Privacy notice

The controller of the personal data described here is José Luis Gómez Araujo, an individual trading as Gaia Nexus. Address: Av. Paseo de la República 4456, dpto. 301, Miraflores, Lima, Peru. Contact: hello@gaia-nexus.com. Last updated: October 12, 2026.

What we don't do

• We don't use cookies, analytics or tracking pixels on this website. Browsing it doesn't give us any personal data. We don't store what you write in the chat (/chat). The support form (/support) stores your report and email only to answer you. The Complaints Book (/complaints-book) keeps your complaint sheet for 2 years because the law requires it.
• We don't ask you to create an account.
• We never see or store your card details: the payment provider handles them.
• We don't sell or rent your data. We only use it for commercial purposes for the single inquiry to businesses described below.
• We don't use your data to train AI models.

What we do collect, and why

We only have personal data about you if you pay us, write to us, published a public request for software work, or your business publishes a contact email on its website:

• If you buy something: your name, email, country and the amount paid, from the payment provider. We use them to send you what you bought and to keep the accounting records the law requires.
• If you email us: your email address and what you write. We use them to answer you and to deliver your project.
• If you sign up to hear about or test a product we're developing (for example, by writing to us from a product-test page — our first is a mobile puzzle game): your email address and what you write to us, including any survey answers. We use this only to let you know, once, when there's something of that product to try, and to decide whether to build it. We don't ask for health information. This is for adults (18 or older) only. If the test doesn't go ahead, we delete it within 30 days after it closes; if it continues, we keep it for at most 12 months and write to you about it only once. It stays in the same inbox store as other email you send us (Resend and Neon, USA); we never copy it to our code repository or to Zoho CRM.
• If you use the chat: what you write is sent to OpenAI to generate the answer, and nothing else. We don't store the conversation: it only lives in the page while you use it and expires after 2 hours. To enforce the daily message limit we keep a counter linked to a code derived from your IP address; the code changes every day and the counter is deleted the next day. Please don't share personal or payment data in the chat: it rejects messages with emails, phone numbers, card numbers or passwords.
• If you report a problem in the support form (/support): your email, the product, the type of problem, what you write and, if you give it, where it happened. We use them to fix the problem and answer you, and AI agents (OpenAI or Groq) read the report to sort it and draft the reply, which says it was written with AI. We delete a report 180 days after we close it, or before if you ask. To limit abuse we store, for 2 days, a code derived from your IP address that changes every day. Please don't write passwords or card numbers: the form rejects them.
• If you file a claim or grievance in the Complaints Book (Libro de Reclamaciones) (/complaints-book): your name, ID document type and number, address, phone (if you give it), email, your parent's or guardian's details if you are a minor, the product or service, the amount, the details, your request and our reply. We use them to handle your claim or grievance as Peru's Consumer Protection Code (Law 29571) requires: we email you an automatic copy (through Resend) and another to the person in charge, AI agents help sort the sheet and draft the reply, and a person reviews and sends it. We keep the sheet and its reply for 2 years from when you file it, because the Complaints Book Regulation requires it (art. 12), and we hand it to INDECOPI if it asks; then we delete it. A deletion request before then does not delete the sheet, but it does delete the rest of your data. To limit abuse we store, for 2 days, a code derived from your IP address that changes every day. If you write card numbers or passwords, we hide them.
• If you published a public request (for example on Reddit or Hacker News) that included your email address: the text of that request and your email. We use them to send you one proposal; we don't write again if you don't reply or if you reply "stop". If we haven't yet written the proposal, we keep that opportunity for up to 30 days and then delete it.
• If your business in Lima publishes its contact details on its website, or we find it to study the market: the business name, its website, its sector and district, public facts we observe (for example, whether it takes bookings online, how many locations it has or public comments from its customers) and, if published, its generic business email. We store it as a prospect in our system (Neon, USA) and in our CRM (Zoho CRM, USA), from before we write to you, to study which type of business to focus on and, if your business qualifies, for a single inquiry, with the subject prefix "PUBLICIDAD:", to ask whether you would like information about web tools for your business. If we never write to you, we delete the prospect (and its Zoho record) after 30 days or when the campaign ends, whichever comes first. If you don't reply, we don't write again and we delete the contact 30 days after the inquiry; we only keep a pseudonymized identifier so we never write again. You can object or ask for the source at any time by replying "BAJA" or "stop" to hello@gaia-nexus.com, including before you receive the inquiry; we handle it within 10 business days at most and delete the prospect right away. The Zoho deletion runs in our next sync, which we run manually; while one has been pending for more than 7 days, we send no new inquiries. Zoho keeps deleted records in its recycle bin for up to 60 days before permanent deletion.

The legal basis is performing a contract you asked for, our legal obligations (accounting and tax), and, for a first proposal, our legitimate interest in answering a request you made public. For the single inquiry to businesses, the basis is a first contact, from a publicly accessible source, to ask for your consent (Supreme Decree 016-2024-JUS, art. 26); without your reply there is no further contact.

How we use artificial intelligence

Gaia Nexus is run by artificial intelligence (AI) agents. AI agents write our proposals, the emails you receive from us, our articles and our products, and they build the software we deliver. Every email written by an agent says so. To do that work, the text of your request or your emails is processed by the AI providers listed below. Code is built in isolated environments and must pass automated tests. No decision with legal effects on you is made by AI alone: the owner of the company reviews prices, disputes and anything the agents can't answer.

Who receives your data

We only share personal data with the services we need to operate. They process it on our behalf and under their own privacy policies. Most of them are in the United States, so your data is transferred outside Peru.

If you reach us through an ad on Facebook or Instagram, Meta handles that visit under its own policy. We don't use the Meta pixel and don't send Meta any data about you.

How long we keep it

As long as needed to deliver your purchase or project and support it. Records of real payments are kept for as long as Peruvian tax law requires (up to 5 years) and then deleted. If you ask us not to contact you, or ask us to delete your data, we keep only your email address in a do-not-contact list so we can respect that. Prospects for the single inquiry to businesses: as described above. Public requests we have not yet answered with a proposal are kept up to 30 days. The pseudonymized identifier of a business we already contacted is kept for up to 2 years so we never write again. Complaints Book sheets and their replies are kept for 2 years from filing, as the law requires, and deleted at most 90 days later (unless a procedure with INDECOPI is open). Product or launch-news sign-ups: deleted within 30 days if the test doesn't go ahead, or kept at most 12 months if it does, as described above.

Your rights

Under Peru's Personal Data Protection Law (Law No. 29733), and where they apply to you the EU GDPR and California's CCPA, you can ask to access, correct or delete your data, object to its use, or ask for a copy. Write to hello@gaia-nexus.com. We answer within 10 business days. To stop receiving emails from us, reply "stop" or "BAJA" to any of them. You can also complain to Peru's data protection authority (Autoridad Nacional de Protección de Datos Personales) or to the authority in your country.

Delete all your data

You can ask us to delete all your data at any time, for free, without giving a reason:

• Reply "delete my data" to any email from us, or
• Email hello@gaia-nexus.com with the subject "Delete my data" from the address you used with us.

We delete your requests, emails and contact details from all our systems and confirm by email, within 10 business days at the latest. We only keep what the law requires: records of real payments (for the tax period above), Complaints Book sheets and their replies (2 years from filing), your email in the do-not-contact list, and a record of your request. If we can't confirm the request came from you, we may ask you to confirm it before deleting.