Privacy policy

Agenxes is the independent consulting practice of Carlos Zuluaga and is the data controller for information collected through agenxes.com. This policy explains what is collected, why, and what you can ask to have done with it.

Information collected when you enquire

The enquiry form asks for your name, email, company, the area you need help with, a description of the problem, and a monthly investment range. A website and phone number are optional. Submitting the form also records which page you arrived from, the referring site, and any campaign parameters in the link, so it is clear which pages bring real enquiries.

This information is used to reply to you, assess whether the work is a fit, and prepare a proposal. The lawful basis is taking steps at your request before entering a contract, and legitimate interest in running the practice. It is not sold, rented, or used for unsolicited marketing.

Information collected when you use the site

• — Standard server and security logs, including IP address, kept briefly to prevent abuse and rate-limit form spam.
• — Basic, aggregated page analytics with no advertising profiles built from it.
• — Messages you type into the site chat assistant, so the conversation can be answered and, if you ask for a human, passed on as an enquiry.

Where your data is stored

Enquiries are stored in a managed Postgres database with access restricted to the practice owner account. The site chat sends your messages to a third-party AI model provider to generate a reply. Hosting, database, email, and AI providers may process data outside your country; appropriate contractual safeguards apply.

Client data during an engagement

During an engagement, access may be granted to your business systems and, through them, to personal data belonging to your customers or staff. For that data you are the controller and Agenxes is a processor: it is used only to perform the agreed work, never for any other purpose, and access is scoped to what the work needs and revoked at handover. A separate data processing agreement can be signed on request.

How long data is kept

• — Enquiries that do not become engagements: up to 24 months, then deleted.
• — Client records and correspondence: for the engagement and for as long as tax and legal record-keeping requires.
• — Server and security logs: a short rolling window.

Cookies

The site uses only what it needs to function and to measure page performance in aggregate. No advertising pixels or cross-site tracking are installed. If that changes, a consent banner will be added before any such tag is set.

Your rights

Depending on where you live, you may have the right to access the data held about you, correct it, have it deleted, restrict or object to its use, or receive a copy in a portable format. Requests are handled within 30 days, free of charge.

To make a request, send it through the enquiry form or reply to any email you have received from Agenxes.

Security

Enquiry records are protected by database access rules that restrict reading to a single authenticated owner account. Credentials for client systems are held in a password manager and returned or revoked at the end of an engagement. No system is perfectly secure, but if a breach affects your data you will be told promptly.

Children

The site is intended for business use and is not directed at anyone under 16. Personal data is not knowingly collected from children.

Changes

This policy may be updated. The date at the top shows when it last changed, and material changes affecting active clients are communicated directly.