01Who handles your data
This website and the diagnostic application are operated by Gustavo Narváez, under the trade name NARVEX, based in Nicaragua with clients in Central America and other countries.
For anything related to your data, including exercising the rights in section 08, write to narvaezpastora@gmail.com or message +505 8932 9377 on WhatsApp.
02What data is collected
If you write through the contact form
- Name, email address and phone or WhatsApp number
- The message you write and the plan you're asking about
If you leave your details in a Facebook or Instagram form
Some NARVEX ads open a form inside Facebook or Instagram, without leaving the app. It asks for:
- Name, email address and phone or WhatsApp number
- Your company name
- What you want to improve first and how much you currently spend on ads
That data is collected by Meta and passed to my CRM (Zoho) so I can respond to you.
If you use the free diagnostic at auditoria.narvexgrowth.com
To sign in, only your email address is required, with no password. If the email is new, you go straight in; if it already has an account, a sign-in link is sent to that email. After that, the form collects information about your business, not about you as a person:
- Business name, website, industry and the market where your customers are
- What you sell, value proposition, average ticket and competitors
- Goal, target, timeframe, media budget and currency
- Channels you use, CRM, the state of your brand and colors
- Social media profiles and a description of your audience
- Optionally, your WhatsApp number so we can follow up
Technical data, in both cases
- IP address, browser type and device
- Pages visited and time spent
- Where you came from: search engine, ad or direct link, including campaign click identifiers (
gclid,utm_*and similar)
03What it is used for
- Answering your inquiry and following up commercially
- Generating your diagnostic report: your business data is the raw material for the diagnosis
- Measuring what works on the website and in campaigns, in aggregate
- Showing you NARVEX ads on Facebook and Instagram if you've already visited the website
- Improving the service: understanding which questions confuse people or which sections go unread
Data is not sold to third parties, not handed over to other mailing lists and not used to advertise other companies: only NARVEX.
04Who it is shared with
To provide the service, I use providers that process data on my behalf. Each one has its own policy, linked below:
| Provider | Purpose | What it receives |
|---|---|---|
| Supabase | Application sign-in (passwordless) and database | Your email and the form data |
| Vercel | Hosting for the diagnostic application | Technical connection data |
| GoDaddy | Hosting for this website | Technical connection data |
| Anthropic | Writing the report with artificial intelligence | The business data from the form and the public content of your website |
| Zoho | CRM where sales contacts are managed | Name, email, phone and lead source |
| Analytics (GA4) and advertising (Google Ads) | Browsing and campaign data | |
| Meta | Advertising on Facebook and Instagram, lead forms in those ads and measurement (Meta pixel) | Browsing and campaign data; in its forms, the details you enter there |
| Microsoft | Clarity, heatmaps and aggregated session recordings | Page interaction data |
About artificial intelligence, plainly. The diagnostic report is written by an Anthropic model. That means the business information you enter in the form is sent to Anthropic's servers so the report can be generated. If there's anything you'd rather not share, simply don't write it: the report is still generated with what you do provide.
05Cookies and measurement
The website uses cookies and similar technologies to measure and to show NARVEX ads:
- Google Analytics 4 (
G-9Q6J877CS7): to know how many people visit the website, where from and which sections they read. Bot traffic is deliberately excluded. - Microsoft Clarity: to see, in aggregate, where people click and how far they scroll, so I can fix what isn't clear.
- Google Ads: to measure which ads bring in real leads. The click identifier is stored in your browser during the session and is sent with the form.
- Meta pixel: to know whether a Facebook or Instagram ad led to a contact or a WhatsApp click, and to be able to show you NARVEX ads after your visit. It does not receive your name, email or phone number.
You can block cookies in your browser settings, or install the Google Analytics opt-out browser add-on. Meta ads based on your activity can be turned off in your account's ad settings. The website works exactly the same without them: no feature depends on your accepting them.
06How long it is kept
- Sales contacts in the CRM: while there is a business relationship or active interest, and up to 24 months after the last contact.
- Generated diagnostics: for as long as your account exists, so you can reopen your report whenever you want.
- Analytics data: according to each platform's retention, in aggregate form.
You can ask for everything to be deleted before those periods end, at any time and without giving a reason.
07Security
All traffic is encrypted with HTTPS. Sign-in to the application doesn't use passwords that could leak: a new email goes straight into an empty account, and an existing account only opens with a one-time link sent to its email. If the account was opened by going straight in, the first time you use that link it becomes verified and any other open session on it is closed. Service keys live as encrypted environment variables on the server and never reach the browser. Each account can only see its own reports.
Even so, no system is infallible. If a breach ever affected your data, I would let you know by email.
08Your rights
You can ask at any time for:
- Access: a copy of the data I hold about you
- Rectification: correcting anything that's wrong
- Erasure: deleting your account, your reports and your CRM record
- Objection: no longer receiving marketing communications
- Portability: taking your data with you in a readable format
Write to narvaezpastora@gmail.com from the same email you signed up with. I reply within 30 days at most, and in practice much sooner.
09Minors
The service is aimed at people who run or work in a business. It is not intended for anyone under 18, and their data is not knowingly collected.
10Changes to this policy
If anything relevant changes, such as a new provider or a different type of data, this page is updated and the date at the top changes. If the change significantly affects data already collected, I notify registered users by email.