Privacy Policy and Personal Data Processing

Last updated: October 20, 2025

1. Data Controller

In accordance with applicable data protection laws, the data controller is:

• Business Name: Jhon Arlex Ocampo Cifuentes
• Tax ID: 1112482910
• Address: Calle 60B 108 41, Colombia
• Email: jhon.ocampo123@gmail.com
• Phone: +57 317 413 8541

2. Introduction

Factugo is committed to protecting your privacy and complying with applicable data protection legislation. This Privacy Policy explains how we collect, use, store, disclose, and protect your personal information when you use our web platform and mobile applications.

3. Personal Data We Collect

We may collect the following categories of personal data:

• Identification Data: Full name, ID number, email address, phone number.
• Registration Data: Username, password (encrypted).
• Receipt and Invoice Data: Images of documents you upload, data extracted via OCR (merchant, date, amount, category, products).
• Payment Data: Information necessary to process payments (processed by our partner Wompi, who has their own privacy policy).
• Usage and Technical Data: IP address, browser type, operating system, pages visited, browsing time, system errors.
• Cookies and Similar Technologies: Information collected through session cookies, Google Analytics, and error tracking tools.

4. Purposes of Personal Data Processing

Your personal data will be used for the following purposes:

• Create, manage, and maintain your user account.
• Process and digitize receipts using OCR technology.
• Generate expense analysis, reports, and personalized statistics.
• Process subscription payments through our payment processor Wompi.
• Send administrative notifications, account confirmations, security alerts, and technical support.
• Improve the functionality, efficiency, and security of the platform.
• Comply with legal and regulatory obligations.
• Perform aggregate and anonymous statistical analysis to improve our services.

5. Rights of Data Subjects

Under applicable data protection laws, you have the following rights:

• Access, update, and rectify your personal data.
• Request proof of authorization granted for data processing.
• Be informed about the use of your personal data.
• File complaints with the relevant data protection authority for violations of the law.
• Revoke authorization and/or request deletion of your data when there is no legal or contractual obligation preventing it.
• Access free of charge your personal data that has been processed.

To exercise these rights, contact us at: jhon.ocampo123@gmail.com or WhatsApp +57 317 413 8541.

6. Data Transfer and Transmission

Your personal data may be shared with third parties in the following circumstances:

• Payment Processors: Wompi to process payment transactions.
• Service Providers: Hosting companies in the United States that store our servers.
• Analytics Tools: Google Analytics for platform usage analysis.
• Legal Obligations: Judicial or administrative authorities when required by law.

Third parties that process data on our behalf are contractually obligated to protect your information according to appropriate security standards.

7. Data Storage and Location

Your personal data is stored on servers located in the United States. We take reasonable measures to ensure your data is treated securely and in accordance with this Privacy Policy.

8. Data Retention Period

We retain your personal data for as long as you maintain an active account with us. If you close your account, your data will be deleted after 30 days, unless there is a legal obligation to retain it for a longer period.

9. Information Security

We implement administrative, technical, and physical security measures to protect your personal data against unauthorized access, loss, alteration, or disclosure. These measures include:

• Data encryption in transit and at rest.
• Role-based access controls.
• Continuous security monitoring and anomaly detection.
• Regular backups.

However, no security system is completely infallible. We cannot guarantee absolute security of your data.

10. Minors

Our services are not directed at minors under 18 years of age. We do not intentionally collect personal data from minors. If you become aware that a minor has provided personal information, contact us immediately to delete it.

11. Cookies and Similar Technologies

We use cookies and similar technologies. For more information, see our Cookie Policy.

12. Changes to this Policy

We reserve the right to modify this Privacy Policy at any time. Changes will take effect immediately after publication on this website. We will notify you of significant changes via email or notice on the platform.

13. Contact

If you have questions, comments, or wish to exercise your rights regarding your personal data, contact us:

• Email: jhon.ocampo123@gmail.com
• WhatsApp: +57 317 413 8541
• Address: Calle 60B 108 41, Colombia

14. Supervisory Authority

If you believe the processing of your personal data violates current regulations, you may file a complaint with your local data protection authority.