Privacy and personal data policy

1. Data controller

The controller is CeroAUno, the company that builds and operates Flettia. For any query, request or complaint about your personal data you can contact us through the form at www.flettia.com/en/demo/, starting your message with “Personal data”. We will reply to the email address you provide.

2. Which data we process and where it comes from

• Demo or contact form: name, email address, company, country, approximate volume of operations and the message you write.
• Demo booking: if you book through Calendly, Calendly collects your name, email and the answers you give it, under its own privacy policy. Flettia records that the booking exists, the language, the button it was booked from and the source of the visit, and queries Calendly for your name and email in order to hold the meeting.
• Container tracker sign-up: email address, phone number and password. The password is stored with irreversible encryption; nobody at Flettia can read it.
• Tracker usage: the container numbers you search and the results returned by the carrier. They are not personal data, but they are logged to run the service and limit abuse.
• Browsing: cookie identifiers, pages viewed, clicks, device and browser type, approximate location derived from the IP address, source of the visit (campaign, medium and source) and a recording of the browsing session. In recordings, everything you type into form fields is masked and never recorded.
• Technical server logs: IP address, date and time of each request and user agent, needed for security and for the service to work.

3. Google data processed by Flettia

Flettia's use and transfer to any other app of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

In detail, when you connect your Gmail mailbox:

• What is read: the headers, body and attachments of the messages in the mailbox you connect, and that account's address.
• What for: to classify mail, open requests and file documents in your organisation's records; and to create drafts or send emails when you ask Flettia to.
• Who sees it: only your organisation. It is not sold, not shared with third parties, not used for advertising and not used to train third-party models. We access it only when you ask us to in order to solve a problem, or when the law requires it.
• How long it is kept: you disconnect the mailbox from Settings whenever you want and Flettia stops reading it; what was already stored is deleted on request.

4. What we use the data for

• To handle your demo or contact request and follow up commercially on it.
• To create and manage your tracker account, provide the service and protect it from abuse.
• To measure how the site and the product are used, fix errors and improve them.
• To send you commercial communications about Flettia only if you authorise it; you can withdraw that authorisation at any time.
• To comply with legal obligations and requests from competent authorities.

5. Authorisation

By submitting a form, booking a meeting or creating an account you give prior, express and informed authorisation to process your data for the purposes described. The authorisation is recorded together with the date and the channel through which you gave it. We do not request sensitive data (health, ethnic origin, political opinions, biometrics or similar); please do not include it in your messages.

6. Who we share data with

We do not sell personal data. We share it only with providers that process it on our behalf, under contract, to deliver the service:

• Amazon Web Services (hosting and databases, United States).
• Google (Google Analytics for site measurement and Google Workspace for email and internal alerts, United States).
• Amplitude (product analytics and session recording with form masking, United States).
• Calendly (demo scheduling, United States).
• Cloudflare (domain name resolution).

7. International transfer

The providers above host data in the United States. Transfers take place under each provider's contracts and data protection clauses, and only for the purposes in this policy. By giving your authorisation you accept that transfer.

8. How long we keep data

• Demo requests and account data: for as long as the commercial relationship or the account exists, and afterwards for as long as the law or the defence of claims requires.
• Browsing and analytics data: for the retention period configured in each tool.
• You can ask us to delete your data at any time; we will do so unless a legal or contractual obligation requires us to keep it.

9. Your rights and how to exercise them

You have the right to know, update and correct your data; to request proof of the authorisation you gave us; to be informed of how it has been used; to withdraw your authorisation and request deletion where there is no legal or contractual duty to keep the data; and to lodge complaints with the Superintendencia de Industria y Comercio in Colombia or with the data protection authority of your country.

To exercise them, write to us through the form at www.flettia.com/en/demo/, starting your message with “Personal data”, stating your name, the data your request refers to and what you are asking for. Queries are answered within ten business days and complaints within fifteen business days, counted from the day after receipt, as set out in Law 1581 of 2012. If we need more time we will tell you, with an estimated response date.

10. Cookies and measurement tools

• Google Analytics 4: browser identification cookies (for example _ga) to measure visits, pages and events.
• Amplitude: device and session identifiers, and session recording with masking of all form fields.
• Calendly: its own cookies when you open the demo scheduler.
• You can block or delete these cookies in your browser settings and use the Google Analytics opt-out add-on. The site and the tracker work without measurement cookies.

11. Security

All communication with our services is encrypted (HTTPS). Passwords are stored with an irreversible hashing algorithm. Access to data is restricted to the people and systems that need it to provide the service. No system is infallible; if an incident affecting your data occurred, we would notify you as required by law.

12. Minors

Our services are aimed at companies and at people over eighteen. We do not knowingly collect data from minors; if we find that it happened, we will delete it.

13. Changes to this policy

When it changes, we will update the version and date shown at the top. Substantial changes affecting your rights or the purposes of processing will be announced on this page before they take effect.