---
canonical: https://gracialab.co/en/privacy
lang: en
title: "Personal Data Processing Policy · GLab"
description: "This policy explains what we collect when you bring us a challenge, how we use it, and how you can exercise your rights."
---

# Personal Data Processing Policy

This policy explains what we collect when you bring us a challenge, how we use it, and how you can exercise your rights.

## 1. Who is responsible for your data

GRACIALAB S.A.S., tax ID (NIT): 901.293.890-3. Registered location: Bogotá D.C.. Email: contacto@gracialab.com.co.

## 2. How we use it

We collect your name, role, work email, WhatsApp or mobile number, company, company size and the challenge you write. We record, store, consult and use them to assess your request and reply; your number, only to reply by WhatsApp or phone call. We keep the date and wording of your authorization, the version of this policy and a shortened network address to prevent abuse. We do not subscribe you to advertising. We do not ask for sensitive data or information about children. Vercel, Neon, Resend and Google Workspace provide hosting, database and email services as GLab’s processors; they may process data outside Colombia under personal data transmission agreements.

## 3. Your rights

You can access, update and correct your data, request proof of authorization, ask how we use it, and access it free of charge. You can ask for deletion or withdraw authorization where no legal or contractual duty requires retention. You can file a complaint with Colombia’s Superintendence of Industry and Commerce after first completing the procedure with GLab.

## 4. Who handles your requests

Gerencia general. Contact contacto@gracialab.com.co.

## 5. How to exercise your rights

Include your name, a way to reply, the details of your request and the right you wish to exercise. We verify your identity with no more information than needed. Access inquiries receive a reply within ten business days of receipt. If we need more time, we explain why and give a new date, no more than five additional business days. Complaints receive a reply within fifteen business days from the day after receipt, with an explained extension of up to eight business days. If a complaint is incomplete, we ask for the missing information within five days; it is considered withdrawn after two months without a reply. If another party should handle it, we forward it within two business days. A complete complaint is marked “complaint in progress” within two business days.

## 6. Effective date and retention

This policy takes effect on 2026-10-21. We retain requests for up to twelve months without a relationship with GLab, then delete the data unless a legal or contractual duty requires retention. The database exists while requests and retention duties remain active. A new purpose requires new authorization. We communicate material policy changes before they take effect.