflare, which protects the site and processes the requests that reach it;
• our email provider, because every request is emailed to the Strappberry team that handles it;
• Google, which processes Google Analytics and Google Ads measurement and advertising data and may also use it under its own policies;
• an error-monitoring service; if an error happens while sending the form, the report may include the data you submitted.

Some of these providers may process data on servers outside Mexico. We would also hand your data to an authority if the law requires it.

7. How long we keep your data

We keep form data for as long as it is needed to handle your request and follow up on the business relationship. You can ask us to delete it at any time, unless a legal obligation requires us to keep it.

8. How we protect your data

The site runs over an encrypted connection (HTTPS), and only authorized Strappberry staff can see the requests we receive. No system is infallible, so please share only the information you need to.

9. Your ARCO rights

You have the right to access your data, rectify it if it is wrong, cancel it (ask us to delete it) or oppose its use for a specific purpose. Under Mexican law these are known as ARCO rights. You can also revoke your consent or limit how we use your data.

To exercise any of these rights, email us at [email protected]. Include your name, the email or phone number you used in the form, the right you want to exercise and the data it concerns. We'll reply through the same channel within the time limits set by the LFPDPPP.

Read the current LFPDPPP on the Mexican Chamber of Deputies website

10. Changes to this policy

If we update this policy, we'll publish the new version on this page.