Workflow507
ES EN
Prevailing language notice This page is available in Spanish and English. In the event of any discrepancy, divergence, or conflict between the two versions, the Spanish version shall prevail, as Spanish is the official language of the Republic of Panama and the applicable jurisdiction of this document.

Privacy Policy

Last updated: April 14, 2026

1. Data Controller Identification

This Privacy Policy (the "Policy") governs the processing of personal data collected by Jeziel Leira, acting as a natural person conducting commercial activities under the trade name Workflow507 ("Workflow507", "we", "our", or the "Company"), in connection with the services provided through the website workflow507.com, the associated SaaS products, and official communication channels, including the WhatsApp Business API.

  • Data controller: Jeziel Leira
  • Personal ID: 8-783-1657 DV 23 (Republic of Panama)
  • Address: Barrio Balboa, La Chorrera, Panamá Oeste Province, Republic of Panama
  • Contact email: [email protected]
  • Phone: +507 6780-3613

This Policy is issued in compliance with Law 81 of March 26, 2019 on Personal Data Protection of the Republic of Panama, its implementing regulations (Executive Decree 285 of May 28, 2021), and applicable international best practices.

2. Scope

This Policy applies to:

  • The website workflow507.com and its subdomains.
  • SaaS products and services offered by Workflow507, present or future.
  • Communications made via WhatsApp Business API authorized by the user.
  • Contact, diagnostic, subscription forms, or any data-capture mechanism operated by Workflow507.

By accessing the site, using our services, interacting with our forms, or initiating a WhatsApp conversation with our official numbers, you acknowledge having read and accepted the terms of this Policy.

3. Categories of personal data collected

3.1 Data voluntarily provided by the user

  • Full name.
  • Email address.
  • Phone or WhatsApp number.
  • Trade name, type of business, and industry.
  • Description of operational needs, requirements, and goals.
  • Billing information where applicable (tax ID, address, legal name).
  • Any other information voluntarily submitted by the user via forms, email, WhatsApp, or other channels.

3.2 Automatically collected data

  • IP address and approximate location data.
  • Browser, device, and operating system type.
  • Pages visited, time spent, and referral source.
  • Cookie identifiers and similar technologies.

3.3 Payment data

Subscription and product payments are processed exclusively through Paddle.com Market Ltd., which acts as Merchant of Record. Workflow507 does not store or have direct access to complete credit card, debit card, or bank account data. Payment data is handled in accordance with Paddle's policy, available at paddle.com/legal/privacy.

3.4 Sensitive data

Workflow507 does not generally request sensitive personal data as defined by Panama's Law 81 of 2019. Where the nature of a contracted service makes processing special categories of data necessary, express and reinforced consent from the data subject will be requested.

4. Purposes of processing

Personal data will be processed for the following purposes:

  • Responding to inquiries, diagnostic requests, and user requirements.
  • Providing, maintaining, billing, and improving contracted services and products.
  • Managing subscriptions, renewals, cancellations, and refunds.
  • Complying with contractual, tax, accounting, and regulatory obligations.
  • Sending transactional communications (confirmations, receipts, service notifications).
  • Sending commercial communications about updates, new products, and relevant content, subject to user consent, which may be revoked at any time.
  • Analyzing the use of the site and services to improve performance, content, and security.
  • Preventing, detecting, and prosecuting fraud, abuse, and unauthorized activities.

5. Legal basis for processing

We process personal data on the following grounds under Law 81 of 2019:

  • Free, informed, and specific consent of the data subject, given by completing forms, initiating WhatsApp conversations, or contracting services.
  • Execution of a contractual or pre-contractual relationship requested by the data subject.
  • Compliance with legal obligations (tax, accounting, regulatory).
  • Legitimate interest in improving the service, preventing fraud, and protecting the rights of Workflow507, its clients, and third parties.

6. WhatsApp Business API and Meta platforms

Workflow507 uses the WhatsApp Business API and other Meta Platforms, Inc. products as communication channels with clients, prospects, and end users. By initiating or maintaining a conversation with our official WhatsApp numbers, the user understands and accepts that:

  • The conversation will be received and stored in systems operated by Workflow507 for the purpose of providing the service.
  • Metadata and content may be processed by Meta Platforms, Inc. pursuant to the WhatsApp Privacy Policy and the Meta Privacy Policy.
  • The user may request at any time, via the same channel or by email, to stop receiving communications and request the deletion of their conversation.
  • The use of Meta Pixel, Custom Audiences, and similar advertising tools is solely for measurement and remarketing purposes, using anonymized or hashed data.

This Policy also extends to the use of the business messaging platform and constitutes the binding policy for the review and approval process conducted by Meta Platforms, Inc.

7. Data sharing with third parties

Workflow507 does not sell, rent, or trade personal data. Data may be shared with the following processors, strictly to fulfill the purposes described:

  • Paddle.com Market Ltd. — payment processing as Merchant of Record.
  • Supabase Inc. — application data storage and authentication.
  • Make.com (Celonis) — workflow automation.
  • Resend Inc. — transactional email delivery.
  • Railway Corp. — application infrastructure and hosting.
  • Cloudflare, Inc. — hosting, CDN, security, and DDoS protection.
  • Google LLC — web analytics (Google Analytics) and associated services.
  • Meta Platforms, Inc. — WhatsApp Business API, Meta Pixel, and advertising.
  • Judicial and administrative authorities — where a legal obligation or valid request exists.

These providers comply with international data protection standards and are bound by confidentiality and processing agreements.

8. International data transfers

Data may be stored and processed on servers located outside the Republic of Panama, primarily in the United States, the European Union, and the United Kingdom. By accepting this Policy, the user expressly authorizes such international transfers under Article 36 of Law 81 of 2019, on the understanding that the processors provide adequate levels of protection.

9. Cookies and similar technologies

We use cookies and equivalent technologies for:

  • Strictly necessary cookies: essential for the operation of the site.
  • Analytics cookies: Google Analytics, to understand usage patterns.
  • Marketing cookies: Meta Pixel and similar, subject to prior consent.

Users may manage cookie preferences from their browser settings. Disabling certain cookies may limit site functionality.

10. Retention period

  • Prospect contact data: up to 24 months from the last contact.
  • Active customer data: for the duration of the contractual relationship and up to 5 years after its termination, for tax and evidentiary reasons.
  • Analytics data: up to 26 months (standard Google Analytics period).
  • Billing records: for the legal period required by Panamanian tax regulations.

After these periods, data will be deleted, anonymized, or blocked as appropriate.

11. Rights of the data subject

Under Law 81 of 2019, the data subject is entitled to:

  • Access: to know which personal data we hold and the purposes of processing.
  • Rectification: to correct inaccurate, incomplete, or outdated data.
  • Cancellation or deletion: to request the removal of data that is no longer necessary.
  • Objection: to oppose processing on legitimate grounds.
  • Portability: to receive data in a structured, commonly used, and machine-readable format.
  • Withdrawal of consent at any time, without retroactive effect.

To exercise any of these rights, the data subject may send a request to [email protected], indicating their identity and the right they wish to exercise. Requests will be handled within a maximum of thirty (30) business days.

The data subject also has the right to file complaints before the National Authority for Transparency and Access to Information (ANTAI) of the Republic of Panama.

12. Information security

Workflow507 adopts reasonable technical, organizational, and administrative measures to protect personal data, including:

  • TLS/SSL encryption for all site communications.
  • Access control and least-privilege for authorized personnel.
  • Storage with certified providers (SOC 2, ISO 27001, or equivalent).
  • Backups and continuous security monitoring.

No system is completely invulnerable. In the event of a security incident affecting personal data, Workflow507 will notify the data subjects and the competent authority within the time frames required by applicable law.

13. Minors

Our services are intended exclusively for persons over 18 years of age. Workflow507 does not knowingly collect data from minors. If we become aware that data from a minor has been collected without the legal guardian's consent, we will proceed with its immediate deletion.

14. Policy modifications

Workflow507 may modify this Policy at any time to reflect legal, operational, or technological changes. The current version will always be published on this page with the last-updated date. Continued use of the services after the publication of a modified version will constitute acceptance of the new terms.

15. Governing law and jurisdiction

This Policy is governed by the laws of the Republic of Panama. Any dispute will be submitted to the ordinary courts of Panama City, the parties waiving any other jurisdiction that might apply.

16. Prevailing language

This Policy is available in Spanish and English. In the event of any discrepancy, divergence, or conflict between the two versions, the Spanish version shall prevail, as Spanish is the official language of the Republic of Panama and the applicable jurisdiction.

17. Contact

  • Controller: Jeziel Leira (Workflow507)
  • Email: [email protected]
  • Phone / WhatsApp: +507 6780-3613
  • Address: Barrio Balboa, La Chorrera, Panamá Oeste, Republic of Panama