Privacy Policy

This website, mojicasync.com, is operated by Jose Mojica, founder of MojicaSync, an independent technology project based in the Netherlands that is currently in development. MojicaSync is not a registered company and does not currently offer commercial services.

Jose Mojica is responsible (the “controller”) for the personal data described in this policy. You can contact us about privacy at any time at info@mojicasync.com.

Apart from the technical data needed to deliver and protect the website (described below), we only receive personal data when you choose to contact us.

• Contact form. When you send a message through the contact page, we receive your name, your email address and your message, including anything you choose to write in it.
• Email. If you email us directly, we receive your email address, your message and any information you include.
• Technical data. When the form is submitted, our server uses your IP address to limit repeated submissions (rate limiting). It is kept in the server’s working memory only, is not written to a database or to our logs, and is no longer used after ten minutes; it is deleted when a later submission is processed or when the server instance is restarted, whichever comes first. The website is delivered and protected by our hosting provider, Cloudflare, Inc., which processes technical data such as IP addresses, browser information and request details to deliver the website and to detect and block attacks and abuse. The request logs we can access are kept for no longer than 7 days and are used only to fix errors and keep the website secure.

We do not use analytics, advertising or tracking technologies, we do not create user accounts, and we do not send newsletters. Please do not include sensitive personal data (such as health information) in your message.

• To read and reply to your message, based on our legitimate interest in responding to people who contact us (Article 6(1)(f) GDPR).
• To prevent spam and abuse of the contact form, based on our legitimate interest in keeping the website and our inbox secure (Article 6(1)(f) GDPR).
• To operate and secure the website, based on our legitimate interest in providing a working, secure website (Article 6(1)(f) GDPR).

Where we rely on legitimate interests, you may object at any time (see “Your rights” below). We do not use your data for automated decision-making or profiling.

To run this website and deliver your messages, we use the following service providers:

• Resend (Resend, Inc.), an email delivery service. Messages sent through the contact form are passed to Resend, which delivers them to our inbox.
• Email mailbox. Your message is stored in our inbox at info@mojicasync.com, hosted by the provider of our mailbox, Google Workspace.
• Website hosting and security. The website is hosted, delivered and protected against attacks by our hosting provider, Cloudflare, Inc., which processes the technical data described above.

These providers process personal data on our behalf to provide their services. We do not sell your personal data or use it for advertising. We may disclose data where required by law.

Some of our service providers, including Resend, Inc., Cloudflare, Inc. and Google, are based in the United States or process data there, so your personal data may be processed outside the European Economic Area. Under the GDPR, such transfers must rely on an appropriate safeguard, such as an adequacy decision (including the EU–U.S. Data Privacy Framework, where a provider participates in it) or the European Commission’s Standard Contractual Clauses. You can ask us for more information about the safeguards used at info@mojicasync.com.

We keep messages you send us only for as long as needed to handle your message and any follow-up conversation, or where the law requires us to keep them. After that, they are deleted. Resend may keep a record of delivered messages for a limited period under its own retention policy. Rate-limiting data and request logs are discarded automatically, as described above.

We take appropriate measures to protect personal data against loss and unauthorised access. For example, the credentials used to deliver messages are kept on the server and never sent to your browser, form input is validated on the server, the form includes measures against automated spam and repeated submissions, and the website is served only over encrypted (HTTPS) connections. No method of transmission or storage is completely secure, but we work to keep the risks low.

Under the GDPR, you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use your data;
• object to processing based on legitimate interests;
• receive your data in a portable format, where applicable.

To exercise any of these rights, email info@mojicasync.com. We may ask you to confirm your identity, and we will respond within one month, as the GDPR requires. You also have the right to lodge a complaint with a supervisory authority. In the Netherlands, this is the Autoriteit Persoonsgegevens (Dutch Data Protection Authority).

This website does not use analytics, advertising or tracking cookies. See our Cookie Policy for details.

We may update this policy, for example when the project develops or our service providers change. The date at the top of this page shows when it was last updated. If we make significant changes, we will make this clear on the website.