Privacy policy

Who is responsible

COVI Media, run by Nicolás Covini, based in Buenos Aires, Argentina. For anything about your data, email us at team@covimedia.com.

What data we receive

When you request a booking: name, email, phone, company (optional), service, date, time, location, number of attendees and anything you tell us in the notes.

When you write to us through the contact form: name, email, phone (optional) and your message.

When you pay the deposit: the receipt you upload (image or PDF) and the payment method you choose.

When you leave a review: your name, company and email (optional on the general link), the rating and the comment. We only publish a review if you authorize it.

Where you came to the site from (for example, Instagram or Google). It is stored in your browser and sent along with your booking or message.

Minimal technical data: your IP address is only stored as an irreversible code (hash) to stop abusive submissions, and we measure visits and site speed in aggregate and without cookies (Vercel Analytics and Speed Insights).

What we use it for

To reply to you, prepare and send the proposal, coordinate the shoot, record the deposit and payments, deliver the footage and ask for your feedback at the end. We do not use your data for advertising and we do not sell it.

Who we share it with

Only with the providers we need to run the site: Vercel (hosting), Supabase (database and files), Resend (email delivery) and Google Workspace (team email, calendar and spreadsheets). Their servers may be outside Argentina; they follow recognized security standards and only process the data to provide that service to us.

We do not share your data with anyone else unless a law or a competent authority requires it.

How long we keep it

For as long as we work together and afterwards for the time required by legal and accounting obligations. If we didn't end up working together, you can ask us to delete your data at any time.

Cookies and storage

The site does not use advertising or tracking cookies. It only stores in your browser where you came from, so we know which channels bring us clients. The team's internal panel uses session cookies, which do not affect site visitors.

How we protect it

The site and the panel only work over an encrypted connection (HTTPS). The database has no public access: it is only queried from our server.

Only the COVI team can access the internal panel, each person with their own user and password (stored as a hash, never in plain text), with login attempt limits and sessions that expire.

Payment receipts are kept in private storage that only the team can access. The links to your proposal and your review are personal and do not appear in search engines.

Your rights

You can ask us at any time to access, correct, update or delete your data by writing to team@covimedia.com. We reply within the deadlines set by Argentine Law 25,326 (10 calendar days for access and 5 business days for correction or deletion).

The data subject may exercise the right of access free of charge at intervals of no less than six months, unless a legitimate interest is shown, as set out in article 14, section 3 of Law 25,326.

The Agency for Access to Public Information (Agencia de Acceso a la Información Pública), as the supervisory authority under Law 25,326, handles complaints from anyone whose data protection rights have been affected.

Changes

If we change this policy, we will publish the new version on this page with its update date.