Privacy Policy

Effective date: July 17, 2026

Assets is operated by Ertesan LLC, doing business as Pico de Gallo io, 4671 Old Scottsville Rd, Alvaton, Kentucky 42122, United States. This policy explains how we handle personal information when you visit, use, or receive support for Assets.

Our privacy commitment

We do not sell personal information. We do not use uploaded files for advertising, behavioral profiling, or AI-model training. We do not routinely inspect subscriber files. Assets is designed to serve the person’s intent rather than compete for attention.

Information we process

• Account information: name or username, email address, organization, role, password hash, invitation and agreement records.
• Customer files: files, folders, filenames, paths, tags, metadata, previews, shares, and upload activity you choose to store.
• Service information: storage usage, feature settings, subscription state, and account history.
• Security and diagnostic information: IP address, timestamps, authentication events, audit events, browser/request details, errors, and abuse signals.
• Support communications: messages and attachments you send when requesting help.
• Billing information: subscription, invoice, tax, and transaction identifiers. Payment providers process complete card details; Assets should not receive or store complete card numbers.

Why we process information

We process information to provide and secure Assets, authenticate users, store and deliver files, honor sharing instructions, enforce quotas and policies, provide support, process subscriptions, meet accounting and tax obligations, prevent abuse, improve reliability, and comply with law.

For users in jurisdictions that require a legal basis, processing may rely on performance of a contract, legitimate interests in operating and securing the service, consent where requested, and compliance with legal obligations.

Limited access to files

Authorized access to subscriber files is limited to what is reasonably necessary to provide support requested by the subscriber; operate previews, search, sharing, backups, and recovery; investigate technical or security failures; address credible abuse reports; comply with valid legal process; or protect people from serious harm. Administrative access should be restricted and auditable.

Assets is not currently end-to-end encrypted. Authorized server operators can technically access stored content even though routine content inspection is not part of our business model.

Service providers and disclosures

We may use carefully selected providers for hosting, payment processing, transactional email, monitoring, backup storage, tax calculation and filing support, and professional services. They receive only the information reasonably needed for their role and process it under their own terms or agreements with us.

We may disclose information when required by valid law, to protect rights or safety, to investigate fraud or abuse, or as part of a business transaction subject to appropriate safeguards. We do not disclose information to data brokers or advertising networks.

Cookies

Assets uses essential cookies for sign-in, session security, and cross-site-request-forgery protection. We do not use advertising cookies. If non-essential analytics are introduced, we will disclose them and request consent where required.

Retention and deletion

While an account is active, files remain until you delete them or the account relationship changes. When paid access ends, files remain downloadable in read-only recovery mode for six months unless you reactivate or request earlier deletion. Active copies are then scheduled for deletion, and residual backup copies expire within 30 additional days.

Account, security, billing, tax, and audit records may be retained longer where reasonably necessary for fraud prevention, dispute resolution, accounting, tax, or legal obligations. We minimize that retention and do not use retained records for advertising. See our Data Retention Policy.

Security

We use administrative, technical, and physical safeguards appropriate to the service, but no system can guarantee absolute security. Subscribers should maintain independent copies of critical files and protect their credentials.

International users

Assets is operated from the United States. Information may be processed in the United States or other countries where approved providers operate. Where required, we will use appropriate contractual or legal safeguards for international transfers.

Your choices and rights

Depending on your location, you may have rights to access, correct, export, delete, restrict, or object to processing of personal information, and to lodge a complaint with a privacy regulator. Contact us to make a request. We may verify identity before acting and may retain information required by law.

Children and schools

Individual accounts are for people age 18 or older. Minors may not register directly. Schools and youth-serving organizations require a separate institutional agreement before student access or storage of student personal information. Assets does not knowingly solicit personal information directly from children.

Changes

We will post changes with a revised effective date and provide additional notice for material changes where required or practical.

Contact

Ertesan LLC, d/b/a Pico de Gallo io
4671 Old Scottsville Rd
Alvaton, KY 42122
admin@picodegallo.io

This launch draft should be reviewed by qualified privacy counsel before paid subscriptions begin.