Personal Data Processing Policy
Last updated:
This policy explains how the personal data you share through appco.com.co is processed, in accordance with Colombian Statutory Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and Article 15 of the Political Constitution of Colombia.
This English version is provided for convenience. In case of discrepancy, the Spanish version prevails.
1. Data controller
- Controller: Pedro Emmanuel Carvajal Rosales, a natural person operating under the trade name Aplicaciones de Colombia (AppCo).
- Domicile: Bogotá D.C., Colombia.
- Email for personal data matters: pedro.carvajal@appco.com.co
- Phone: +57 320 912 7734
- Website: https://appco.com.co
2. Definitions
- Data subject: the person whose personal data is processed (you).
- Personal data: any information that identifies you or makes you identifiable, such as your name, email or phone number.
- Processing: any operation on data: collection, storage, use, circulation or deletion.
- Authorization: your prior, express and informed consent for your data to be processed.
- Processor: whoever processes data on behalf of the controller, such as technology providers.
3. Data we collect
We only collect the data you voluntarily provide in the website forms:
| Form | Data |
|---|---|
| Contact | Name, email and message |
| Impulse plan | Full name, email, phone, company (optional), project idea, expected users and urgency |
| Partner plan | Full name, email, phone, company, project description, business model, target market, expected revenue, current stage, team, investment capacity and timeline |
| New project | Full name, email, phone, company (optional), project information, technical requirements and estimated budget |
We do not request sensitive data (such as racial origin, health, political or religious views, or biometric data) or data from minors. Our services are aimed at adults and businesses.
In addition, browsing the site generates aggregated and anonymous visit statistics through Vercel Web Analytics, which does not use cookies or identify you. Hosting providers may log technical data, such as IP addresses, for security purposes. More details in the Cookie Policy.
4. Purposes of processing
Your data is used exclusively to:
- Answer your messages, questions and requests.
- Evaluate your project and prepare quotes or commercial proposals.
- Send you the confirmation email for your request and contact you about it.
- Manage the business relationship and deliver the services you hire.
- Comply with legal, accounting and tax obligations.
We do not use your data to send you advertising or newsletters, and we do not sell or transfer it to third parties for commercial purposes.
5. Authorization
Before submitting any form you must check the box accepting this policy. By doing so, you give prior, express and informed authorization for your data to be processed for the purposes described, including its transmission to the providers listed in section 6. We store the date and time of your acceptance as proof of authorization.
6. Technology providers (processors) and international transmission
To run the website we use providers that process data on our behalf, with security measures and only to deliver their service:
| Provider | Service |
|---|---|
| Vercel Inc. | Website hosting and anonymous visit statistics |
| Supabase (self-hosted database) | Storage of requests submitted through the forms |
| Zoho Corporation | Sending and receiving email |
| Cloudflare, Inc. | DNS and network protection |
Some of these providers have servers outside Colombia, for example in the United States. Your data may therefore be subject to international transmission to countries recognized by the Superintendence of Industry and Commerce (SIC) as having an adequate level of protection, or under the safeguards required by law.
7. Your rights
Under Article 8 of Law 1581 of 2012, you have the right to:
- Know, update and correct your personal data.
- Request proof of the authorization you granted.
- Be informed, upon request, about how your data has been used.
- File complaints with the Superintendence of Industry and Commerce for violations of the law.
- Revoke the authorization and request deletion of your data, when there is no legal or contractual duty to keep it.
- Access your personal data free of charge.
8. How to exercise your rights
Send your request to pedro.carvajal@appco.com.co with the subject “Data protection”, including your name, the email or phone number you used, what you are requesting and an address or email where we can reply. This person is responsible for handling requests, inquiries and complaints.
- Inquiries (knowing what data we hold and how it is used): answered within 10 business days. If that is not possible, we will tell you why and give you a new date, no later than 5 additional business days.
- Complaints (correcting, updating or deleting data, or revoking authorization): handled within 15 business days, extendable by up to 8 business days with notice of the reason. If a complaint is incomplete, we will ask you to complete it within 5 days; if 2 months pass without it being completed, it will be considered withdrawn.
Before going to the Superintendence of Industry and Commerce, you must first submit your inquiry or complaint to the controller.
9. Security
We apply reasonable measures to protect your data: encrypted connections (HTTPS), authenticated and restricted access to the admin panel, and providers with recognized security standards. No system is completely infallible, but we work to prevent unauthorized access, loss or alteration of information.
10. Data retention
We keep your data for as long as necessary to fulfill the purposes of this policy, while a business relationship with you exists, and for the periods required by legal, accounting or tax regulations. Afterwards, we delete it securely.
11. Changes to this policy
We may update this policy. Any change will be published on this page with its new update date. If a change affects the purposes of processing, we will inform you and, when necessary, ask for a new authorization.
12. Effective date
This policy is effective as of September 26, 2026.