Skip to content

Privacy policy

Last updated: November 11, 2026

In short: we collect only what you give us (contact form and account) plus the technical data needed to keep the Site secure. We do not sell your data, we do not use advertising trackers, and the only cookies are the ones the Site needs to work. Visits are measured only in aggregate, without cookies.

1. Who is responsible

The data controller is Teófilo Nava (the “Author”), owner of teofilonava.com. For any privacy request use the contact form and write “Privacy” in your message.

2. What we collect

  • Contact form: full name, email, WhatsApp number and its country, whether you write as an individual or a company (and the company name), your investing experience range, a net-worth range, your country of tax residence and your message.
  • Account: full name, username, email, password (stored only as an irreversible hash) and, if you choose, a bio, a profile photo and your country. What you publish — posts, images, comments, likes and who you follow — is public together with your name and username.
  • Technical and security data: IP address, browser type, date and time, pages requested and security events (for example failed log-in attempts), used to prevent abuse, fraud and attacks.
  • Images: the images you upload are re-encoded; embedded metadata such as GPS location is removed.

We do not ask for and you should not send government identifiers, bank or card details, account numbers or passwords.

3. What we use it for and on what basis

  • To reply to your message and give it context — on the basis of your consent, which you give when you submit the form.
  • To create and operate your account and publish your content — because it is necessary to provide the service you request.
  • To protect the Site, moderate the community and prevent spam, fraud and abuse — on the basis of our legitimate interest in security.
  • To comply with legal obligations and respond to lawful requests.

We do not use your data for automated decisions with legal effects, we do not build advertising profiles and we do not sell or rent personal data.

4. Cookies

The Site uses only strictly necessary cookies: one that identifies your browser to protect forms against forgery, one that keeps your session when you log in, and those set by Cloudflare to verify that you are not a bot and to protect the Site. There are no advertising cookies. Traffic is measured with Cloudflare Web Analytics, which does not use cookies, does not fingerprint visitors and only produces aggregate statistics (pages viewed, country, type of device).

5. Who receives the data

Service providers that process data on our behalf: the hosting provider where the Site and its database are stored (in the United States), Cloudflare, Inc. (content delivery, security and the Turnstile anti-bot check) and the email provider used to send messages and notifications. We may also disclose information when the law requires it or to protect rights, safety and the integrity of the Site. Your data may therefore be processed in the United States and other countries whose laws may differ from those of your country.

6. How long we keep it

  • Contact messages: up to 24 months after the last communication, unless you ask us to delete them earlier.
  • Account data and content: while your account exists; when you ask for deletion they are removed, except what must be kept by law.
  • Security logs: up to 12 months. Messages classified as spam: up to 90 days.

7. Your rights

Depending on where you live (for example the European Economic Area, the United Kingdom, California or Mexico) you may have the right to access, correct, delete or port your data, to restrict or object to its processing, to withdraw your consent at any time and to lodge a complaint with your data-protection authority. To exercise any right, write to us through the contact form from the email linked to your data; we will reply within the period required by law. We will not discriminate against you for exercising your rights.

8. Security

The Site is served over encrypted connections, passwords are stored hashed, forms are protected against automated abuse and access is limited. No system is completely secure; if we become aware of a breach affecting your data we will notify you as required by law.

9. Minors

The Site is intended for adults. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, tell us and we will delete it.

10. Changes

We may update this policy; the date above shows the current version. This policy is published in Spanish and English; in case of discrepancy the Spanish version prevails.