Privacy policy

Last updated: October 31, 2026

Español: Política de privacidad. This English version is a translation provided for convenience. If it differs from the Spanish version, the Spanish version prevails.

This policy explains what personal data Laboratorio de Instrumentación Avanzada (LIA) (“LIA”) processes when you use the website liaengine.com, the customer dashboard and the LIA Engine service, which validates and certifies artificial intelligence answers.

1. What data we process

• Your Google account data, when you sign in with Google: name, email address and the identifier Google assigns to your account.
• Corporate plan form: if you fill it in, we keep your name, the company, the email, the plan you are interested in, the country, the AI you use, the needs you tick and your message, only to reply to you by email with a proposal. If you choose a Corporate plan from your dashboard, we keep your account's name and email, the company you enter and the chosen plan. We do not use this data for anything else.
• Payments: payments are processed by Mercado Pago. We keep the plan, the status of your subscription, its identifier at Mercado Pago and the date of the next charge. The email you provide for payment is sent to Mercado Pago. We do not receive or store your card details or your Mercado Pago account details.
• Invoicing: for each payment we issue an electronic “factura C” invoice with ARCA, with the amount, the plan, the period and your email. If you want the invoice in your company's name, you can optionally enter in the dashboard its CUIT tax ID, company name, VAT status and tax address: they are used only to issue your invoices and credit notes, and are reported to ARCA within the document.
• Withdrawal request: if you submit one, we keep your name, your email, the contracted plan, the contract date and your comment, to process it and as a record.
• Your LIA Engine account data: date of registration and last sign-in, contracted plan, its expiry and the usage for the period.
• LIA keys: we keep a cryptographic fingerprint of each key (not the key), its first characters so you can recognize it, the creation date, the last-use date and the name you give it. That name and your account identifier are included in the signed certificates issued by that key, so that it is known who requested each certification: we recommend a role name (for example “accounting-01”) rather than a person's name.
• Control log of each request made with your key: date and time, type of request, result (certified, stopped, not certified or error), AI model and provider you indicated, number of tokens, processing times, number of rules verified and of corrections, and the reason when it is not certified. It does not include the text of your request or the data you send for verification.
• Certified answers: so that you can download the certificate from the dashboard, we keep the delivered answer and its certificate. In addition, a certified answer may remain in a temporary copy so as not to charge you again for the same request with the same data.
• Content of your requests: we process it at that moment to verify it and we send it to the AI provider you chose. Except as stated in the previous item, we do not store it.
• Your AI provider key: we use it only to forward your request to that provider. We do not store or log it.
• Technical data: IP address, date and time of access, used to control the free trial, usage limits, the security of the service and the prevention of abuse.
• What you write to us by email, if you contact us.
• Your acceptance of this policy: the version you accepted, the date and the IP address from which you accepted it, as a record of your consent.

Name and email are mandatory to create the account: without them we cannot identify you or provide you with the service. The rest of the data is generated when you use the service.

2. Your consent

Before you sign in we ask you to tick the box in which you declare that you have read and accepted this policy. That consent is free, express and informed, and we keep it as a record. You can withdraw it whenever you want by requesting the closure of your account (section 10).

3. What we use it for

• Creating and maintaining your account, and identifying you when you sign in.
• Providing the service: verifying and certifying answers, measuring your plan's usage and showing you your information and certificates in the dashboard.
• Answering your inquiries and communicating with you about the service.
• Sending you service notices by email: the welcome message when you create your account, help if you have not used it after a few days, and a notice when you have few verifications left. They are not third-party advertising. If you do not want to receive them, reply BAJA to any of those emails and we will not send you any more; we read replies to those emails to handle your request.
• Publishing your certificates, only if you ask for it (section 6 bis).
• Protecting the service, preventing fraud and abuse, and complying with legal obligations.
• Publishing the AI ranking: how many answers from each AI model LIA Engine certified. These are aggregated, anonymous totals per model; they do not include your account, your email, your requests or any data that identifies you.
• Improving the service with your feedback: if you send us a rating or a comment from the dashboard, we keep it together with your email and your plan, and only the LIA Engine team reads it. It is not published.

4. Who it is shared with

Only with those needed for the service to work:

• Google, for signing in with your Google account, and Google Fonts, which serves the site's fonts.
• The AI provider you choose (for example OpenAI, Anthropic, Google, Moonshot, Z.ai or others): it receives the content of your request and your key because it generates the answer. That provider processes the data according to its own policies.
• Mercado Pago, which processes plan payments, according to its own policies.
• ARCA (Agencia de Recaudación y Control Aduanero, the Argentine tax and customs agency), which authorizes each electronic invoice and credit note, as required by law.
• Our hosting provider (Hetzner), where our servers run.
• Our monitoring and notification services (Healthchecks.io and ntfy.sh), which alert the LIA team if the service fails or if there is a new account or a reply to our emails. They receive technical signals and internal notices with minimal data: in notices, the email is partially hidden (for example, an***@gmail.com).
• Our email provider (Google, with Gmail), through which we send service notices and receive the messages you write to us.

Apart from these cases, we would share data only if a law or a competent authority required it.

5. International transfers

Our servers are hosted by Hetzner in Nuremberg, Germany (European Union), a jurisdiction that Argentina recognizes as having an adequate level of data protection. Google and AI providers may process data in other countries, for example the United States, not all of which have a level of protection recognized as adequate by Argentina. These transfers are necessary to provide the service you request: signing in with Google and sending your request to the AI provider you choose. By accepting this policy you give your express consent to them.

6. Third-party data you send in your requests

The requests you make to the service may include data about other people, for example the customers listed on your invoices. With respect to that data, LIA acts as a service provider on your behalf: it processes the data only to verify and certify the answer you requested, does not use it for any other purpose and does not disclose it to third parties, except to your AI provider on your instruction. You are responsible for having the right and consent needed to use it, and for not sending more personal data than necessary. We recommend that you do not send sensitive data (health, racial or ethnic origin, political opinions, religious beliefs, trade union membership or sex life).

Conditions of processing on your behalf. As data processor (article 25 of Law No. 25,326), LIA: processes that data only according to your instructions, which are the requests you send; does not use it to train models or for any other purpose; requires confidentiality from anyone with access; applies the security measures in section 9, including incident notice within 72 hours; helps you respond to access, rectification or deletion requests from those people; and deletes it according to the periods in section 8 or when you close your account. These conditions form part of your contract with LIA and work as a data processing agreement; if your organization needs to sign its own, request it through the contact address.

Sub-processors. To process that data, LIA uses a single sub-processor: Hetzner Online GmbH (server hosting, Nuremberg, Germany). If we add another, we will publish it on this list before using it. Your AI provider is not a sub-processor of LIA: you choose it and contract with it, and the data reaches it on your instruction.

6 bis. Certificates you decide to publish

From your dashboard you can publish a certificate with the Publish button. This creates a link (liaengine.com/c?… or liaengine.com/en/c?…) that anyone who has it can open. The page shows the certified answer, the parts of your request that LIA checked, the AI model and the date, and allows the signature to be verified. It does not show your name, your email, your key or the rest of your request.

Only what you choose is published. You can remove it whenever you want with Remove, and the link stops working. If you do not remove it, it is deleted automatically 90 days after the validation. We ask search engines not to index those pages. Before publishing, check that the answer does not contain personal data of other people or confidential information: publishing it is your decision and your responsibility.

7. Cookies

We use a single first-party cookie, lia_sesion, needed to keep you signed in to your account. It is a session cookie: it expires after 12 hours or when you tap “Sign out”, cannot be read from the page and is not used for tracking or advertising. The Google button may use its own cookies, according to Google's policy.

Visit statistics. To know how many people visit the home page and where they come from (for example, from a social network or a search engine), we count visits anonymously: without cookies, without storing your IP address and without identifying you. We use a code that changes every day and does not allow you to be recognized. We see only totals.

8. How long we keep it

If you ask us to delete your account, we delete its data, except what we must keep by legal obligation. Whatever is in backups disappears as those copies are replaced by more recent ones.

9. Security

We apply reasonable technical and organizational measures: encrypted connections (HTTPS), keys stored only as fingerprints, a session cookie protected against requests from other sites, restricted access to the servers and to administration, and daily backups. No system is infallible. If we detect a security incident affecting your data, we will inform you by email within 72 hours of detecting it, with what we know up to that moment, the measures we took and what we recommend you do, and we will report it to the Agencia de Acceso a la Información Pública (Argentina's data protection authority) when appropriate. If we do not yet know everything, we will inform you anyway within that period and complete the information as we go.

10. Your rights

You can request access to, rectification, updating or deletion of your personal data, and the closure of your account, by writing to liaengine26@gmail.com from your account's email. Under Personal Data Protection Law No. 25,326:

• Access is free of charge at intervals of no less than six months, unless you show a legitimate interest, and we respond within 10 calendar days of receiving the request.
• We carry out rectification, updating or deletion within 5 business days of receiving the request.

The Agencia de Acceso a la Información Pública, in its capacity as Supervisory Body of Law No. 25,326, has the power to handle complaints and claims filed by those whose rights are affected by non-compliance with the rules in force on personal data protection.

11. Minors

The service is aimed at businesses and professionals. It is not intended for people under 18, and we do not knowingly create accounts for minors.

12. Changes

We may update this policy. We will publish the current version on this page with its update date. If the change is important, we will notify you by email or in the dashboard and ask you to accept the new version the next time you sign in.

13. Data controller and contact

The data controller is Walter Damián Cabrera (CUIT tax ID 20-29046871-0), who provides the Service under the trade name Laboratorio de Instrumentación Avanzada (LIA), with address at Pasaje Evaristo Carriego 1147 (C1406), Ciudad Autónoma de Buenos Aires, Argentine Republic. Contact: liaengine26@gmail.com