Privacy Policy

1. Information we collect

Through the forms on this Site, we collect:

• Contact form: name, email, company, project type, budget, and your message.
• Email verification: the email address you enter to open the client questionnaire, and the one-time code we send to it. The code is never stored in readable form and expires after 10 minutes.
• Client onboarding questionnaire: the service you choose, the business, project, and contact details you provide, plus any files you choose to upload (logos, photos, video, documents).
• Automatically: basic technical data such as IP address and request headers, used only for security (rate limiting, abuse prevention) — see our Cookie Policy.

2. How we use it

• To respond to inquiries and evaluate whether we're a good fit for your project.
• To plan, design, and build the work you've asked us to do.
• To secure the Site against spam and abuse (e.g. rate limiting form submissions).

We do not sell your information, and we do not use it for advertising or share it with third parties for their own marketing. The only third parties that handle it are the service providers listed in section 3, solely to run the Site.

3. Where it's stored and who processes it

Onboarding submissions and uploaded files are stored as private files on Vercel Blob (Vercel Inc., United States) — they are not publicly accessible, and access is limited to Código Serna. The Site is hosted on Vercel. Verification codes are delivered by email through Resend (Resend, Inc., United States). By using the Site you understand that your information is processed in the United States by these providers.

4. How long we keep it

We keep inquiry and onboarding data for as long as reasonably needed to evaluate or deliver your project, and to meet accounting or legal obligations afterward. You can request deletion at any time — see section 6.

5. File uploads

Uploaded files are checked against an allow-list of file types and validated against their actual content before being accepted, and are stored as static files — never executed by our servers. This blocks the most common upload-based attacks, but is not a substitute for antivirus software on your own device before uploading.

6. Your rights

You can access the information we hold about you, ask us to correct it, delete it, or object to how we use it (in Mexico, the ARCO rights: access, rectification, cancellation, and opposition), and withdraw your consent at any time, by reaching out through the contact page. We'll respond within a reasonable time and in any case within the period the law requires.

7. Changes

We may update this policy as the Site evolves. Material changes will be reflected by updating the date at the top of this page.