Personal data processing policy

1. Data controller

Controller

Jhon Narváez Estrada, who operates WeldSketch under the trade name JNTECH

ID (C.C. / NIT)

C.C. 1015451332

Address

Bogotá D.C., Colombia

Email for personal data

[email protected]

Phone

+57 302 570 4640

Website

jntech.cloud

2. Data we process

• Account data: your name, email address and the name of your organization or company. We do not store your password, only a protected fingerprint that cannot be reversed.
• Security data: your second-factor configuration (encrypted), your passkeys (public part only), your open sessions and the devices you sign in from.
• Your work: the drawings, templates and files you create or import. They belong to your organization. JNTECH staff do not see their content, only control data such as the drawing name, process, position and dates.
• Payment data: the plan, amount, reference and status of each payment, and the method used (for example card or PSE). We never receive or store card numbers or bank credentials: payment happens on the Wompi platform.
• Activity log: what actions are taken in your account and organization, the date, IP address and browser or device type (see section 4).
• Emails we send you: subject, recipient and delivery status.

We do not process sensitive data or data of children or adolescents. The service is intended for adults and businesses.

3. Why we use your data

1. To create and manage your account and organization, verify your email and let you sign in.
2. To provide the service: store your drawings, share them with your team according to the roles you assign and export them when you have an active plan.
3. To charge for and manage plans, reconcile payments with Wompi and issue the corresponding records.
4. To protect accounts and the service: detect unauthorized access, fraud or abuse, warn you about sign-ins from new devices and handle incidents.
5. To send you emails needed for the service: verification, security, invitations, payments and changes to these terms.
6. To answer your support requests and improve the service with aggregated usage statistics.
7. To meet legal, accounting and tax obligations and respond to requests from competent authorities.

We do not sell your data or use it for third-party advertising. To send you marketing messages we will ask for separate consent, which you can withdraw at any time.

Contact form («Let's talk»). If you leave your name, email, company, phone and interest in the site's form and give us your express authorization, we record them in JNTECH's customer relationship management system (CRM) to reply to you, show you the product and send you commercial information about WeldSketch. We keep them while there is a commercial relationship or up to 2 years from the last contact, and you can ask us to delete them at any time by writing to [email protected].

4. Activity log and security

To protect your account and be able to resolve any issue, the service keeps an activity log with:

• Events: account creation and email confirmation, sign-ins and sign-outs, failed sign-in attempts, changes of password, email or second factor, creation, change, export and deletion of drawings and templates, invitations and role changes, plan changes and payments, and actions by JNTECH staff on accounts.
• Server requests: every change, every rejected request and every lookup by support staff. The operation, result and time are stored, never the content of your drawings or passwords.

Each record stores the date and time, IP address, browser and device type, and the related account and organization. Owners and administrators of your organization can see their organization's activity. JNTECH staff consult it only for support, security, payment reconciliation and legal compliance, and every staff lookup is itself logged. The log cannot be modified, so it serves as reliable evidence if there is an incident or dispute.

Usage statistics. We count visits to the site without cookies or third-party services: we store the page, the referring site, the campaign (if the link carries one), the approximate country and the device and browser type. We do not store the IP address of those visits; we use a code that changes every day and cannot be used to follow a person. Your browser remembers (in its local storage, not in a cookie) where you came from the first time; if you create an account, that origin is saved with it. In the application we measure daily usage time (first and last activity) to improve the service. If your browser has «Do Not Track» turned on, we do not count your visits. Visits are deleted after 400 days and usage time after 2 years.

5. How long we keep your data

When the period ends, the data is deleted automatically. Backup copies are kept for at most 14 days.

6. Providers and international transfers

We use providers that process data on our behalf, only for the purposes in this policy and under confidentiality and security obligations:

• Hetzner Online GmbH (Germany): servers hosting the application and the database.
• Cloudflare, Inc. (United States and global network): site delivery and attack protection.
• Resend (United States): delivery of the service emails.
• Wompi (Bancolombia, Colombia): payment processing.

Some of these providers are outside Colombia, so your data may be stored or transmitted in other countries. We do this to provide the service you request, with providers that apply adequate protection standards. By accepting this policy you authorize that transmission. Otherwise we only hand over data to authorities that legally require it.

7. Cookies

We only use strictly necessary cookies: one to keep your session and another to recognize a trusted device and warn you if a new one signs in. We do not use advertising or third-party analytics cookies. In the browser's local storage (not a cookie) we keep where you came from the first time and whether you have already seen or answered the contact form, so we do not show it again.

8. Your rights

As the data subject you can:

• Access, update and correct your data.
• Request proof of the consent you gave us.
• Be informed of how your data has been used.
• Revoke your consent or ask us to delete your data, when there is no legal or contractual duty to keep it.
• Access your data free of charge.
• File complaints with the Superintendence of Industry and Commerce (SIC) of Colombia after first raising your request or claim with us.

You can change your name, email, password and second factor, and close your account, directly in My account. There you can also see your open sessions and your security activity.

9. How to exercise your rights

Write to [email protected] from your account email. Include your name, what you are requesting and, for a claim, the facts and any documents you wish to provide. If you do not write from your account email, we may ask you to confirm your identity.

• Inquiries: we answer within 10 business days. If we need more time we will tell you why and answer within 5 additional business days.
• Claims (correction, update, deletion or non-compliance): we answer within 15 business days, extendable by 8 more business days with notice. If the claim is incomplete, we will ask you to complete it within 5 days. If 2 months pass without a reply, we will consider the claim withdrawn.

10. Security

We protect your data with encrypted connections (HTTPS), passwords stored with attack-resistant algorithms, two-step verification and passkeys, encrypted secrets, strict isolation between organizations, limits on repeated attempts and the activity log described above. Platform staff can only sign in with two-step verification. If an incident affects your data, we will inform you and report it to the authority as required by law.

11. Changes to this policy

If we change this policy in a material way, we will notify you by email or within the service before the change takes effect. If the change affects the purposes, we will ask for new consent. The current version will always be on this page.