Privacy policy

1. Who is responsible

The controller of your personal data is Victor Javier Ramos, an individual who operates the CaliDev brand.

• Address: Carrera 64A # 1-70, Cali, Valle del Cauca, Colombia
• Email: info@calidev.dev
• Phone: +57 315 176 3051
• Website: calidev.dev

This policy complies with Colombia's Statutory Law 1581 of 2012 and its regulations (Decree 1377 of 2013, compiled in Decree 1074 of 2015). It also covers what other data protection laws may require depending on where you live: in Latin America, the United States and the European Union (section 11).

If this translation and the Spanish version differ, the Spanish version prevails.

2. What this policy covers

This policy covers the data we process through:

• the calidev.dev website and its forms;
• our Instagram account @calidevdev;
• the video calls we schedule with you;
• the payment requests we send you by link;
• the apps we register with Meta to manage our clients' advertising campaigns.

It does not cover products we run under their own brand, such as ServiNomic, or third-party sites we link to (LinkedIn, GitHub, WhatsApp, Cal.com). Each has its own policy.

3. What data we process and why

Contact form. Your name, your email and the message you write. We use them to reply and, if you ask, to send you a proposal.

Instagram (@calidevdev). When you comment on a post or send us a direct message, we receive your username, the identifier Instagram assigns to your account and the text you write. We keep that conversation together with internal notes and tags (for example, the topic you ask about) to reply and follow up. Some replies to comments and messages are drafted and sent automatically with the help of artificial intelligence, always within rules we define. None of those replies makes decisions that affect you legally or in a similarly significant way: if you want to talk to a person, say so and we will.

Video calls. If we invite you to a video call, we keep your name, your email and the time slot you choose. We use them to confirm the appointment and send you a reminder.

Reviews. If you leave a review at calidev.dev/opinion, we keep your name, your company, your rating and your comment. We only publish your name if you tick the box that allows it. The IP address you send from is used briefly to prevent bulk submissions and is not stored.

Payments. To charge you we keep your name, your email, your billing address, the description and the amount. Your card details are received and processed directly by Stripe: we never see or store them.

Meta apps. Our Meta apps only access the ad accounts, pages and Instagram accounts of clients who have expressly granted us access. With them we create and manage campaigns and read their statistics, which Meta provides in aggregate form (for example, reach or number of clicks per ad). We do not receive data that identifies the people who see those ads. For the data in those accounts we act as a processor on behalf of each client, who is the controller.

Data we do not ask for. We do not request sensitive data (health, ethnic origin, political, religious or sexual orientation, biometric data) or data about minors. You are not required to give us any sensitive data, and we ask you not to include it in your messages.

4. How you authorize us

We process your data with your authorization, which you give when you write to us, fill in a form, book an appointment or accept a payment request. Under Colombian law this is authorization by unequivocal conduct (article 7 of Decree 1377 of 2013). We also process data when it is necessary to perform a contract with you or to meet a legal obligation, such as keeping records of a payment.

You can withdraw your authorization at any time by writing to info@calidev.dev, except where the law or a contract in force requires us to keep the data.

5. Cookies and tracking

On the public site we use a single cookie, NEXT_LOCALE, which remembers the language you chose. It is necessary for the site to work and is not used to track you.

We do not use Google Analytics, advertising pixels from Meta or other networks, or third-party cookies for advertising or profiling. Fonts are served from our own domain. The private areas of the site, used only by our team, use session cookies to sign in.

Because we do not track you across sites, there is nothing to switch off with a "Do Not Track" or Global Privacy Control signal: the site behaves the same with or without them.

6. Who we share your data with

We do not sell or rent your personal data, and we do not share it for targeted advertising.

To operate we use providers that process data on our behalf (processors), under their own security and confidentiality commitments:

We may also disclose data when a competent authority orders it in accordance with the law.

7. International transfers

Our providers store and process data in the United States. Colombia's Superintendence of Industry and Commerce recognizes the United States as a country with an adequate level of data protection (External Circular 005 of 2017). For people in other countries, these transfers are based on your authorization and on each provider's contractual safeguards.

8. How long we keep your data

• Contact form messages, Instagram conversations and appointments: up to 2 years after the last contact.
• Reviews: while they are published or until you ask us to remove them.
• Payment data: as long as accounting and tax rules require, up to 10 years (article 60 of the Colombian Commercial Code).
• Meta app data: while the client keeps our access; when they revoke it, we stop accessing their accounts.

When the period ends, we delete or anonymize the data. The databases covered by this policy remain in force for as long as CaliDev operates.

9. How we protect your data

The site only works over an encrypted connection (HTTPS). Private areas are password protected, passwords are stored with a one-way hashing algorithm (bcrypt) and only our team has access. Our providers maintain recognized security programs. No system is invulnerable: if an incident affects your data, we will notify the authority and you as the law requires.

10. Your rights

Under Law 1581 of 2012 you have the right to:

• know, update and correct your data;
• request proof of the authorization you gave us;
• be told how we have used it;
• withdraw your authorization and ask us to delete your data where there is no legal or contractual duty to keep it;
• access your data free of charge;
• file complaints with the Superintendence of Industry and Commerce (SIC) after first making your request or claim to us.

How to exercise them. Write to info@calidev.dev with your name, a way to reply to you, a description of your request and, where relevant, supporting documents. We may ask for information to confirm your identity before we reply.

• Inquiries (what data we hold and how we use it): we reply within 10 business days of receipt. If we cannot, we tell you why and reply within the following 5 business days.
• Claims (correct, update, delete or withdraw authorization): we reply within 15 business days. If we cannot, we tell you why and reply within the following 8 business days. If a claim is missing information, we tell you within 5 business days; if 2 months pass without you completing it, we consider it withdrawn.

11. If you live outside Colombia

The rights in section 10 apply to everyone, wherever they live. In addition:

Mexico. You can exercise your rights of access, rectification, cancellation and opposition (ARCO rights) and withdraw your consent through the same channel as in section 10.

Argentina. You have the right to access your data free of charge at intervals of no less than six months, unless you show a legitimate interest (article 14, subsection 3, of Law 25,326). The Agency for Access to Public Information, as the supervisory body of Law 25,326, handles complaints and claims from anyone whose rights are affected by non-compliance with personal data protection rules.

Brazil. Under the General Data Protection Law (LGPD), you can request confirmation of processing, access, correction, anonymization, blocking or deletion, portability, information about who we share your data with, and withdrawal of consent. You can contact the National Data Protection Authority (ANPD).

Chile, Peru and other Latin American countries. You can exercise the rights of access, rectification, cancellation or opposition granted by your local law, and contact your country's data protection authority.

United States. Depending on your state of residence (for example California, under the CCPA/CPRA, or Virginia, Colorado, Connecticut, Texas and other states with similar laws), you may have the right to know what personal data we hold about you, to get a copy, to correct it and to ask us to delete it, without being treated differently for doing so. We do not sell personal data or share it for cross-context behavioral advertising, and we do not use sensitive data to infer characteristics about you. You can exercise your rights through the channel in section 10 or through an authorized agent; if we deny a request, you can appeal by replying to our response.

European Union and European Economic Area. We process your data on the basis of your consent, the performance of a contract or of pre-contractual steps you request, compliance with legal obligations, or our legitimate interest in answering the messages we receive (article 6(1) GDPR). You have the right of access, rectification, erasure, restriction, portability and objection, the right to withdraw your consent without affecting prior processing, and the right to lodge a complaint with the supervisory authority in your country.

12. Minors

Our services are aimed at businesses and people aged 18 and over. We do not knowingly collect data from minors. If you believe a minor has given us their data, write to us and we will delete it.

13. Changes to this policy

If we change this policy we will publish the new version on this page with its effective date. If the change is significant, for example a new purpose, we will tell you through the contact details we have before it applies.