Privacy policy
Last updated: August 26, 2026
This policy explains what personal data we collect on crizz.io, what we use it for, and what you can ask us about it. It's written to be understood in one read — if anything isn't clear, write to us and we'll clarify it.
Who is responsible for your data
CRIZZ Global Solutions S.A.S., tax ID 901.101.172-0, based in Bogotá, Colombia, is the controller of the personal data collected on this site.
For anything related to this policy — including exercising your rights — the channel is info@crizz.io.
What data we collect
What you give us in the quote form, and nothing beyond that:
- Your name and the email address you want us to reply to.
- Your company name and the country you're writing from.
- A phone number, if you choose to leave one, and whether you allow us to reach you on WhatsApp at that number.
- Your project description, your sector, when you need it, and how you found us.
- Any files you attach, if you attach any.
- Any voice notes you choose to record in the quote form. Recording only happens while you keep it running, you can play it back and delete it before sending, and if you don't record one the microphone is never switched on.
What we use it for
To answer your request: understand what you need, put together a scope with a timeline and a price, and reach you through the channel you gave us. If you allowed WhatsApp, there too.
If you accepted analytics cookies, we also use browsing data — aggregated, without your name — to understand which parts of the site work and which don't.
We don't make automated decisions about you, and we don't profile you beyond what the paragraph above describes.
What we don't do
We don't sell, rent or trade personal data with anyone. What you write in the form is read by the CRIZZ team to answer you, and it doesn't leave that circle other than through the providers that keep the service running, listed below.
Who we share it with
We work with providers that process data on our behalf, each for a specific function:
- Vercel — site hosting. It handles the requests you make to the server.
- Cloudflare — anti-spam verification on the form (Turnstile).
- Google — usage analytics (Google Analytics 4). Only if you accept analytics cookies.
- PostHog — product analytics. Only if you accept analytics cookies.
- Meta — campaign measurement pixel. Only if you accept marketing cookies.
- Cal.com — the calendar used to book the call, if you choose to book one.
Where it's stored
Your request is stored in CRIZZ's internal portal, which only the team can access. The providers above run servers outside Colombia, mainly in the United States and Europe, so by submitting the form you accept that international transfer, made under the contractual safeguards each provider offers.
Cookies
The site loads no analytics or marketing cookies before you decide in the notice that appears when you arrive. Until then only the strictly necessary ones run — the ones that let the site render and let the form tell a person from a bot.
You can change your decision at any time from “Preferences” in that same notice, or by clearing the site's data in your browser: the notice comes back and you choose again.
How long we keep it
We keep the data from a request while the commercial conversation is alive and, if we end up working together, for the length of the relationship plus whatever Colombian law requires us to keep the records. If you ask us to delete it sooner, we delete it unless a legal obligation prevents us — and in that case we tell you which one.
Your rights
Colombian Law 1581 of 2012 gives you the right to know, update and correct your data; to request proof of the authorization you gave us; to be told how we've used it; to withdraw that authorization or ask for deletion when no legal duty requires us to keep it; and to file complaints with the Superintendency of Industry and Commerce.
To exercise any of them, an email to info@crizz.io is enough. We answer queries within ten business days and complaints within fifteen, which are the deadlines the law sets.
Changes to this policy
If what we do with the data changes, this document changes with it, and so does the date in the header. We don't email about every wording tweak, but a substantive change — a new provider, a new purpose — is announced on the site.