1. Data controller

XPLOUSE (hereinafter, “Xplouse”), registered in the Matrícula Mercantil of the Cámara de Comercio de Bogotá, with its principal domicile in the city of Bogotá D.C., Colombia, is the entity responsible for the processing of personal data collected through its digital platforms, services and communication channels.

Contact: for any query related to the processing of your personal data, you may write to us at Xplouselab@gmail.com.

2. Applicable regulatory framework

Ley 1581 de 2012 (Colombia): General Regime for the Protection of Personal Data.
Decreto 1377 de 2013: implementing provisions of Ley 1581.
Ley Estatutaria 1266 de 2008: Habeas Data and the handling of financial and credit information.
GDPR (the European Union General Data Protection Regulation) when we process data of European citizens.
CCPA (California Consumer Privacy Act) when we process data of California residents.

3. Personal data we collect

3.1 Identification data

Full name and corporate name.
Identity document (cédula, NIT, passport).
Correspondence address and domicile.
Email address and telephone number.
Job title and company.

3.2 Platform usage data

IP address and browsing data.
Device identifiers.
Records of interaction with our services.
Language and configuration preferences.

3.3 Commercial data

Billing and payment information.
History of contracted services.
Communications and support requests.

4. Purposes of the processing

Provision of consulting, implementation and support services for AI systems.
Commercial communication about our services, events and relevant content.
Administrative, accounting and tax management.
Continuous improvement of our platforms and services.
Compliance with legal and regulatory obligations.
Statistical and market analysis (always in aggregated and anonymized form).

5. Rights of the data subject

To know your personal data held by Xplouse.
To update inaccurate or incomplete data.
To rectify information that is partial or erroneous.
To delete your data when there is no legal obligation to retain it.
To revoke the authorization granted for the processing.
To object to the processing in the cases provided by law.
Portability: to receive your data in a structured and commonly used format.

6. Transfer and transmission of data

Xplouse may transfer or transmit personal data to third parties only to: (i) cloud infrastructure providers (Google Cloud Platform, AWS) for secure storage and processing; (ii) analytics and communication tools to improve our services; (iii) judicial or administrative authorities when required by law. In every case we guarantee that third parties comply with equivalent protection standards.

7. Security measures

Encryption of data in transit (TLS 1.3) and at rest (AES-256).
Role-based access control (RBAC) with multi-factor authentication.
Continuous monitoring of access and suspicious activity.
Data retention and secure deletion policies.
Periodic team training in data protection.

8. Cookies and tracking technologies

Our website uses cookies that are essential for its operation (theme and language preferences). We do not use advertising cookies or third party tracking cookies except upon express notice to the user.

9. Data retention

Personal data is retained for the time necessary to fulfill the purposes described and the applicable legal obligations. Once that period has elapsed, the data is securely deleted or anonymized.

10. Exercise of rights and contact

You may contact us through:

Email: Xplouselab@gmail.com.
Address: Bogotá D.C., Colombia.

Your request will be handled within the legal terms: 10 business days for queries and 15 business days for claims.

11. Modifications

Xplouse reserves the right to modify this policy at any time. Modifications will be communicated through our website and will take effect upon publication.