Privacy policy
Effective November 5, 2026.
Who we are
IntusStudio LLC, a New Mexico (USA) limited liability company, Entity ID 0008140200, 1209 Mountain Road Pl NE, Ste N, Albuquerque, NM 87110. It builds and operates Intus CRM. Contact for anything in this policy: privacidad@intusstudio.co.
Our role
- Controller for the data of the businesses that use Intus CRM and their team (account, sign-in and billing), of people who join our waitlist and of visitors to this site.
- Processor for the data each business handles in Intus CRM about its own customers: their Instagram and Messenger conversations and, if the business runs an online academy, its students. That business is the controller, with its own privacy policy. We process that data only to provide the service to it and never use it for our own purposes.
What data we process
- Account: name, email and password (stored hashed). If you sign in with Google or
Facebook, the identifier, name and email that service gives us (Google:
openid email profile; Facebook:email public_profile). - Conversations: messages a business's customers send it through Instagram or Messenger, with their profile name and attachments.
- Academies: enrollments, course progress and payments. We do not store card numbers: the payment processor handles them.
- Technical: server logs (IP address, date, page requested) for security and diagnostics. This site uses no cookies, analytics or third-party resources.
Why
To provide Intus CRM: signing people in, showing and answering conversations, delivering courses, charging, and sending the service's emails (verification, sign-in, password, confirmations). We do not sell data or use it for advertising.
Who we share it with
Only with the providers (sub-processors) that make the service possible, under contracts that require them to protect it:
- OVHcloud: servers, in Canada.
- Amazon Web Services (SES): email delivery, in the USA.
- Google Workspace: our email, in the USA.
- Zernio: connection to Instagram and Messenger.
- Bunny.net: storage and playback of course videos.
- Stripe: payments, once they open.
- Google and Meta: only if you choose to sign in with their account.
Your data may therefore be processed outside your country, in particular in the USA and Canada, with the safeguards your country's law requires.
How long
While the account or business remains active. Once closed, data is deleted within 30 days, except what the law requires us to keep (for example, payment records).
Your rights
You can ask to access, update, correct or delete your data, object to a processing and withdraw your consent, by writing to privacidad@intusstudio.co. If your data is handled by a business that uses Intus CRM, ask that business too: we help it respond. We reply within 15 business days. To delete your data, see Data deletion.
By country
- Colombia: Law 1581 of 2012 and its decrees. You may contact the Superintendencia de Industria y Comercio.
- Mexico: Federal Law on the Protection of Personal Data Held by Private Parties (2025).
- Chile: Law 19.628 and, once in force, Law 21.719, before the Agencia de Protección de Datos Personales.
- Peru: Law 29733 and its regulation, before the Autoridad Nacional de Protección de Datos Personales.
- Argentina: Law 25.326, before the Agencia de Acceso a la Información Pública.
Security
Connections are encrypted (HTTPS), passwords are stored hashed, each business's data is kept separate and server access is restricted. If an incident affects your data, we notify you or the responsible business.
Changes
If we change this policy, we publish the new version here with its date.