Privacy at Rischio.io: use and protection of personal data

Last updated: 2025-08-09

Rischio SAS, identified with NIT 901787239-9 and address in Bogotá, Colombia, is responsible for the processing of personal data that it collects through its websites and associated services. This Privacy Policy explains how we collect, use, store and protect our users’ information, in accordance with Law 1581 of 2012, Decree 1377 of 2013 and other applicable Colombian regulations.

1. Contact information for the responsible party

  • Company name: Rischio SAS
  • NIT: 901787239-9
  • Address: Bogotá, Colombia
  • Email for requests: hello@rischio.io
  • Legal representative and data controller: Andrés Gracia, Founder
  • Physical address: Available upon written request to hello@rischio.io
  • Sites and domains covered: rischio.io and all its subdomains

2. Personal data we collect

We collect the following data directly from the data subjects:

  • Full name
  • Email
  • Date of birth (day and month)
  • Education Level
  • City of Residence
  • Team Size
  • Position in the company

We do not collect sensitive data as defined by Colombian law.
We do not deliberately collect data from minors, but, given the academic/scientific nature of the platform, this data may be recorded. In that case, your information will be processed in accordance with this policy.

3. Purpose of processing

We use personal data to:

  • Creation and management of user accounts
  • Provision and improvement of services
  • Billing and compliance with contractual obligations
  • Sending newsletters and informational communications
  • Personalized marketing and advertising activities
  • Usage analysis and metrics generation
  • Technical support management
  • Compliance with legal obligations
  • Other purposes necessary for the operation and security of the platform

Profiling is carried out to segment the product and content offering according to the characteristics of the users.
The use of data for marketing always includes the option to unsubscribe via a link in each communication.

4. Sharing with third parties

We may share personal data with third parties acting as data processors for the provision of services (e.g., technology platforms, billing, payments and communications).
These third parties may be located outside of Colombia, and guarantee adequate levels of data protection, in accordance with current regulations.

5. Information storage and security

  • The data is stored on cloud computing services provided by third parties.
  • The servers may be located outside of Colombia.
  • We retain data while the account is active and, once cancelled, for an additional period of 12 months for legal or dispute resolution purposes.
  • We implement digital security measures, including strong passwords, two-step authentication, encryption in transit (TLS), access control, backups, and activity logs.

6. Rights of the holders

According to Colombian law, you can:

  • To know, update and correct your personal data
  • Request proof of the authorization granted
  • To be informed about the use that has been made of your data
  • File complaints with the Superintendency of Industry and Commerce (SIC)
  • Revoke authorization and/or request the deletion of your data, unless there is a legal or contractual obligation to retain them.

7. Procedure for exercising rights

  • Some data can be updated directly on the platform.
  • To exercise other rights, send your request to hello@rischio.io or use the form available on our website.
  • The physical address for sending postal communications may be requested in writing via the above email.
  • The process is free, except for the costs of physical reproduction.
  • We will respond within the timeframes established by Colombian law:
    • Inquiries: up to 15 business days
    • Claims: up to 10 business days

8. Cookies and similar technologies

Our site uses strictly necessary and analytics cookies for the operation and measurement of platform usage.
We use Umami Analytics, which collects information in an anonymized manner.
We do not use third-party advertising tracking cookies.

Although we accept users from any country, data processing is governed by Colombian law.
The location for data processing is Colombia.

10. Updates to this policy

We may modify this policy at any time.
Changes will be notified by email to users registered on our mailing list and will be published on our website.
The policy will be considered valid from its publication until it is amended.

11. Contact

For questions, comments, or requests regarding this Privacy Policy, you can write to us at: