Privacy Policy and
Personal Data Processing

Responsible Party Identification

JSC AUTOMATIONS S.A.S acts as the Data Controller (Responsable del Tratamiento) for personal data collected through its digital channels, in accordance with Colombia's Ley Estatutaria 1581 de 2012 and Decreto Reglamentario 1377 de 2013.

Applicable Legal Framework

This policy is governed by Colombian personal data protection law:

• Ley 1581 de 2012 — Personal Data Protection Law (LEPD)
• Decreto 1377 de 2013 — Partial regulation of Ley 1581
• Decreto 886 de 2014 — National Database Registry (RNBD)
• Ley 1266 de 2008 — Financial Habeas Data
• Colombia's Constitution, Article 15 — the right to privacy and Habeas Data

Personal Data We Collect

Through our contact form and communication channels, we may collect:

• Identification data: full name
• Contact data: email address, WhatsApp/phone number
• Professional data: company or organization name
• Commercial preference data: service of interest, budget, implementation timeline, preferred contact method
• Optional data: project description, how you heard about us

Legal basis: Article 6 of Ley 1581 de 2012 — processing authorized by the data subject through express consent.

Purpose of Processing

Your personal data will be used exclusively for the following purposes:

• Responding to your request for information or a quote
• Sending commercial proposals related to the requested services
• Following up on the sales process
• Sending confirmations and notifications related to your request
• Improving our services through internal statistical analysis (anonymized data)
• Complying with legal and contractual obligations when applicable

We do not use your data for: unsolicited advertising (spam), selling to third parties, or automated profiling for purposes other than those stated.

Data Subject Rights (ARCOP)

As the owner of your personal data, you have the following rights under Article 8 of Ley 1581 de 2012:

To exercise any of these rights, email us at jscasher@jscautomations.com with the subject line "ARCOP Rights Request". We will respond within a maximum of 10 business days, in accordance with Article 22 of Ley 1581 de 2012.

Third-Party Data Transfer

JSC Automations does not sell, rent, or share your personal data with third parties for commercial purposes.

Your data may be accessed by the following technology platforms, acting as Data Processors, solely to deliver the contracted service:

• Google LLC (Google Sheets, Gmail, Apps Script) — lead storage and notification delivery. Privacy policy: policies.google.com/privacy
• Cloudflare, Inc. — web request processing. Policy: cloudflare.com/privacypolicy
• Vercel, Inc. — website hosting. Policy: vercel.com/legal/privacy-policy
• Meta Platforms, Inc. (Meta Pixel) — advertising campaign measurement, activated only if you accept the site's cookie notice. Policy: facebook.com/privacy/policy

All of these platforms have their own data protection policies and operate under recognized international compliance frameworks.

Data Retention Period

Your data will be retained for as long as necessary to fulfill the purposes described, and in any case for a maximum of 3 years from the date of collection, unless you request earlier deletion or the law requires a different period.

Data of active clients with a current contract will be retained for the duration of the contract and up to 5 years after its termination, for tax and accounting obligations.

Security Measures

JSC Automations implements technical and organizational measures to protect your personal data, including:

• Authentication tokens between systems (Worker ↔ Apps Script)
• HTTPS encryption on all communications
• Restricted access to the leads database (authorized personnel only)
• Input sanitization and validation on forms
• No storage of passwords or credit card data

Use of Cookies and Tracking Technologies

We use the Meta Pixel (Meta Platforms, Inc.) to understand how visitors find this site and measure the effectiveness of our advertising campaigns. This pixel only activates if you give explicit consent via the cookie notice that appears when you enter the site. We store your choice together with the date and the version of this policy; if the policy changes, we ask you again.

You can change your choice at any time from “Cookie settings” at the bottom of every page. If you decline or withdraw consent, we delete this site’s _fbp cookie and the Pixel stops loading.

To count visits we use Cloudflare Web Analytics (Cloudflare, Inc.), which uses no cookies and stores nothing that identifies you: it only measures page views and load times in aggregate.

The site’s typefaces are served from our own server: the site makes no requests to Google Fonts or any other font provider.

If we implement additional analytics tools in the future (such as Google Analytics), this policy will be updated.

Supervisory Authority

In Colombia, the entity responsible for enforcing Ley 1581 de 2012 is the Superintendencia de Industria y Comercio (SIC) — Colombia's data protection authority. If you believe your rights have not been properly addressed, you may file a complaint with:

Changes to This Policy

JSC Automations reserves the right to update this policy when necessary due to regulatory, technological, or business changes. Any substantial modification will be announced via a visible notice on the website and, when possible, by email to registered data subjects.

The current version is always available at jscautomations.com/en/privacy.

Privacy Contact Channel

International Visitors

If you are located in the European Union, the General Data Protection Regulation (GDPR) grants you rights equivalent to the ARCOP rights described in this policy (access, rectification, deletion, objection, and portability), as well as the right to file a complaint with your country's data protection authority. If you are located in California (USA), the CCPA grants you similar rights over your personal data.

In either case, you can exercise your rights through the same contact channel described in the previous section — no separate form is needed. Your data is processed by Google LLC, Cloudflare Inc., and Vercel Inc. (section 6), platforms that maintain their own GDPR compliance mechanisms for international data transfers.