Privacy policy.

Data controller

Samuel Wilkie (Wilkie Devs), Cali, Colombia. Contact for any privacy matter: [email protected].

What data is processed and why

• Contact form: name, email, project type (optional) and message, together with the submission date. They are stored in a database on a self-managed server and forwarded by email to Samuel Wilkie to answer your request. The email also includes the language and page you wrote from and, when the network provides it, your approximate country. Your IP address is used only temporarily in server memory to limit abusive submissions; it is not stored in the database.
• Private client questionnaires (by invitation): name, role, company and answers. They are stored in the database to prepare the project proposal. Opening a questionnaire only records which form was opened and when, with no personal data.
• Facebook and Instagram ("wilkiedevs" app): when you comment on a post or send a message to the page or account, Meta sends that event to the server. The text is checked automatically only to detect a keyword requested in a post (for example, "Comment SKILL"); if present, an automatic reply with a link to the matching guide is sent. Only in that case are the comment or message id, the platform, the account id Meta assigns to you for the app and the date stored, to avoid replying twice and to limit how often replies are sent. The text of your comment or message is not stored.
• TikTok (Wilkie Devs publishing app): used only by Samuel Wilkie to publish his own videos to his own TikTok account. When it is authorized through TikTok Login Kit, the server stores the access token, the refresh token, the account id (open_id), the granted scopes (user.info.basic and video.publish) and their expiry dates. Before each post it reads the account display name, the available privacy options and the maximum allowed duration, without storing them. The app does not access data of other TikTok users and does not read comments, messages or followers.
• Web server logs: like any website, the server records each visit (IP address, date and time, requested page and browser) for security and error diagnosis.
• Data is not used for advertising, behavioral profiling or automated decisions that affect you, and it is not sold or shared with third parties other than those listed below.

Legal basis

Data is processed with your authorization, which you give by submitting the form or questionnaire, or by commenting or writing with the keyword, and only to handle the request you started, in accordance with Colombian Law 1581 of 2012 on personal data protection (habeas data).

Retention

• Facebook and Instagram events: deleted automatically after 30 days.
• Web server logs: deleted automatically after 14 days.
• TikTok tokens: kept while the authorization is active and deleted from the server when access is revoked (manual step); the refresh token expires after 365 days.
• Contact messages and questionnaire answers: not deleted automatically; kept while needed for the conversation or project and deleted when you request it.

Providers and third parties

• Self-managed server (VPS) hosting the website and the database.
• Resend: email delivery of contact form messages.
• Meta Platforms (Facebook and Instagram): the platform comments and messages come from and through which automatic replies are sent.
• TikTok: the platform where the own videos are published through its Content Posting API.
• These providers may process data outside Colombia under their own privacy policies.
• The website loads no analytics, pixels or third-party scripts; fonts are served from the site itself.

Cookies

• NEXT_LOCALE: remembers the language you picked in the selector (1 year). It is functional and identifies no one.
• panel_session: only for access to the private admin panel (12 hours). Visitors never receive it.
• No analytics or advertising cookies are used.

Your rights

You can access, update, correct and delete your data, revoke your authorization and ask how it is used by writing to [email protected]. Requests are handled within the terms set by Colombian Law 1581 of 2012. If you believe your request was not handled, you may contact the Superintendencia de Industria y Comercio (SIC), Colombia's data protection authority.

Data deletion

• Write to [email protected] with the subject "Data deletion".
• Include the email you used in the form or questionnaire and, for Facebook or Instagram, your username or profile.
• Contact messages, questionnaire answers and the related Meta event records will be deleted, and you will receive a confirmation by email.
• Facebook and Instagram event records are deleted automatically after 30 days even if you do not ask. You can delete your own Facebook or Instagram comments directly on the platform.
• TikTok: the app access is revoked from the TikTok account security settings, under app permissions; once revoked, the stored tokens stop working immediately and are then deleted from the server.

Changes to this policy

Any change will be published on this page with its update date.