Privacy Policy

1. Data controller (Responsable del tratamiento)

MekaIA ⟨razón social / NIT⟩ (“MekaIA”, “we”), an AI automation agency based in Colombia, is the controller of personal data collected through this website. Contact: juan.amayaq@gmail.com.

2. Data we collect

Contact and booking data: name, company, work email, role, company size, and the message you send through our form, plus scheduling details when you book a call (processed through Google Calendar). Technical data: anonymized, privacy-friendly analytics (no cross-site tracking). We do not collect sensitive data through this site and it is not directed at minors.

3. Purposes and legal basis

We process your data to respond to inquiries, schedule and hold calls, prepare proposals, deliver contracted services, and — only with your consent — send commercial communications. Under Ley 1581/2012 the basis is your prior, express, and informed authorization, given when you submit the form or book a call. For EU visitors (GDPR Art. 6) the bases are consent, pre-contractual steps taken at your request, and our legitimate interest in operating the site securely.

4. AI services and client data

When MekaIA builds automations or AI agents that process our clients’ data, we act as a data processor (encargado del tratamiento) under the client’s instructions, governed by a data processing agreement. We do not use client data to train AI models without express authorization, and we apply access controls, encryption in transit, and data minimization in every engagement.

5. Your rights

You may know, access, update, rectify, and delete your data, request proof of authorization, and revoke consent at any time (Ley 1581/2012 arts. 8, 14–15; GDPR arts. 15–22, including portability and objection). Write to juan.amayaq@gmail.com. Queries are answered within 10 business days and claims within 15 business days, as required by Colombian law. You may also file complaints with the Superintendencia de Industria y Comercio (SIC) or, in the EU, your local supervisory authority.

6. International transfers and processors

We rely on service providers that may process data outside Colombia — including web hosting (Hostinger), Google Workspace (email and calendar), and Cloudflare (form protection) — under their standard contractual safeguards. We share data with no one else, and we never sell it.

7. Retention and security

Contact data is kept only while needed for the purposes above or while a business relationship lasts, then deleted. We protect data with TLS encryption, restricted access, and server-side security controls.

8. Changes

We will post any updates to this policy on this page with a new “last updated” date.