Last updated: October 11, 2026

Privacy policy

What data this website and our client system keep, why, for how long, who they are shared with, and how to ask to see, correct or delete them.

1. Who is responsible for your data

Páginas Clover (website design and development, Argentina) is responsible for the personal data used on this website and in its client system. For any question or request about your data, write to info@paginasclover.com or on WhatsApp at +54 9 3447 41-2322.

2. If you only visit the website

No cookies and no third-party trackers. The public pages use no cookies, no advertising, no Google Analytics and no social media pixels.
Our own statistics. The website records the page you open, how far you scrolled and how long you stayed, which sections and buttons you tapped (for example “WhatsApp” or a plan), which site you came from (only the domain, for example google.com), the campaign if the link includes one (utm_source, utm_campaign, utm_medium), how long the page took to load and to respond (speed), your browser’s language and time zone, and the type of device, browser and operating system (for example “mobile · Chrome · Android”; the full browser details are not stored).
We do not store your IP address. To count visitors without identifying you, the server computes a code from your IP and browser mixed with a random key that changes every day and is deleted the next day: that code cannot reveal who you are or link visits from different days. Your browser also keeps a random visit number (in sessionStorage), which is deleted when you close the tab.
Individual visits are deleted automatically after 400 days (about 13 months). All that stays stored are daily and hourly totals (for example “35 visits on Monday, 12 from Google”), which cannot identify anyone.
Abuse protection. The server keeps request counters per address to stop attacks; they are stored with the address irreversibly transformed (a “hash”) and discarded after 24 hours.
The CEO Dashboard and Client area demos use made-up data and store nothing.

3. If you send us an inquiry

Website forms (“Tell us about your project”, “Get a free review of my site”, “Get my free proposal” and “Request my account”): we keep what you write so we can reply: name, email and/or WhatsApp, industry, whether you already have a website, your website address, your business name and your message, depending on the form, together with the type of request, the date and the page you sent it from. Along with your inquiry, we also store how you reached the site that day (for example from Google or Instagram), which page you landed on, which pages you viewed, how many minutes passed before you wrote to us and the type of device (phone, tablet or computer), so we know what works. It is kept for as long as the inquiry is kept. We do not store your IP. At the same time, WhatsApp opens with the message ready.
Who looks after you: each inquiry is assigned in turn to a team member, who gets a task to contact you and an internal notice by email (to the address they have set in the panel) with your name, your contact details, the type of request, the page, the language and the first lines of your message (up to 400 characters, with links disabled). To reply, they may call you or write to you on WhatsApp or by email, using the contact details you left.
Automatic reply: if you left your email, you get a confirmation email in your language from info@paginasclover.com, sent through Hostinger’s mail server over an encrypted connection. It only contains your first name, the name of the person who will look after you and our website: it never repeats what you wrote. At most one is sent per address every 24 hours, with daily caps. To enforce that limit, the sending log does not store your address but an irreversible code made with a secret key of the site (HMAC), with the date, the type of email and whether it was sent; it is deleted after 30 days. If you reply to that email, your reply reaches us by email.
Log: the security log records that an inquiry arrived (type, your name and the page), who it was assigned to and whether the automatic reply was sent, without your IP; it is deleted after 400 days.
WhatsApp and email: if you write to us on WhatsApp (a Meta service) or by email, the conversation stays in those services and on our devices, and is also governed by their own policies.
The team may record the follow-up of your inquiry in the panel (“leads”).

4. If you are a client

When we work together, we register you in our client system. We store:

Contact details: name, phone or WhatsApp, and email.
The service: plan, contract, price, currency, start date and next payment date, status and the notes the team adds for follow-up; the work we do for you (date, duration, status and details).
Payments and receipts: concept, amount, date, due date, payment method and status, and the receipts you or we upload (JPG, PNG or WEBP image, or PDF, up to 5 MB).
Messages: what you write to us from the Client area and our replies; the notices and promotions we send you and whether you have read them.
Design proposals: if we show you proposals, we record when you viewed or opened them and which one you marked as your favorite.
Your Client area account: username, language, your password stored only as a “hash” (Argon2id or bcrypt: nobody can read it, not even us), the date of your last login and single-use activation codes (also stored as a hash; they expire after 72 hours).
Security log: logins (and failed attempts), password changes, uploaded receipts, messages and changes made by the team are recorded with the date, who did it and the truncated IP (without the last number, for example 190.2.3.x). While you have an open session we also keep a summary of the device (browser, system and whether it is a phone or a computer).

Your feedback (“How are we doing?”)

In the Client area you can leave a rating from 1 to 5 and, if you like, a comment (up to 1000 characters); at most one per day. We store the rating, the comment, the date and whether you allow us to publish it. The security log records only the rating, not the comment.
Publishing it is optional: only if you tick “You may publish my comment as a review (with my first name)” may we publish your comment as a review, with your first name and nothing else. If you change your mind, let us know and we will take it down.
If you give 3 or less, it shows up as pending for the team and the person who looks after you may contact you to find out what happened.
With the help of artificial intelligence: feedback may be analyzed with the help of AI tools (Claude, by Anthropic) to improve our service. The owner can copy the feedback from the last 90 days (your name, the date, the rating, the comment and whether it may be published) and paste it into Claude to ask for ideas. A person does this by hand: the system sends nothing to Anthropic on its own. It is not used for advertising.

5. The phone app, notifications and Face ID

This applies to the Client area and to the team panel.

The phone app

The Client area and the panel can be installed as an app from the browser (“Add to Home Screen” or “Install app”), with no App Store or Google Play. It is the same website with an icon: it adds no trackers or new data, and it does not ask for access to your location, camera or microphone.
If you tap “Not now” on the “Install the app” card, your browser remembers it in localStorage (app-instalar-portal or app-instalar-panel).

Notifications (optional)

They are turned on per device, under My account → Notifications: your phone asks for permission only when you tap “Turn on notifications on this phone”. If your app does not show this option yet, none of this is stored.
For each device we store the delivery address your browser provides, its public encryption keys, a device summary (for example “Safari · iOS · mobile”), the dates it was added, last updated and last delivered to, a count of failed deliveries and which kinds of alerts you turned off. Turning them on or off is recorded in the security log.
Each alert travels end-to-end encrypted through your phone’s or browser’s notification service (Apple, Google, Mozilla or Microsoft), which only delivers it and cannot read it. It only says the essentials (for example “💬 New message from Páginas Clover”; in the team panel, at most a client’s first name), never the content of a message.
Along with notifications, the app registers a service worker that keeps only the “Offline” page on your device (never pages with your data), and your browser notes in localStorage (push-portal or push-panel) whether this device has them turned on.
You can turn them off with “Turn off on this phone” or in your phone settings. They are deleted when you turn them off, when you tap “Sign out”, when the service reports that the device no longer exists or rejects it several times in a row, and after 30 days if you changed your password or closed all sessions and did not open the app again.

Face ID or fingerprint (passkeys, optional)

If you add a passkey in My account, you can sign in with Face ID, your fingerprint or your phone’s screen lock. If your app does not show this option yet, none of this is stored.
Your face and fingerprint never leave your phone, and neither does the private key: the website never receives them. We store only that device’s public key (useless for signing in without your phone), its identifier and technical details (algorithm and connection type), the name you give it (for example “Ana’s iPhone”), the type of password manager that keeps it and whether it is synced, a counter sent by the device (to detect copies), the dates it was added and last used, and a random identifier of your account for passkeys (not your username).
Each sign-in uses a single-use challenge that expires after 5 minutes (stored only as an irreversible code). Adding, renaming or removing a passkey, and each sign-in, are recorded in the security log.
You can remove it at any time in My account; it is also deleted when your account is deleted. If your phone syncs passkeys (iCloud Keychain or Google Password Manager), that copy is kept by Apple or Google under their own policy; we never receive it.

6. Team members

For people who work at Páginas Clover and use the panel, we store username, name, email (optional; to receive internal notices about inquiries), profile and permissions, the password as a hash, the two-step verification key (mandatory; stored encrypted), recovery codes (as a hash), the last login and their actions in the security log, plus the tasks, ideas and follow-up notes they enter.

Weekly sales report: people with the sales profile can send a short report each week (who they talked to and how it went, what they were asked, ideas to sell better, what help they need and, optionally, another idea). The owner and the administrators read it, and the feedback written back is seen only by that person. Reports may be analyzed with the help of Claude (Anthropic): the owner can copy a week’s reports (with each seller’s name, their answers and the feedback) and paste them into Claude to ask for ideas. They are kept while the person has a user in the panel.

7. What we use the data for

To answer your inquiries and prepare the reviews or proposals you ask for.
To confirm by email that we received your inquiry and notify the team member who will look after you.
To provide the service: manage work, payments, receipts and proposals.
To give you access to the Client area and send you notices about your service.
To learn your opinion so we can improve our service and, only with your permission, publish your comment as a review.
If you turn them on: to send you notifications on your phone and let you sign in with Face ID or fingerprint.
To support the sales team through their weekly reports.
To protect accounts and the system: prevent abuse, detect unauthorized access and investigate incidents.
Website usage statistics, always aggregated, to improve it.

We use your data because you give it to us when you contact or hire us (your consent) and because it is necessary for our relationship with you. We do not use it for advertising, we do not sell it and we do not hand it over to anyone for their own purposes.

8. Cookies and browser storage

Public pages: no cookies. Only the random visit number in sessionStorage (deleted when you close the tab).
Client area and panel: when you log in, a session cookie is used (__Host-cli for clients, __Host-adm for the team), needed to keep you signed in. It is deleted when you log out or close the browser, and the session expires on its own after 30 minutes of inactivity or after 12 hours. The login screens also use a security cookie (__Host-clic or __Host-admc) with a random value that protects the form. If you change the Client area language, the lang cookie remembers it for one year. These cookies belong only to this site, travel only over secure connections and no script on the page can read them.
On team devices, the panel stores an_ignore in the browser so their own visits are not counted in the statistics.
Phone app: if you tap “Not now” on the “Install the app” card, the browser stores app-instalar-portal or app-instalar-panel in localStorage. With notifications on, it also stores push-portal or push-panel and the “Offline” page (see section 5). None of this is used to track you.

9. Where they are stored and how we protect them

On the server of our hosting provider, Hostinger, which also provides the network that speeds up the site. Hostinger may have its data centers outside Argentina. The database and files are in a private folder, outside the public part of the site: they cannot be opened from the internet.
Encrypted connection (HTTPS) across the site, passwords stored as hashes, mandatory two-step verification for the team, per-person permissions, single-use codes, attempt limits and a security log. Each client sees only their own data. More details in Security.
Backups: an automatic copy of the database on every day the panel is used (the last 30 are kept) and copies before updating the system or deleting a client (the last 30 are kept). They are in the same private folder. Statistics and receipt and proposal files are not included in those copies.

10. Who they are shared with

Hostinger stores the data on our behalf (it is the hosting processor). Like any server, it may record the IP and requested page in its technical logs. It is also the mail server that sends the automatic reply and the internal notices about inquiries.
Google Fonts: the public pages and the design proposals load fonts from Google; when they do, your browser requests the files from Google, which receives your IP and browser data (Google’s policy).
Team panel: the charts and the two-step verification QR code are loaded from cdnjs (Cloudflare). This only affects the team.
Notification services (Apple, Google, Mozilla or Microsoft): only if you turn on notifications; they deliver encrypted alerts they cannot read.
Anthropic (Claude), United States: we use Claude, Anthropic’s AI assistant, as a work tool: to analyze client feedback and the team’s weekly reports (which may mention who each seller talked to), to help us draft replies to inquiries, and to keep our internal client dashboard (business name, domain, plan, price, whether the month is paid, change requests and site review results). It only receives what we give it for those tasks; the website’s client system sends it nothing on its own. It is not used for advertising (Anthropic’s policy).
WhatsApp (Meta) and your email service: only if you write to us there; their own policies apply.
Authorities: only if a law or a court order requires it.

We do not sell or rent data, there is no advertising and we share nothing with other companies so they can offer you things.

11. How long we keep them

Inquiries and leads: until we finish helping you; the team deletes them when they are no longer needed, or earlier if you ask.
Clients, work, payments, receipts, messages and proposals: while you are a client and, afterwards, for as long as a law requires us to keep them. If you ask us to delete them and no obligation prevents it, we delete them. Deleting a client also deletes their receipts and account.
Automatic email log: only the irreversible code of the address, the date, the type and whether it was sent; deleted after 30 days.
Feedback: while you are a client; deleted when the client is deleted. Team reports: while the person has a user in the panel. What is pasted or entered into Claude stays in the business’s Claude account until deleted, and Anthropic handles it under its own terms.
Notifications: until you turn them off or they are deleted automatically (see section 5). Passkeys: until you remove them or your account is deleted; sign-in challenges, 5 minutes.
Security log and statistics: 400 days (daily and hourly totals, with no one’s data, are kept permanently). Sessions: deleted 2 days after they are closed or stop being used. Activation codes: 30 days after being used or expiring. Abuse counters: 24 hours.
Backups: they are replaced over time (30 of each type), so deleted data may remain in a copy until that copy is replaced.

12. Your rights (Argentine Law 25,326)

You can ask us at any time to access your data, rectify it, update it or delete it, and to withdraw your consent. Write to info@paginasclover.com or on WhatsApp; to protect your data we will ask you to confirm your identity. We answer access requests within 10 calendar days and rectification, update or deletion requests within 5 business days.

The data subject has the right to access their personal data free of charge at intervals of no less than six months, unless a legitimate interest is shown, as established in article 14, paragraph 3 of Law No. 25,326. The Agency for Access to Public Information, as the Control Body of Law No. 25,326, has the power to handle complaints and claims filed by anyone whose rights are affected by non-compliance with the rules in force on personal data protection.

You can contact the Agency for Access to Public Information (AAIP) at argentina.gob.ar/aaip.

13. Changes to this policy

If what the website or the system does with data changes, we update this page and the date above. We review this policy whenever the website changes. If you have questions about your data, write to info@paginasclover.com.