Last updated · October 6, 2026
Privacy policy
How personal data is handled on josebedoya.co and in the software products I operate for other businesses.
1. Who is responsible
Jose David Bedoya Gomez, an individual software engineer based in Medellín, Antioquia, Colombia, is the data controller.
Contact for anything related to personal data: me@josebedoya.co.
2. What this policy covers
- This website, josebedoya.co.
- The software products I build and operate for other businesses: PropiumTech (residential property management), Savium (AI-assisted customer service agents) and Transappia (transport companies), including their integration with Meta's WhatsApp Business Platform.
3. What data I process and why
- Contact form: name, email, message and topics of interest, used only to reply to you.
- Private forms shared with clients by link: the answers you submit. They reach me by email and are used only for the project they belong to.
- Site analytics: Vercel Web Analytics and Speed Insights measure visits and performance in aggregate, without cookies and without identifying you.
- Scheduling: if you book a meeting, you do so on Cal.com, which handles that data under its own policy.
- Software products: the data each client business records or receives through its channels, such as name, phone number, email, the unit or relationship with the business, WhatsApp messages (text, voice notes and files) and data about the business's WhatsApp Business account (account and phone number identifiers, message templates and delivery statuses). It is used to provide that business the service it signed up for: receiving and answering messages, with AI assistance; transcribing voice notes; handling requests and bookings; and sending notifications.
4. My role in the software products
When a business uses my products, that business is the controller of the data of the people it serves, and I act as its processor: I process that data only on the business's behalf, under its instructions and to provide the service.
If you messaged a business that uses my products, you can exercise your rights with that business or directly with me, and I will coordinate the answer with it.
5. Data obtained from Meta platforms
- It is used only to provide the service to the business that connected its WhatsApp Business account.
- It is not sold or rented, not used for advertising or profiling, and not shared with third parties, except the providers in section 6 that are needed to operate the service.
- When a business disconnects its account or ends the service, I stop accessing its data and delete it, except data the law requires me to keep.
6. Service providers that process data on my behalf
These providers are used to run the site and the products, each under its business terms:
- Meta Platforms: WhatsApp Business Platform, through which messages are sent and received.
- Cloudflare: API hosting and file storage.
- Neon: PostgreSQL database.
- Vercel: hosting for the web applications and this site, site analytics, and routing of requests to AI models.
- Google: Gemini models, which process messages to prepare replies.
- OpenAI: voice note transcription.
- Inngest: background job execution.
- Resend: delivery of the emails sent by this site's forms.
7. International transfers
These providers store and process data on servers outside Colombia, mainly in the United States. By using this site or the products, data is transferred to those countries for the purposes described in this policy.
8. Security
Data is encrypted in transit (HTTPS). Each business's data is kept separate from every other business's, the signature of every message received from Meta is verified before it is processed, credentials are stored as secrets outside the code, and administrative access is restricted.
9. How long data is kept
Contact data, for as long as needed to reply and follow up on the conversation. Product data, for as long as the client business keeps the service, and afterwards only what the law requires, as described in section 5.
10. Your rights and how to exercise them
Under Colombian Law 1581 of 2012, you have the right to access, update and correct your data; to request proof of the consent you gave; to be told how your data has been used; to file complaints with the Superintendence of Industry and Commerce (SIC); to withdraw consent or request deletion when there is no legal duty to keep the data; and to access it free of charge.
To exercise these rights, or to request deletion of your data, email me@josebedoya.co with the subject “Personal data”, your name, how to reach you and what you are requesting. If your data reached a business that uses my products through WhatsApp, include your phone number and the business's name.
Inquiries and claims (correction, update or deletion) are answered within the time limits set by Colombian Law 1581 of 2012.
11. Minors
This site is not directed at minors. In the products, minors' data is processed only when the client business records it, for example the members of a household in a residential property, and always respecting their rights and best interests.
12. Requests from authorities
Data is disclosed to an authority only under a valid legal order. The request is checked for legitimacy, only the minimum required is disclosed, and, where the law allows, the business whose data is requested is notified.
13. Changes to this policy
If this policy changes, the new version is published on this page with its date. This version is effective as of October 6, 2026.