Privacy Policy

Last updated: October 5, 2026

This policy explains what personal data we collect when you use the ESHI website and app, what we use it for, who we share it with and how you can exercise your rights.

Data controller: Oscar Espeche, Cordoba, Argentina, orespeche@gmail.com.

1. WHAT DATA WE COLLECT Account: name, email address, phone number (optional), password (stored encrypted, never in readable form) and profile photo (optional). If you sign in with Google, we receive the name, email and photo from that profile. Purchases: shipping addresses, products, amounts, dates and status of your orders. Content you send: reviews, wishlist, contact form messages and your newsletter subscription if you subscribe. Chat assistant: the messages you type in the chat on the website or in the app. Technical data: your sign-in session (a cookie on the website and an encrypted code stored on your phone) and technical server logs. Your cart is stored on your device. We do not collect your card details: payment is made on the Stripe or Mercado Pago page. We do not use advertising or tracking or analytics tools.

2. WHAT WE USE IT FOR To create and maintain your account, process and ship your orders, let you know the status of your purchases, answer your questions, show your reviews and wishlist, send you the newsletter if you subscribed, and protect the site against abuse and fraud. We do not sell your data or use it for advertising.

3. WHO WE SHARE IT WITH We use providers that process data on our behalf, only to deliver the service: Vercel (hosting of the website and app), Neon (database), Cloudinary (image storage, including profile photos), Resend (email delivery), Stripe and Mercado Pago (payments), Google (sign in with Google) and Anthropic (artificial intelligence chat assistant). When you use the chat, the messages of the conversation are sent to Anthropic to generate the reply. We do not send your name, email or any account or order data, and we do not store conversations in our database. Avoid typing personal or sensitive information in the chat. Some of these providers are located in other countries, for example the United States. We may also disclose data if a competent authority legally requires it.

4. HOW LONG WE KEEP IT As long as your account is active. If you delete it, we erase your personal data immediately. Orders already placed are kept without any information that identifies you (amounts, products, dates and status), for accounting and legal reasons, and the delivery addresses of those orders are replaced with "Eliminado".

5. YOUR RIGHTS You can access, correct and delete your data. To correct it, go to My account (Personal information and My addresses). To delete your account and data: in the app, My account > Delete my account; on the website, the "Delete my account" page (delete-account). If you cannot sign in, write to us from the Contact page with the subject "Delete account", from your account's email address. To unsubscribe from the newsletter or for any other question about your data, write to us from the Contact page. If you are in Argentina: the holder of personal data may exercise the right of access free of charge at intervals of no less than six months, unless a legitimate interest is proven, under article 14, paragraph 3 of Law No. 25,326. The Agency for Access to Public Information, as the Supervisory Authority of Law No. 25,326, handles complaints and claims from those whose rights are affected by non-compliance with the personal data protection rules.

6. SECURITY We use encrypted connections (HTTPS), store passwords encrypted and limit who can access the data. No system is completely secure, but we work to protect your information.

7. MINORS The website and app are not directed to people under 18, and we do not knowingly collect data from minors.

8. CHANGES We may update this policy. The date above shows when the latest version was published.