Personal data processing policy

01Data controller

Typers is an artificial intelligence marketing agency. We are responsible for the personal data we collect on this website, through our service channels and while providing our services.

Controller

Camilo Andrés Vanegas Márquez, sole proprietor (trade name Typers)

Tax ID (NIT)

1030579000-6

Address

Bogotá D.C., Colombia

Email

camilovanegas@typersagency.com

Phone

+57 320 301 0105

Website

typersagency.com

02Legal framework

This policy complies with Colombian Statutory Law 1581 of 2012, Decree 1377 of 2013 (compiled in Sole Regulatory Decree 1074 of 2015) and the other Colombian rules on personal data protection. The supervisory authority is the Superintendence of Industry and Commerce (SIC). Typers is based in Colombia, so these rules apply to all the data we process, including data from people in other countries.

03Definitions

• Data subject: the person the data refers to.
• Processing: any operation on the data: collection, storage, use, circulation or deletion.
• Controller: whoever decides on the processing. In this case, Typers.
• Processor: whoever processes data on behalf of the controller, for example a cloud provider.
• Authorization: your prior, express and informed consent to process your data.

04What data we process

We only ask for what we need to serve you:

• Assessment request (web form): name, company, email, WhatsApp number with its country, packages of interest, media spend range and the message you write.
• WhatsApp: your number, your profile name, the messages you send us and, if you request an assessment on that channel, your company name and your goal.
• Nova, the website chat: the conversation happens in your browser. Only two things leave it: (1) your assessment request, if you authorize it at the end of the chat (name, company, email, WhatsApp if you give it, your goal and the topics you asked about), which we treat the same as the web form; and (2) the questions Nova can't answer, without your name or contact details: before saving them we remove emails, phone numbers and links, and they are deleted automatically after 180 days. Your first name is stored on your own device so Nova can greet you next time (see the cookie policy).
• Newsletter: your email, the date of your authorization and whether you confirmed the subscription from the link we sent you.
• Mission tracker: only the TY-XXXXXX code you type. The lookup does not show personal data.
• Clients: contact details of the client's team, access data for the client app (email and, if you sign in with Google, the account's name and photo) and information from the ad accounts and tools the client authorizes us to consult.
• Technical security data: to stop abuse we turn the IP address into an encrypted, irreversible fingerprint (salted hash). That fingerprint is deleted automatically within the following 48 hours.

We do not ask for sensitive data (health, racial origin, political or religious views, biometrics, among others) or data about children or teenagers. Please don't include it in your messages.

05What we use it for

• Responding to your request, scheduling the assessment call and sending you the commercial proposal.
• Giving you a mission code and showing you what stage your request is at.
• Providing the contracted services: strategy, advertising, web development, installing and running AI agents, reports and the Client Cockpit.
• Communicating with you about the service by email, WhatsApp or phone.
• Meeting legal, accounting and tax obligations.
• Protecting the website against fraud, spam and abuse.
• Sending you Typers commercial information only if you authorize it. You can ask us to stop at any time.
• Sending you the blog newsletter, only if you subscribe and confirm from your email. Every email includes a link to unsubscribe.

We do not sell, rent or give your data to third parties for their own purposes.

06Authorization

We ask for your authorization before saving your data:

• On the web form, with the authorization checkbox. Without it the request is not sent.
• For the newsletter, with the authorization checkbox and the confirmation from the link sent to your email.
• On WhatsApp, with the "I agree" button before creating your request.
• In service contracts, for the data processed during the business relationship.

We keep the date and channel of each authorization so we can prove it. You can revoke it whenever you want, unless there is a legal or contractual duty to keep the data.

07Your rights

As the data subject you can:

• Know, update and correct your data.
• Request proof of the authorization you gave us.
• Know how we have used your data.
• File complaints with the Superintendence of Industry and Commerce, after first submitting your inquiry or claim to us.
• Revoke the authorization or ask us to delete your data when there is no legal or contractual duty to keep it.
• Access your personal data free of charge.

08How to exercise your rights

Email us at camilovanegas@typersagency.com with the subject "Personal data". Include your name, how we should reply and what you need. If you are acting on behalf of someone else, attach the document that authorizes you.

• Inquiries: we respond within 10 business days at most. If we need more time we will let you know, and in no case will it exceed 5 additional business days.
• Claims (correction, update, deletion or non-compliance): we respond within 15 business days at most, extendable by up to 8 more business days with notice. If the claim is incomplete we will ask you to complete it within the following 5 days; if 2 months pass without a reply, we will consider it withdrawn.

These requests are handled by Typers management, led by Camilo Vanegas.

09Providers and transfers

To operate we use providers that process data on our behalf (processors), under agreements that require confidentiality and security measures:

• Google (Firebase and Google Cloud): website hosting, database and server functions. Data is stored on servers in the United States.
• Google Workspace: access to the Client Cockpit with a Google account and, if the client authorizes it, access to Google Ads, Analytics, Drive and Calendar. In addition, a copy of assessment requests is kept in a private Google Sheets spreadsheet that only the Typers team can access.
• SiteGround: email service.
• Meta Platforms (WhatsApp Business Platform): WhatsApp messages and, for clients, access to Meta Ads.
• Anthropic (Claude): AI models for client work, with connectors that only read data by default.

These providers may be located outside Colombia. By authorizing the processing you accept this international transmission, which we only make with providers that offer adequate levels of protection.

10Security

• Encrypted connections (HTTPS) across the whole website.
• The database denies all public access. Only the server and the authorized team can read it.
• Passwords and access keys live in encrypted vaults (Secret Manager), never in documents or the browser.
• Rate limits, honeypot fields and origin checks against automated submissions.
• No change to a client's accounts goes live without a person's approval.

11How long we keep it

• Requests that do not become clients: up to 24 months after the last contact.
• Client data: for as long as the business relationship lasts and for the time the law requires. Accounting records are kept for 10 years.
• Newsletter: until you unsubscribe. When you unsubscribe we delete your email from the list.
• Technical security fingerprints: deleted automatically within 48 hours.

After that, we delete or anonymize the data.

12Children and teenagers

Our services are for companies and people over 18. We do not knowingly collect data from minors. If we detect any, we delete it.

13Client app and Google and Meta data

The Typers application (app.typersagency.com) is the private space where our clients see their digital ecosystem, request campaigns and follow their results. Only people invited by Typers can sign in.

What data the app receives

• When you sign in: your email address (with a sign-in link) or, if you sign in with Google, your Google account's name, email and profile photo. We do not access your Gmail, contacts, Drive or any other data in your account.
• Google Ads (Google Ads API): the Typers administrator authorizes, one time, access to the agency's manager account (MCC). With that access the app reads the settings and metrics (spend, impressions, clicks, conversions, cost per result) of the Google Ads accounts each client voluntarily linked to Typers, and creates paused campaigns in them that the client approved.
• Meta (Marketing API): in the same way, the app reads metrics and creates paused campaigns in the ad accounts the client shared with the Typers business portfolio.

What it uses them for

• Showing the client the results of their own campaigns.
• Preparing campaign proposals and creating them paused, always after the client's approval and a review by a person at Typers.
• Alerting the Typers team about spend, performance or rejected ads.

What we never do

• We do not sell or transfer this data to third parties, or use it to show advertising, to build profiles of people or to assess credit.
• We do not use data obtained from the Google or Meta APIs to train general artificial intelligence models.
• A client only sees their own company's information.
• Access credentials for Google and Meta are stored encrypted in Google Cloud Secret Manager and never reach the browser.

The use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

How to revoke access or delete the data: the client can unlink their Google Ads account from our MCC or stop sharing their Meta account with Typers at any time; from that moment the app stops accessing it. If you signed in with Google, you can remove the permission at myaccount.google.com/permissions. To delete your data from the app, email us at camilovanegas@typersagency.com and we will delete it within 15 business days at most, except what the law requires us to keep.

14Changes and effective date

This policy has been in effect since September 24, 2026 and was updated on September 28, 2026 (version 1.2) to include the client app and the requests and questions from the Nova chat. The English version was published on September 29, 2026. If we make important changes, we will publish them here before applying them and, when appropriate, ask you for a new authorization. Data will be processed for as long as it is needed for the purposes described.