Who is responsible
The controller of the personal data, under Argentine Law 25.326, is the person named below.
Name: Lucas Alejandro Tomasi
CUIT: 20-34970963-6
Address: Belgrano 1179, San Miguel (B1663AAA), Buenos Aires, Argentina
Contact: contacto@yaesmio.com.ar
The registration of this database with the AAIP is in progress. We do not publish a number that does not exist yet.
Data we process
Account: email, the name you give us, plan, and the version of the terms and privacy text you accepted, with date, IP address and user agent.
Works: the file you upload or its SHA-256 hash, the title, the type, the authorship statement you make, and the RFC 3161 timestamps.
Public verification shows the hash and the timestamp. The title and the holder appear only if you turn that on.
Support messages you send, deletion and withdrawal requests, and, if you pay, the payment reference from the store or from the web checkout.
First-party product events (page and action names, without an advertising profile) and client error reports, so we can see what failed.
We do not ask for, receive, or store your Clave Fiscal.
Why
To create the account, issue the private timestamp, keep the vault, verify a hash in public, send the access link and the notice that a seal is ready, and answer access, correction and deletion requests.
The legal bases are your consent when you create the account and the contract for the service you ask for.
Recipients
Timestamp authorities receive the hash that is being stamped, not the file, when the seal is requested.
The host (DonWeb), Cloudflare (DNS and proxy) and the email provider, when one is connected, process data on our behalf.
Apple or Google process the store payment if you buy inside the store app. We do not sell data and we do not use it for third-party ads.
Transfers
The host, the timestamp authorities, Cloudflare or the email provider may be outside Argentina. When that happens, the transfer is the one needed to provide the service, and this policy is the notice of that transfer.
Retention
The account and the file stay while the account is open. If you delete the account, we destroy the key of the file and the email. The hash, the timestamp and the audit trail remain, because they are the proof that was issued.
Access-link requests are rate limited: 5 per email address and 20 per IP address every 15 minutes.
Access, correction and deletion
You can export the account and correct your name inside the app. You can delete the account from Cuenta, with the button Eliminar cuenta.
You can also ask on the web, without opening the app, at /borrar-cuenta. We send a one-time link to that email. The account is deleted only after you confirm. Typing an email alone does not delete it.
You can write to the contact address above for access or correction. If the address is not loaded yet, use the contact form on /contacto.
You may file a complaint with the Agencia de Acceso a la Información Pública (AAIP), the authority of Law 25.326.
Children
The service is not directed to people under 18.