Privacy Policy

1. Data controller

The controller responsible for processing your personal data is Derek Rodríguez Rodríguez, a natural person with registered economic activity in Colombia. Contact address: Armenia, Quindío. Contact channel for data protection matters: [email protected] .

2. Legal framework

This policy is governed by Colombian personal data protection law, in particular:

• Ley 1581 de 2012 — general regime for the protection of personal data.
• Decreto 1377 de 2013 — regulation implementing Ley 1581.
• Decreto 1074 de 2015 — single regulatory decree of the commerce, industry and tourism sector (compilation).
• Circulars of the Superintendencia de Industria y Comercio (SIC) on habeas data.

3. Data we collect

When you fill out the contact form:

• Your name (optional) — to personalize the reply.
• Your email (required) — to respond to your message.
• Your WhatsApp number (optional) — to contact you on that channel if you prefer.
• The text of the message you sent us — to understand your need.
• Minimal technical metadata: your IP address and the browser's User-Agent, for auditing and abuse prevention (anti-bot / anti-spam defense).

We do NOT collect tracking cookies, we do NOT use third-party analytics services (Google Analytics, Meta Pixel, etc.) and we do NOT share your data with advertising networks.

4. Purposes of processing

We use your data only to:

• Respond to your enquiry or request.
• Coordinate the start of a software project if we move forward to proposal + contract.
• Keep an internal record of enquiries (lead intake) for operational follow-up.
• Send you FabrIA updates by email, only if you gave explicit, separate consent for it in the form (it is optional and does not condition the reply to your enquiry).
• Comply with legal obligations (DIAN invoicing, withholdings, requests from the competent authority).

Consent to receive updates by email is prior, express and informed and is requested separately from the consent to process your enquiry, in accordance with article 8 of Ley 1581 de 2012 and article 9 of Decreto 1377 de 2013 (consent differentiated by purpose). You may revoke it at any time using the one-click unsubscribe link included in every updates email, or by writing to us at [email protected] ; the right to unsubscribe is also backed by Ley 1480 de 2011 (Consumer Statute). Transactional emails (replying to your enquiry, sending you a contract) are not marketing and do not require this consent. We never sell your data to third parties nor share it with advertising networks.

5. Data processors (third parties)

To operate the site and our systems, some third-party technical services may process your data:

• Cloudflare Inc. (United States) — site hosting (Cloudflare Pages), DNS, anti-bot protection (Turnstile) and content delivery network (CDN).
• Resend (United States) — email sending: transactional (replies to your enquiry, contracts, notifications) and, only if you gave your consent, FabrIA updates.
• Stripe Payments Inc. (United States) — payment processor if we move forward to a contract (active client only).
• Meta Platforms (United States) — only if you contact us via WhatsApp Business or Messenger.

The international transfer of your data to these third parties is authorized when you accept this policy by submitting the form. These providers are in jurisdictions recognized by the SIC as offering adequate levels of protection.

6. Use of artificial intelligence (AI)

FabrIA uses language models (AI) as an internal tool to organize, draft and classify information — for example, to better understand your enquiry or prepare a proposal. We want you to know this transparently:

• Before sending any text to an AI model, personal data is anonymized (your name, email, phone are replaced by internal markers) and re-associated only afterwards, within our system.
• For sensitive information we do not use free-tier AI providers whose terms allow training on your data; the choice of model depends on the sensitivity level.
• AI does not make autonomous decisions that affect you. The decisions that matter (proposals, contracts, communications) always go through human review by the operator.
• We do not use your data to train our own models or those of third parties.

If, in a project, we build you a system that includes AI features, we document it explicitly at delivery: which parts use AI, their known limitations and how to supervise them. You, as the party responsible for your system, decide how that is communicated to your own users.

7. Rights of the data subject (habeas data)

In accordance with article 8 of Ley 1581 de 2012, as the data subject you have the right to:

• Know, update and rectify your personal data.
• Request proof of the authorization granted.
• Be informed of the use given to your personal data.
• File complaints before the Superintendencia de Industria y Comercio (SIC).
• Revoke the authorization and/or request deletion of the data.
• Access free of charge your personal data that has been processed.

8. How to exercise your rights

Send us an email to [email protected] with the subject "Habeas Data" describing the right you want to exercise. We respond within the legal deadlines: 10 business days for enquiries, 15 business days for claims. If you do not receive a reply or are not satisfied, you may turn to the SIC as the supervisory authority.

9. Data retention

We keep your data for as long as necessary to fulfill the purpose for which we collected it:

• Non-converted leads: 6 months from the last contact, then automatic deletion.
• Active clients: for the duration of the contractual relationship + 5 years afterwards (DIAN + accounting obligations).
• Technical logs: 90 days maximum.

10. Cookies

This site uses exclusively technical cookies necessary for operation (cookie-notice acceptance preference, clickwrap session token if you sign a contract). We do NOT use analytics, advertising or profiling cookies.

11. Changes to this policy

If we update this policy, we will publish the new version at this same URL with the update date. Material changes will be notified to active clients by email.