Privacy Policy

1. Who we are

This website and the applications described in this policy are operated byJDG SOFTWARE SAS ("JDG Software", "we", "us"), a company incorporated in Colombia under NIT 901.834.584. We are the data controller responsible for the personal data described here.

You can reach us about any privacy matter athello@jdguzmans.com.

2. Scope of this policy

This policy applies to:

• Our website at jdgsoftware.com and any subdomain we operate.
• Applications we publish on third-party platforms, including our Instagram and Meta platform integrations.
• Business communications with prospective and current clients.

Where we build and operate software on behalf of a client, that client is normally the data controller and we act as a data processor under their instructions and their own privacy policy. This policy covers only the data for which JDG Software is the controller.

3. Information we collect

Information you give us

• Contact details — your name, email address, company and any other information you choose to include when you email us or reach out about a project.
• Project information — the content of your messages and any materials you share with us while we discuss or carry out work.

Information collected automatically

• Technical data — IP address, browser type, device type, referring page, and the pages you request. This is recorded in standard server and content-delivery-network logs and is used to keep the site secure, available and functioning correctly.

Our marketing website does not use advertising or tracking cookies. If we introduce analytics or cookies in future, we will update this policy and obtain consent where the law requires it.

Information from Meta and Instagram

When you connect an Instagram account to one of our applications, or interact with an Instagram account that our software manages on behalf of its owner, we may receive data from Meta's platforms. This is described in detail in section 4.

4. Instagram and Meta platform data

Our applications use the Instagram Graph API and Instagram Messaging provided by Meta Platforms, Inc. We only request the permissions our features actually need, and we use platform data solely to deliver those features to the account owner who authorised the connection.

What we may receive

• Account profile data — the Instagram user ID, username, profile picture, account type and follower or media counts of the professional account that grants access.
• Content data — media, captions, comments and mentions associated with the connected account.
• Messaging data — the content, sender ID and timestamps of messages exchanged with the connected account, where the account owner has enabled messaging features.
• Access tokens — the credentials Meta issues so our application can act on behalf of the connected account.

How we use it

• To display the connected account's content and conversations inside the application.
• To send, receive, route or automate replies that the account owner has configured.
• To produce reporting and insights for the account owner about their own account.
• To diagnose faults, prevent abuse and maintain the security of the service.

What we never do

• We do not sell, rent or trade Meta platform data.
• We do not use Meta platform data for advertising or ad targeting.
• We do not build profiles of individuals, enrich data sets, or share platform data with data brokers.
• We do not use platform data for any purpose other than delivering the feature the account owner authorised.

Our use of information received from Meta APIs adheres to theMeta Platform Terms andDeveloper Policies, including the Limited Use requirements. Access tokens are stored encrypted and are revoked when a user disconnects the integration.

5. Why we process your data

We process personal data on the following bases:

• Your authorisation or consent — for example when you connect an Instagram account, or when you contact us. Under Colombian Law 1581 of 2012, we obtain your prior, express and informed authorisation before processing your personal data.
• Performance of a contract — to deliver the services you or your organisation engaged us to provide.
• Legitimate interests — to secure our systems, prevent abuse, and respond to business enquiries, provided your rights do not override those interests.
• Legal obligations — to comply with tax, accounting and other statutory duties.

6. Sharing and disclosure

We do not sell personal data. We share it only with service providers who help us operate, and only to the extent needed:

• Hosting and infrastructure — Cloudflare, Inc. for hosting, content delivery and protection of this website.
• Platform providers — Meta Platforms, Inc., where the integration itself requires data to be exchanged.
• Business tools — email and productivity providers used to correspond with you.
• Legal and safety — authorities or advisers where disclosure is required by law or necessary to establish or defend legal claims.

Providers are bound by contract to protect the data and may not use it for their own purposes.

7. International transfers

JDG Software operates from Colombia, and some of our providers process data in the United States and other countries. Where personal data is transferred outside your country, we rely on contractual safeguards with those providers requiring a level of protection comparable to the one described in this policy.

8. How long we keep data

• Meta and Instagram platform data — retained only while the integration is active. When an account is disconnected or a deletion request is received, the data and associated tokens are deleted within 30 days.
• Business correspondence — retained for as long as the relationship is active and for a reasonable period afterwards.
• Contractual and accounting records — retained for the period required by Colombian law.
• Technical logs — retained for a short period, typically no more than 90 days.

9. Your rights

You have the right to:

• Know what personal data we hold about you and how we use it.
• Access a copy of that data.
• Correct data that is inaccurate, incomplete or out of date.
• Request deletion of your data, subject to our legal retention duties.
• Withdraw your authorisation or consent at any time.
• Object to or request that we restrict certain processing.
• Lodge a complaint with the Superintendencia de Industria y Comercio in Colombia, or with your local data protection authority.

To exercise any of these rights, emailhello@jdguzmans.com. We acknowledge requests within 10 business days and resolve them within 15 business days of receipt, in line with Colombian Law 1581 of 2012. If we need longer, we will tell you why and when to expect a response.

10. Security

We apply administrative, technical and physical safeguards appropriate to the risk, including encryption of data in transit, encryption of stored credentials, access control on a need-to-know basis, and regular review of our dependencies. No system is completely secure, but we work to protect your data and will notify you and the relevant authority if a breach affecting your rights occurs.

11. Children

Our services are intended for businesses and are not directed at children under 13, or under the minimum age required in their country. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact us and we will delete it.

12. Changes to this policy

We may update this policy as our services change or the law requires. The revision date at the top of this page always reflects the current version. If a change materially affects how we handle your data, we will take reasonable steps to notify you before it takes effect.

13. Contact us

JDG SOFTWARE SAS
NIT 901.834.584 — Colombia
Email: hello@jdguzmans.com