<VALU.AGENCY/>
Services
Web design WooCommerce stores Custom development Maintenance & support Digital consulting WhatsApp store
About Portfolio Contact
ESEN
Get a quote
Home/Privacy policy

Privacy policy

Last updated: 2026-10-19

This page describes what personal data this site collects, what it is used for and how to ask for it to be corrected or deleted. It is written from the code that is actually published, not from a template: if the site does not do something, it is not claimed here.

  1. Who is responsible for your data
  2. What data is collected, and only when you provide it
  3. The AI assistant: where what you write goes
  4. What the data is used for
  5. Who else sees it (and why)
  6. Cookies and analytics
  7. How long it is kept
  8. Your rights, and how to exercise them
  9. How it is protected
  10. Minors
  11. Changes to this policy

Who is responsible for your data

Valuagency, a web development agency based in Medellín, Colombia, registered as a sole proprietor with the Cámara de Comercio Aburrá Sur.

For anything related to your data — including asking us to delete it — write to hola@valu.agency. A person reads it, not an automated form.

What data is collected, and only when you provide it

The site has no sign-up and no user accounts. You can read all of it without providing a single piece of data. Data is only collected in these three cases:

  • When you submit the contact form or leave your details in the assistant. We store your name, the contact method you type (email or phone), your WhatsApp number if you add it — it is optional — and the description of what you need, plus the page language and which form it came from. That is all that is stored: your IP address is not recorded alongside your message.
  • When you talk to the AI assistant. The text you write is sent in order to compose the reply (see the next section). The conversation is not stored in any database: it lives in your browser while the tab is open. The only thing saved is the summary you yourself confirm if you choose to leave your details.
  • When you email us or write on WhatsApp. Whatever you send stays in that inbox.

In addition, so that a script cannot flood the forms, each request is counted per IP address for a few minutes. That count lives in the server's memory and is discarded on its own; it is not written to disk and is not linked to your message.

The AI assistant: where what you write goes

The assistant's replies are composed by a language model: Claude Haiku 4.5, by Anthropic, reached through Vercel's AI gateway. To generate each reply, your message and the earlier ones in that same conversation are sent to it.

Two things worth knowing: the assistant has no access to the database or to other people's conversations, and on our side the conversation is not stored. Even so, it is a third-party service, so do not type passwords, card details or ID documents into the chat — none of that is ever needed for a quote.

What the data is used for

  • Replying to you and preparing a quote.
  • Delivering the service if you decide to hire us, and talking to you while it lasts.
  • Understanding which pages are visited, in aggregate and anonymously (see Cookies and analytics).

They are not used for anything else. They are not sold, not rented, not handed to third parties for advertising, and you are not added to any mailing list for having written: if there ever is one, you will have to ask for it on purpose.

Who else sees it (and why)

The site has no servers of its own: it relies on providers that process data on our behalf and only for what is needed. These, and no others:

  • Vercel — hosting for the site and its functions, plus aggregate analytics.
  • Neon — the database where contact messages are stored.
  • Resend — sends the internal notification when somebody writes, so no message is lost.
  • Vercel AI Gateway and Anthropic — generate the assistant's replies.
  • ImprovMX and Google (Gmail) — receive mail sent to hola@valu.agency.
  • WhatsApp (Meta) — only if you are the one starting a conversation there.

Several of these providers' servers are in the United States, so writing to us transfers your data outside Colombia. You are told here because Colombian law requires it.

Cookies and analytics

This site uses no tracking cookies, neither first- nor third-party, and there is no advertising profile behind it. Analytics is Vercel's, which counts visits in aggregate — pages, country, device type — with no cookies and without identifying you.

Two things are stored in your own browser. They travel nowhere and you can remove them by clearing the site's data:

  • valuagency-cookies, so the notice you already accepted is not shown again.
  • va-loader-visto, so the intro animation is not replayed on every page.

The advertising tracking code (Google Ads) is present in the site but switched off: it carries a placeholder identifier and loads nothing. If it is ever turned on, your consent will be requested before it loads, and this page will be updated to say so.

How long it is kept

Contact messages are kept while they still make sense: to reply to you, to pick up a conversation that stalled, or for as long as the work you hire us for lasts. There is no automatic deadline, because a quote can come back to life months later.

If you want it gone sooner, ask at hola@valu.agency and it is deleted.

Your rights, and how to exercise them

Under Colombia's Ley 1581 de 2012 and Decreto 1377 de 2013, you may know what data of yours we hold, update it, correct it, ask for it to be deleted, and withdraw the authorization you gave by writing to us.

All of them are exercised in the same place: an email to hola@valu.agency saying what you want. No form, no need to justify why. The statutory deadlines are 10 business days for a query and 15 business days for a complaint, extendable if necessary, in which case you would be told.

If you believe it was not handled properly, you can go to the Superintendencia de Industria y Comercio, Colombia's data protection authority.

If you write from the European Union, the United Kingdom or another country with its own rules, you can exercise those same rights through the same channel: the procedure does not change.

How it is protected

  • The whole site runs over enforced HTTPS (HSTS), so nothing travels in the clear.
  • The functions that receive data cap the size of the submission and how many are accepted per IP, so a script cannot abuse them.
  • Database access is restricted and its credentials do not live in the published code.
  • The browser works under a strict Content Security Policy, which prevents third-party code from being injected into the page.

No system is infallible. If an incident ever affected your data, you would be told through the contact details you gave us.

Minors

This site offers services to companies and professionals: it is not aimed at minors and their data is not knowingly collected. If you believe a minor wrote to us, let us know at hola@valu.agency and we will delete it.

Changes to this policy

If what the site does with data changes, this page changes, and the date at the top says so. The version published today is from 2026-10-19. Minor changes are not announced by email; an important one would be.

Back to home
<VALU.AGENCY/> Medellín, Colombia