Privacy policy

• Account data: name, email, firm or office, and the name and email Google confirms to us if you sign in with that option.
• Professional data to verify you are a lawyer: tarjeta profesional and identity document.
• Usage data: sign-ins, actions taken and audit logs.
• Billing data, if you buy: the name or company name, the document type and number, the email, the address and the phone number on the electronic invoice, and the Nequi number if you register it for automatic payment. Your card details never reach Notificado: the payment gateway receives them directly.

For each notification we process the recipient's name and electronic address and the delivery events: mail server response, IP address, browser and download or acknowledgement times. We process them on behalf of the sending lawyer, who is the controller of that data.

To provide the service, produce and keep the evidence, invoice, meet legal obligations and protect the security of the system. Only if you authorise it in the cookie notice, also to measure, in aggregate, how the public site is used. We do not sell personal data or use it for third-party advertising.

Notification evidence is kept for at least 10 years from when it is created, in immutable storage. The documents we use to verify you are a lawyer (identity document, tarjeta profesional and constancia de vigencia) are kept while the account is active and, afterwards, for as long as evidence of notifications you sent is kept, because they back the identification of the sender. Other data, while the account is active and for the periods the law requires. A file sent by download link is kept for 10 years from the send and then deleted, after notice to the firm; its SHA-256 fingerprint remains in the notification's evidence.

Encryption in transit and at rest, strict isolation between accounts, least privilege and an audit log of who viewed or downloaded what.

You can access, update, correct and request deletion of your data, and revoke your authorisation, under Ley 1581 de 2012. Deletion does not reach the evidence of notifications already sent while it must be kept. The procedure is in the personal data processing policy. Controller: VENOMTECH S.A.S., NIT 901.991.367-7; email privacidad@notificado.co.

Some service emails we send you (welcome, getting-started guides, trial notices and verification decisions) include a tracking image and links to notificado.co that go through our server. This tells us whether they were opened and which link was used, so we can improve those messages. We keep only the email's name, the time and a salted fingerprint (hash) of the IP address and of the browser type; never your email address, and we delete it after 13 months. Sign-in emails (sign-in link, password reset, email verification, two-factor) and answers to personal-data requests are never tracked, and links to other sites are left untouched. If you do not want us to measure these emails, write to privacidad@notificado.co and we will stop doing so for your account.

When a notification's recipient opens the notification page from the email's link, we record the first visit of each day (Colombia time) with its IP address and browser, as a complementary indication in that notification's evidence. An email security scanner can open that link too, so it never proves reading.

If you accept analytics in the cookie notice, the public site loads Google Analytics 4. It never loads in the panel, on sign-in, on registration, on notification pages or on /verificar. We process a random browser identifier, the pages viewed, the referring page, the device and browser type, and an approximate location derived from the IP address, for one purpose only: to measure, in aggregate, how the site is used and improve its content. We do not use it for advertising: Google signals and ad personalisation are turned off.

Google LLC processes this data as a processor, on behalf of VENOMTECH S.A.S., on servers in the United States and other countries. This is an international transmission of personal data, which you authorise by accepting. You can withdraw your permission at any time from Cookie preferences, at the foot of every page, and exercise your rights as set out in the Your rights section. Each cookie and how long it lasts is listed in the cookie notice.

On the sign-in, registration, constancia verification and personal data request pages we use hCaptcha, from Intuition Machines, Inc. (United States), to tell people from automated programs apart. When those pages show the check, hCaptcha receives your IP address and signals from your browser and device, and processes them as a processor, on behalf of VENOMTECH S.A.S.; this is an international transmission of data. We use it only to protect those forms from abuse, never for advertising or analytics.

If you choose to sign in with Google, Google LLC confirms your name and email address to us, and we use them only to create your account and sign you in. Google also processes that data under its own policy, as the provider of your Google account.

The full list of providers, with their country and role, is in the data processing policy.