Zuvel · Data protection
Privacy policy
Last updated:
This policy explains how Zuvel processes the personal data of people who visit its website, contact us or interact with businesses that use AI Workers. It is issued under Colombian Law 1581 of 2012 and Decree 1074 of 2015.
This English version is provided for convenience. In case of any discrepancy, the Spanish version prevails.
1. Controller and contact
Zuvel® is the registered trademark under which ASTERIK S.A.S. operates. ASTERIK S.A.S. is the company responsible for the processing described in this policy.
- Legal name
- ASTERIK S.A.S.
- Tax ID (NIT)
- 902.099.692-4
- Registered office
- Bogotá D.C., Colombia
- Address
- Calle 98 n.º 68-63, Bogotá D.C.
- Privacy email
- [email protected]
- Phone
- +57 312 400 9568
- Request handling
- Zuvel administration, through the privacy email
2. Scope of this policy
It applies to people who visit zuvel.ai or request information and, under the terms of the AI Workers section, to data processed on behalf of client businesses. Personal data is information that identifies or can be linked to a person; processing it includes receiving, consulting, using, storing, sharing it where appropriate and deleting it.
This policy is supplemented by the terms of each service and the privacy notice of the business you interact with. It does not replace the authorizations needed to process its users' data. Lead Engine, Hexis and other solutions require terms specific to their operation.
3. Data we process
- Contact: name, email, the content of your inquiry and any company or project information you choose to include.
- Correspondence: messages you send and replies related to your request, once you confirm sending them by email or WhatsApp.
- Technical data: connection IP address, date and time, requested resource, browser, server response and performance data that may be processed when delivering and protecting the website.
The website does not ask for identity documents, payment details or credentials to send an inquiry. Avoid including sensitive information, passwords, confidential files or third-party data without a valid basis for sharing it.
4. Purposes and authorization
We use contact data to answer questions, understand the need described, prepare a requested proposal and follow up on that conversation. Technical data is used to deliver the page, diagnose failures, measure performance and prevent abuse. We also handle privacy requests and legally valid demands.
We request prior, informed authorization where required. When you write to us on your own initiative, we use your data only to handle your request: this does not include a subscription to campaigns, the sale of your data or authorization to train AI models. Any other purpose that requires consent must be disclosed and authorized separately. Visiting this page does not mean accepting every possible processing activity.
5. How to write to us
The website has no forms and does not store contact data. You can write to us at [email protected] or on WhatsApp using the buttons on the site; you decide what information you send.
By writing to us on your own initiative, you authorize the use of your data to respond to and follow up on your request, under this policy. Messages and replies are stored in the parties' email or WhatsApp systems.
6. Information in AI Workers
AI Workers helps client businesses organize and handle their interactions on connected channels, including WhatsApp. To provide this service, Zuvel processes, on behalf of each business, the information needed for its operation, contact details and the content of those communications, in order to understand requests, prepare replies and carry out the agreed actions.
In this context, the client business determines the purposes and acts as the data controller; Zuvel acts as the data processor, following its instructions and the contracted scope. The business must inform its users and have the appropriate authorizations or legal bases. Access to, use and retention of the information must be limited to what is necessary to provide the service.
The terms of each implementation must specify the providers involved, the protection measures, any processing outside Colombia and the retention, return or deletion periods. Use of an integrated channel is also subject to its provider's terms.
If your request concerns an interaction with one of these businesses, please address it to that business. You can also write to [email protected] so we can guide you or forward your request to the controller.
8. Providers and external services
The hosting infrastructure and Cloudflare are involved in publishing and protecting the website; email and WhatsApp providers are involved in sending and receiving inquiries. A provider's access to data must be limited to the purpose of its service and to the applicable confidentiality and protection terms.
These services may process information outside Colombia. A transmission to a provider acting on our behalf and a transfer to another controller require the conditions set out in Colombian law; they are not a general authorization to share information with any third party. You can ask about the recipients of your data at [email protected].
External links have their own terms. The animation on the home page is an illustrative example: it is not a chat and does not send your inquiries to an AI model. You can also write to us on WhatsApp at +57 312 400 9568: when you use that channel, your number, profile name and the messages you send are processed for the purposes of this policy, and WhatsApp processes them under its own terms. If other channels or integrations are enabled, their processing will be disclosed before they are used.
9. Retention and security
Inquiries are handled by email or WhatsApp. They are kept only as long as needed to respond and maintain active follow-up. If a contractual relationship is formalized, the necessary information is kept for the duration of that relationship and the periods required for legal obligations or handling claims. Contacting us does not by itself lead to indefinite retention; you can request deletion when there is no obligation to keep the data. Once these purposes and obligations are fulfilled, the data must be deleted or anonymized.
Web server logs are rotated daily and the configuration keeps up to fourteen rotated files in addition to the active file. This cycle does not describe the retention of emails, backups or external providers' data, which depends on their purpose and configuration.
The website uses HTTPS. Data protection requires technical, administrative and human measures suited to its use, including limited access and permission reviews. No internet service is free of risk; do not send secret information by email or WhatsApp. You can report a possible incident to the privacy email.
10. Your rights
You can access your data free of charge, correct and update it, and ask for information about its use and proof of your authorization. You can also request its deletion or revoke your permission, subject to applicable retention duties. If your request is not resolved, you can turn to Colombia's Superintendence of Industry and Commerce (SIC) after completing the process with the controller.
11. Inquiries and complaints
Write to [email protected] stating your name, what you are requesting and where we should reply. If you act on behalf of another person, provide proof of that representation. We will verify identity proportionately; do not attach a copy of your ID or unnecessary information up front. You can also use the controller's address or phone number for guidance.
- Inquiries: answered within ten business days of receipt. A justified extension, communicated together with its response date, will not exceed five additional business days.
- Complaints: answered within fifteen business days from the day after receipt; an informed and justified extension of up to eight business days.
- If information is missing, it will be requested within five days. If there is no reply within two months of that request, the complaint will be considered withdrawn.
- A complete complaint will be marked as pending within two business days at most. If it concerns another controller, it will be forwarded within that period and you will be informed.
Reference: articles 14 to 16 of Law 1581 of 2012 (in Spanish).
12. Sensitive data and minors
This website is intended for people looking for business solutions. It does not request sensitive data and is not designed to collect data from minors. Providing sensitive data is not a condition for receiving information. If you notice that data about a minor or unnecessary sensitive information was sent to us, let us know so we can review its processing and the appropriate deletion.
13. Effective date and updates
This policy takes effect on September 7, 2026 and remains applicable until replaced. Data files will exist as long as the purposes and retention obligations described remain. We will publish the date of each update and give prior notice of substantial changes; a new purpose that requires it will have a specific authorization.
Reference framework: Decree 1074 of 2015, chapter on personal data protection (in Spanish).