Privacy Policy

Last updated: June 28, 2026

This policy explains what information carolinacoto.com and carolina.nyc collect, how it's used, and your choices. The site is a personal portfolio plus Sage, a free AI wellness companion. We keep data collection minimal and we don't sell your information. The site is operated by Talento Mgmt (contact details in Section 10).

1. What we collect

Contact details you give us — if you use the contact form or unlock Sage: your name and email (and, on the contact form, optionally your phone and message).
Your messages to Sage — the text you send in the chat is sent to a third-party AI provider to generate a reply, and may pass transiently through our hosting provider to deliver the service. We don't save your conversations as a stored record, and we don't use them to train AI models.
Usage information linked to your email — to run Sage's free daily limit and to understand how Sage is used, we keep a small record tied to your email: how many replies you've received, how often you've reached the daily limit, and when you were last active.
Hashed technical counters — separate, short-lived daily counters that use non-identifying (hashed) versions of your email and IP address, to enforce limits and reduce spam and abuse.
Privacy-friendly analytics — aggregate visit counts, collected without cookies and without tracking you across other sites.
We do not knowingly collect information from anyone under 18. Sage is for adults only (18 or older).

2. Cookies & local storage

This site is largely cookieless. We use only:

Essential local storage — kept in your own browser to remember that you verified your email so you don't have to sign in again on that device. It's first-party and functional; you can clear it anytime in your browser settings.
A human-verification check — used only to tell people from bots when you unlock Sage.
Privacy-friendly analytics — aggregate visit counts, without cookies and without cross-site tracking.

Because we don't use advertising or cross-site tracking cookies, most visitors won't see a consent banner. We use only storage that's essential to the site's function plus privacy-friendly, cookieless analytics.

3. How we use your information

To respond to you and, for Sage, to verify your email and provide the chat.
To send you a welcome note and occasional wellbeing updates from Carolina (only if you gave your email). You can opt out anytime — see Section 7.
To understand how Sage is used — including reviewing per-user and aggregate engagement — and, where you've opted in, to follow up with you.
To operate, secure, and improve the site — including preventing spam, abuse, and excessive use.

4. Who processes data for us

We use trusted third-party service providers to run the site. They process data only to provide their service to us:

Hosting provider — runs the website.
AI provider — generates Sage's replies (receives your chat messages to produce a response; does not train on them).
Email provider — sends verification and update emails.
Database provider — stores your signup record and usage counters.
Form provider — delivers your form entry to us.
Security provider — the human-verification check.

5. Sharing

We do not sell or share your personal information (including for cross-context behavioral advertising), and we don't disclose it except to the processors above (to run the site) or where required by law. We do not use your Sage messages to train AI models, and we don't use sensitive information to infer characteristics about you.

6. Retention

We keep your name, email, and engagement record while you're on our list or as needed for the purposes above; you can ask us to delete them at any time. Sage conversations aren't saved as a stored record. The short-lived rate-limit counters use hashed identifiers and expire automatically. We use reasonable administrative and technical safeguards appropriate to the limited data we hold.

7. Your choices & rights

You can ask us to access, correct, or delete your personal information, and you can opt out of emails at any time — use the unsubscribe option in any email, or email info@carolinacoto.com. We aim to respond within 30 days and may need to verify your identity. We won't discriminate against you for exercising your rights.

California (CCPA/CPRA). The categories of personal information we collect are: identifiers (name, email); internet or other electronic activity (usage/engagement); and the content of messages you send to Sage. You have the right to know, access, correct, and delete this information, and to opt out of the sale or sharing of personal information — though we do not sell or share it. We do not use sensitive information to infer characteristics about you.

EEA/UK (GDPR). Our legal bases are your consent (for emails and for using Sage) and our legitimate interests (to run, secure, and improve the site and prevent abuse). You can withdraw consent at any time. Where we transfer personal data to the United States, we rely on appropriate safeguards, including the Standard Contractual Clauses used by our providers. You also have the right to lodge a complaint with your local data-protection authority.

8. International visitors

The site is operated from the United States, and data may be processed there and in other countries where our providers operate. By using the site you understand your information may be processed in the US, subject to the safeguards described in Section 7.

9. Changes

We may update this policy from time to time; the "last updated" date above reflects the latest version, and changes are effective when posted. Your continued use of the site after an update means you accept the revised policy.

10. Contact

Questions or requests? Email info@carolinacoto.com, or write to us at:

Talento Mgmt
26 Broadway
New York, NY 10004
USA

← Back to carolinacoto.com