Privacy Policy
Last updated: 10/3/2026
At RedShoe, we take your data seriously. This policy explains what information we collect when you visit our sites or talk to us, what we use it for, who we share it with, and what you can do about it. We wrote it in plain language on purpose: if anything is unclear, write to us.
1. Who we are
RedShoe is a trade name of Redshoe LLC, a limited liability company organized in the State of New Mexico, United States, with its registered address at 209 MOUNTAIN ROAD PL NE, STE H, ALBUQUERQUE, NM 87110 ("RedShoe," "we," or "us"). Our operating team works from Nicaragua.
We are the data controller of the personal data collected through the Sites and forms. For privacy questions, write to info@redshoe.dev.
2. What this policy covers
This policy applies to:
- redshoe.dev and subdomains (the "Sites");
- your communications with us by email or through forms;
- our relationship with our clients, where a specific contract doesn't cover it.
It does not apply to data that our clients store or process in the SaaS systems or custom solutions that we build or host for them. In those cases, the client acts as the data controller and RedShoe acts as the data processor (or "service provider" under US laws). That processing is governed by a Data Processing Addendum (DPA) signed between the parties.
3. What data we collect
3.1 Data you give us
- Contact and request forms (including those in the store and in the demos): name, email, company, phone number (optional) and whether you agree to be contacted on WhatsApp at that number, project type and approximate budget (both optional), your message, and the product or plan you're interested in.
- Emails you send us, with whatever you choose to include.
- Purchases, once online payments are enabled: name, email, billing details, and the product purchased. Your card details are received and processed directly by our payment provider, Stripe. We never see or store them.
Please don't send us sensitive data (health information, full financial details, etc.) through forms or email unless it's necessary.
3.2 Data generated when you use the Sites
- Approximate country, which our network provider (Cloudflare) derives from your IP address. We use it to show you the right language and, if you write to us, to know which country you're contacting us from. We don't use your precise location.
- Language and theme (light or dark) you choose, stored in a functional cookie (language) and in your browser's storage (theme). Details are in the Cookie Policy.
- Technical data such as IP address, browser, and requested pages, kept in security logs for a limited time to prevent abuse and attacks.
- An irreversible identifier of your IP address and of your email (a salted hash, from which the original value can't be recovered), which we keep for a limited time only to cap how many forms can be submitted per hour and to stop spam. Your IP address is not stored alongside your message.
- Aggregated usage statistics, through Umami, an analytics tool that doesn't use cookies. It tells us, for example, how many people opened a demo or clicked a button, without identifying anyone.
3.3 Demos
The interactive demos run inside your browser with simulated data. Nothing you do or type inside a demo is sent to our servers or stored. The only exception is the form to request a live demo, which is handled like any other contact form.
4. How we use your data
| Purpose | Data | Legal basis (where the GDPR applies) |
|---|---|---|
| Answer your questions and prepare proposals or quotes | Forms and emails | Your request and pre-contractual steps |
| Provide the services you purchase, invoice, and support you | Client and billing data | Performance of a contract |
| Show you the site in your language and theme | Approximate country and functional cookies | Legitimate interest |
| Protect the Sites against abuse, spam, and attacks | Technical data and logs | Legitimate interest |
| Understand how the Sites are used and improve them | Aggregated statistics | Legitimate interest |
| Comply with legal, accounting, and tax obligations | Billing data | Legal obligation |
| Send you commercial updates | Only with your explicit consent |
We don't sell your data. We don't use it for third-party advertising or to build advertising profiles. If we ever send you commercial communications, it will be because you agreed to it, and you can unsubscribe at any time.
5. Who we share data with
Only with the providers we need to operate, and only what's necessary:
| Provider | Purpose |
|---|---|
| Cloudflare | Network, security of the Sites, and routing of the email we receive |
| Our server provider DA International Group Ltd Dba AlphaVPS - 8 ASEN YORDANOV BLVD, SOFIA | Hosting the Sites and the database |
| Resend | Sending automatic emails (confirmations and notifications) |
| Brevo | Sending the emails we write to you |
| Google (Gmail) | Receiving the emails you send us |
| Umami | Cookieless usage statistics |
| Stripe | Online payments, once enabled |
We may also share data:
- when the law requires it or a competent authority formally requests it;
- to defend our rights in a claim;
- if RedShoe merges or is acquired. In that case, your data would remain protected by this policy and we would let you know.
6. International transfers
We are a US company with a team in Nicaragua, and several of our providers are in the United States or other countries. Your data may therefore be processed outside your country. Where the law requires it, we rely on the safeguards available for such transfers, such as the standard contractual clauses our providers offer.
7. How long we keep data
| Data | Period |
|---|---|
| Inquiries and requests that don't lead to a contract | 24 months from last contact |
| Client data | For the duration of the relationship and, afterward, as long as legal and tax obligations require |
| Technical security logs | 90 calendar days, unless needed for incident investigations or required by court order |
| Backups | Rotated periodically; deleted data disappears from them within 30 days |
Aggregated statistics don't identify anyone and may be kept indefinitely.
8. Your rights
You can ask us to:
- give you access to your data and a copy of it;
- correct inaccurate data;
- delete it;
- restrict or stop its use;
- give it to you in a portable format;
- withdraw any consent you gave, without affecting what was done before.
Privacy rights for US residents (California CCPA/CPRA and other states)
If you reside in the United States (including California), you have the right to:
- know the categories and specific pieces of personal data we have collected about you in the last 12 months;
- request the deletion of your personal data;
- correct inaccurate personal data;
- not be discriminated against for exercising any of your privacy rights.
No sale or sharing of data: We expressly state that RedShoe does not sell your personal information or "share" it for cross-context behavioral advertising, and has not done so in the last twelve (12) months.
To exercise these rights, write to info@redshoe.dev with the subject "Privacy." We reply within 30 days at most. We may ask you to confirm your identity before acting.
Depending on where you live, you may have additional rights. If you are in the European Economic Area or the United Kingdom, you can also lodge a complaint with your data protection authority.
9. Security
We use encryption in transit (HTTPS), restricted access with two-step verification to our internal panel, backups, and regular updates. No system is infallible. If an incident affecting your data ever occurred, we would notify you where the law requires it.
10. Children
Our services and the Sites are aimed exclusively at businesses and professionals. We do not knowingly collect personal information from children under 13, in strict compliance with the Children's Online Privacy Protection Act (COPPA). If we learn that a child under 13 has provided us with personal information, we will delete it from our servers immediately.
11. Cookies
We only use necessary and functional cookies. Details are in the Cookie Policy.
12. Changes
If we make material changes to this policy that substantially alter how we process your data, we will notify you through a prominent notice on the Sites and by email to the address registered on your account, at least thirty (30) days before the changes take effect.
13. Language
This policy is available in Spanish and English. If there is any discrepancy, conflict, or difference in interpretation between the two versions, the English version prevails and governs for all purposes.
14. Contact
Redshoe LLC
209 MOUNTAIN ROAD PL NE, STE H, ALBUQUERQUE, NM 87110
info@redshoe.dev