Privacy policy

Last updated: October 13, 2026

1. Who is responsible

Puntofy is made by 502 SOFTWARE, SOCIEDAD ANÓNIMA («502 Software»), a software company in Guatemala City, Guatemala. You can write to us at [email protected] or on WhatsApp at +502 2309 5399.

2. What data we collect

• When you open a store: your business's name, your store's address, the country you sell in, what you sell and where you sell it, your name, your email and, if you give it, your phone. Your password is stored encrypted: nobody at Puntofy can read it.
• If you sign up or sign in with Google: see section 3.
• When you leave a card to pay for your plan: you type it on the payment page of Recurrente, our payment provider, not on ours. We only keep its last four digits and the reference Recurrente gives us to charge it.
• What you put in your store: your products, your orders and the data of your customers. It lives in your store's own database, on our servers, and we only process it to provide the service to you. Towards your customers, you are the one responsible for it.
• Technical data about the visit: your IP address, your browser and the pages you open. Our server and Cloudflare, which protects the site, record them. The IP address of a sign-up is also kept to limit abuse of the form.
• Usage statistics, only if you accept them: Google Analytics 4 measures which pages are visited, from what kind of device and from which country. If you do not accept the statistics cookies, nothing is sent to Google.
• The video on the home page, only if you accept the optional cookies: it is played by YouTube, from its no-cookie address, and YouTube receives your visit when it loads. Until you accept, the page shows a picture in its place and nothing reaches YouTube.

3. Signing in with Google

If you choose «Continue with Google», Google tells us your name, your email address and an identifier of your Google account, and nothing else: we only ask for the basic permissions (openid, email and profile). We do not receive your Google password, and we have no access to your Gmail, your contacts, your files or anything else in your account.

We use that data only to create your Puntofy account and to let you sign in to it. We do not use it for advertising, we do not sell it and we do not share it with anybody else. Our use of the information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Puntofy from your Google account at any time from your Google account's connections; to delete your Puntofy account too, write to us (section 8).

4. What we use it for

• To create your store, let you sign in to it and keep it running.
• To charge your plan and send you its receipts.
• To send you the emails your account needs: the sign-up confirmation, the welcome and the notices about your plan and your store.
• To answer you when you write to us.
• To protect the sign-up and the contact form from automated submissions (spam), with Cloudflare Turnstile.
• To understand how the site is used and improve it, only if you accepted the statistics.

We do not sell or rent your data, and we do not add you to advertising lists.

5. Cookies

Cloudflare Turnstile may use technical data from your browser, from its own domain, to tell a person from an automated program. You can delete or block cookies from your browser; if you block the needed ones, the sign-up and the forms may not work.

6. Who helps us process it

The providers that help us run Puntofy, only for that, and under their own security policies:

So your data is kept and processed outside Guatemala, by these providers. We may also share data if a competent authority requires it under the law.

7. How long we keep it

• A sign-up whose email is never confirmed is deleted after 3 days.
• Your account and your store, while your subscription lasts. If you cancel it, your store works until the end of what you paid and is then closed. A closed store is kept for 90 days, so that you can come back to it, and we write to you 30 and 7 days before it is deleted; on that day we keep one last encrypted copy of it for a year, in case you ask for it back. A store paused because its plan was not paid is closed after 60 days paused. If you ask us to delete your account and your store sooner, we do.
• Your invoices and payments, for as long as the law requires us to keep accounting records.
• Your messages to us, while we have a business relationship with you and for up to 24 months after the last contact, unless you ask us to delete them sooner.
• Our backups are kept for 14 days on the server and 90 days off it. Data we delete also disappears from the backups within 90 days at most, except a closed store's last copy, kept for a year.

8. Your rights

You can ask us to show you the data we have about you, correct it, delete it or stop using it. Write to [email protected] and we will answer within 10 business days.

9. How we protect it

The site and every store only work over an encrypted connection (HTTPS), passwords are stored encrypted, each store lives in a database of its own, access to our systems is restricted to our team, and we make daily backups off the server.

10. Minors

Puntofy is meant for businesses and adults. We do not knowingly collect data from minors.

11. Changes to this policy

If we change this policy, we will publish the new version here with its date. This policy is published in Spanish and English; if the two differ, the Spanish version prevails.