Privacy policy

Who is responsible

The data controller is Charlie Herrera, an individual based in Bogotá, Colombia, who runs falcux.com and ai-first.falcux.com under the name Falcux.

For any privacy question or to exercise your rights, write to hey@falcux.com or call +57 315 058 6859.

What data I process

Depending on how you use the sites, I process these categories of data:

• Browsing statistics, only if you accept analytics cookies: pages visited, completed form submissions (topic or source only, without name, email or message), time on each page, referring site, device type, browser, language and approximate city-level location. Google Analytics does not log or store your IP address.
• Cookieless measurements when you do not accept: Google receives anonymous visit pings with no identifiers, which cannot recognize you across pages or visits.
• Emails and contact form: name, email, topic and message; company and referral source if shared. These do not subscribe you to the newsletter.
• Newsletter: email, language and source form. Beehiiv manages subscription confirmation and unsubscribe requests.
• Technical data from each request, such as IP address and browser, which the hosting provider processes to deliver the site and protect it from attacks.
• Your browser language and approximate country, which falcux.com uses when you open the home page to show it in Spanish or English. They are evaluated on the spot and never stored.

I do not process sensitive data, I do not ask for identity documents, and neither site has user accounts.

Cookies and local storage

Analytics cookies are only set if you press “Accept” on the notice. You can change your choice at any time from “Cookie preferences” at the bottom of every page. If you withdraw consent, the analytics cookies are deleted.

Each site keeps its own choice: accepting on falcux.com does not accept on ai-first.falcux.com, or the other way around.

Local storage never leaves your browser: neither I nor any third party reads it. The falcux_lang cookie is sent to the site, only to open the home page in the language you chose.

Why I use the data

• To understand which content is useful and improve the site, using aggregated statistics.
• To reply to your messages and, if you ask, tell you about my services.
• To send the newsletter when you subscribe and confirm your email. Every email includes an unsubscribe link.
• To keep the site available and secure. Turnstile verifies forms; frequency limits store hashed IP addresses and emails in Cloudflare KV for up to 6 hours.

Analytics relies on your consent, given when you accept the notice. Emails are processed because you send them and to handle what you ask for. Technical data, on the legitimate interest of keeping the site running and protected.

Who I share it with

Only with providers that deliver the service on my behalf and process data under my instructions:

• Google LLC (United States): Google Analytics 4, with advertising and personalization features turned off.
• Cloudflare, Inc. (United States): hosting of both sites, email forwarding, anti-spam verification and form frequency limits.
• Proton AG (Switzerland): the mailbox where I receive email.
• Resend (United States): delivery of contact messages and email confirmations.
• beehiiv (United States): newsletter management and delivery, subscription confirmations and unsubscribe requests.

These providers may process data outside Colombia. That is an international transfer, made with providers that offer adequate safeguards, such as standard contractual clauses. I do not sell, rent or hand over data to anyone else.

How long I keep it

• Google Analytics statistics: 14 months. They are then deleted automatically.
• Emails: as long as needed to handle your request and any relationship that follows. You can ask me to delete them sooner.
• Newsletter: while you remain subscribed. You can unsubscribe from any email or request deletion of your data.
• Your cookie choice: 12 months. After that, the notice asks you again.
• The language you chose: 1 year from the last time you changed it.

Your rights

Under Colombian Law 1581 of 2012, you have the right to:

• Know, update and correct your data.
• Request proof of the consent you gave.
• Be told how your data has been used.
• Withdraw consent and ask for your data to be deleted.
• Access your data free of charge.
• File complaints with the Superintendence of Industry and Commerce (SIC).

If you are in the European Union, the GDPR also gives you the rights to restriction of processing, portability and objection, and to lodge a complaint with your country’s data protection authority.

How to exercise them

Write to hey@falcux.com saying what you need and how to reach you. I may ask you to confirm your identity before handing over or deleting data.

Queries are answered within 10 business days and claims within 15 business days, as set by Law 1581. If I need more time, I will let you know before the deadline.

Minors

The site is aimed at adults and businesses. I do not knowingly process data from minors.

Changes to this policy

If this policy changes, I update the effective date. If the change affects what analytics measures, the cookie notice asks for your choice again.