Data controller
The controller is TECNOLOGIA MASTERWEB S.A.S., with NIT 900947569-8 and registered address at Cra. 64 No. 24-47, Bogotá D.C., postal code 111321, Colombia. You can contact us at [email protected] or at +57 601 773 2058.
This policy covers the data collected under its brands Masterweb Solutions, Masterweb IA and Thryp (its marketing system).
Data we collect
We collect the data you give us in the forms on the site:
- Name and email address.
- The description of your idea or project and the type of service you are looking for.
- The minimum technical data the site needs to work, such as the language you chose.
- Your authorization to process your data, with the date and time you give it when you send the form.
What we use it for
We use your data to:
- Generate and send you the preliminary quote.
- Answer your questions and contact you about your project.
- Improve the estimation model and the quality of the service, only with your authorization.
- With your authorization, contact you and send you commercial information. Thryp is Masterweb's marketing system. We only use your data through Thryp if you tick the optional commercial-information box, and you can withdraw that authorization at any time without affecting how your request is handled.
- Meet legal obligations.
- Recording training sessions, only when the client asks and each participant authorizes it beforehand; we hand the recording to the client and delete it from our systems after 30 days.
We do not sell your data or use it for third-party advertising.
Authorization and legal basis
We process your data with your prior, express and informed authorization, which you give by ticking the authorization checkbox and sending the form. Without it we do not process your data, except in the cases the law exempts (Article 10 of Law 1581 of 2012), such as information requested by an authority in the exercise of its functions or by court order, or data that is public by nature.
When you send the form we record your authorization, with the date and time, and keep it as evidence. You can ask us for a copy of that evidence at any time.
We improve the estimation model only with data we process under your authorization.
Retention
We keep your personal data until the data subject requests its deletion, unless there is a legal duty to keep it. The databases will remain in force for as long as TECNOLOGIA MASTERWEB S.A.S. carries out its corporate purpose.
Data stored in the hosting of a client's application is kept for the term of the contract.
Recordings of training sessions are deleted from our systems 30 days after they are delivered to the client.
Providers and processors
To provide the service we use processors: third parties that process data on our behalf and under our instructions.
These processors are, by category, providers of artificial intelligence models, cloud hosting and email; for messaging we use WhatsApp (Meta), which processes data under its own terms. We require our processors by contract to keep data confidential and secure.
We also use Cloudflare for network security and content delivery; it processes technical data, such as the IP address of whoever visits the site or the application.
International transmission and transfer
Some of our processors, such as cloud hosting providers, may store data outside Colombia. We transmit data to them under personal data transmission agreements (Article 26 of Decree 1377 of 2013).
We transfer data to other controllers abroad only if the country has an adequate level of data protection, or if you give us your express authorization to do so.
Data inside our clients' applications
When we build or host a client's application, the personal data that application processes is the client's responsibility: the client is the Controller and Masterweb acts as Processor, following the client's instructions.
For that work we may use AI and cloud providers as sub-processors, under contract and without using the data for their own purposes.
Sensitive data and minors
Sensitive data is data that affects your privacy or could lead to discrimination, such as health, ethnic origin, beliefs or biometric data. Answering questions about sensitive data is optional, and we do not need you to write it down: please do not include it in the free-text fields of the form.
This site is not directed at minors. If we receive a minor's data, we process it with respect for their prevailing rights.
Rights of the data subject
As the data subject (Article 8 of Law 1581 of 2012) you have the right to:
- Know, update and correct your data.
- Request proof of the authorization you gave us.
- Be informed, on request, of how we have used your data.
- File complaints with the Superintendency of Industry and Commerce (SIC) for violations of the law, once you have exhausted the inquiry or complaint process with us (Article 16).
- Revoke your authorization and/or request the deletion of your data, as long as there is no legal or contractual duty to keep it.
- Access your personal data free of charge.
Inquiries, complaints and person in charge of requests
Inquiries: we answer them within 10 business days of receiving them. If that is not possible, we tell you why and give you a new date, which will not be more than 5 additional business days (Article 14).
Complaints (to correct, update or delete data, revoke the authorization or report a breach): we handle them within 15 business days. If that is not possible, we tell you why and give you a new date, which will not be more than 8 additional business days (Article 15).
You can submit inquiries and complaints by writing to [email protected] or to Cra. 64 No. 24-47, Bogotá D.C. Include your name, what you are asking for and how we can reply.
The party responsible for handling these requests (Article 13 of Decree 1377 of 2013) is TECNOLOGIA MASTERWEB S.A.S., through its Support team, at [email protected].
Security and database registration
We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss or alteration.
We register our databases in the National Database Registry (RNBD) when the law requires us to.
Changes and contact
We may update this policy; the current version is the one published here, effective November 11, 2026 and in force until its next update. This policy is governed by the laws of the Republic of Colombia, in particular Law 1581 of 2012 and Decree 1377 of 2013; the data protection authority is the Superintendencia de Industria y Comercio.