Personal data processing policy

The data controller (Responsable del Tratamiento) is Carlos Tello, an individual domiciled in Bogotá D.C., Colombia, who operates Askit (askit.site).

Email: hola@askit.site.

This policy applies to the personal data we collect on askit.site. Askit hasn’t launched yet: the site only has a free waitlist, with no accounts, payments or chat open to the public.

When you join the waitlist we store:

• Your name.
• Your email address, in lowercase. If you sign up twice with the same email, we keep a single entry.
• Your type of business, if you choose to give it: restaurant or café, online store, services or other.
• The language you signed up in: Spanish or English.
• The date and time you accepted this policy and the version you accepted.

We don’t ask for sensitive data.

Your IP address is not stored in our database. Our API only uses it in memory, for a short time, to limit repeated sign-ups from the same connection. Our hosting providers may record it in their technical logs for security.

By ticking the box in the form, you give us your prior, express and informed authorization to process your data under this policy. We store the date, time and version of the policy you accepted as proof of that authorization.

We collect, store, consult, use and, in the end, delete your data only to:

• Manage the waitlist.
• Send you a single email the day the Askit demo opens, in the language you signed up in.
• Produce aggregated, anonymous statistics on the types of business that signed up.
• Answer your queries, claims and requests about your data.

We don’t sell your data, we don’t share it with third parties for advertising and we won’t send you any other emails.

These providers process your data on our behalf, as data processors (Encargados del Tratamiento), and only to provide their service to us:

• Vercel, in the United States: hosts the website.
• Railway, in the United States: hosts the API that receives the form.
• Neon, in the United States: hosts the waitlist database.
• Resend, in the United States: sends the launch email.

This means your data is sent outside Colombia. By accepting this policy you authorize that transfer to the United States, a country that the Superintendence of Industry and Commerce (SIC) considers to have an adequate level of data protection (External Circular 005 of 2017).

We keep your data until we send the launch email and, after that, for at most six months to handle replies and requests. Then we delete it. If you ask us to delete it sooner, we do.

The waitlist database will remain in force while the waitlist exists and for that same period.

As the owner of your data (Titular), you have the right to (article 8 of Law 1581 of 2012):

• Know, update and correct your data.
• Ask for proof of the authorization you gave us.
• Be told, on request, how we have used your data.
• File complaints with the SIC for breaches of the law.
• Revoke your authorization or ask us to delete your data, when there is no legal or contractual duty to keep it.
• Access your data free of charge.

Queries and claims are handled by Carlos Tello, as data controller, at hola@askit.site. They can be made by you, your successors in title or your representative, who must prove that capacity.

In your message, include your name, the email you signed up with and what you are asking for. If it is a claim, describe the facts behind it and attach any documents you want to rely on. We may ask for more information to verify your identity.

• Queries (what data we hold and how we use it): we answer within 10 business days of receiving them. If we can’t, we’ll tell you why and when we will answer, no later than 5 more business days.
• Claims (to correct, update or delete data, revoke your authorization or report a breach of the law): we answer within 15 business days from the day after we receive them. If we can’t, we’ll tell you why and when we will answer, no later than 8 more business days.
• If a claim is incomplete, we’ll ask you for what is missing within 5 days of receiving it. If 2 months pass without you completing it, we’ll consider the claim withdrawn.
• While we resolve a complete claim, your data will be tagged “claim in progress” (reclamo en trámite).

Before filing a complaint with the Superintendence of Industry and Commerce, you must first have made your query or claim to us (articles 14, 15 and 16 of Law 1581 of 2012).

We use encrypted connections (HTTPS/TLS). Only the data controller has access to the database, and its credentials are kept secret. The website never connects to the database directly: only our API does.

Askit is not intended for people under 18, and we don’t knowingly collect their data. If you think a minor has signed up, write to us and we’ll delete their data.

When the demo and the Pro plan open, we’ll publish a new version of this policy before collecting any new data, such as account (Clerk), payment (Polar), document and conversation data.

We’ll publish any substantial change on this page before applying it. If the change affects the purpose you gave us your data for, we’ll ask for a new authorization.

This policy is in force from November 3, 2026.