Privacy Policy of Rischio.io: use and protection of data


Last updated: 2025-08-09

Rischio SAS, identified with Tax ID 901787239-9 and headquartered in Bogotá, Colombia, is responsible for processing the personal data collected through its websites and associated services. This Privacy Policy explains how we collect, use, store, and protect user information, in compliance with Colombian Law 1581 of 2012, Decree 1377 of 2013, and other applicable Colombian regulations.


1. Data Controller Contact Information

  • Legal name: Rischio SAS
  • Tax ID: 901787239-9
  • Location: Bogotá, Colombia
  • Email for data requests: hello@rischio.io
  • Legal representative and data protection officer: Andrés Gracia, Founder
  • Physical address: Available upon written request to hello@rischio.io
  • Domains covered: rischio.io and all its subdomains

2. Personal Data We Collect

We collect the following data directly from data subjects:

  • Full name
  • Email address
  • Date of birth (day and month)
  • Educational level
  • City of residence
  • Team size
  • Job title

We do not collect sensitive personal data as defined by Colombian law.
We do not intentionally collect data from minors, but due to the academic/scientific nature of the platform, they may register. In such cases, their information will be processed in accordance with this policy.


3. Purposes of Data Processing

We use personal data for the following purposes:

  • Account creation and management
  • Provision and improvement of services
  • Billing and compliance with contractual obligations
  • Sending newsletters and informational communications
  • Marketing activities and personalized advertising
  • Usage analysis and metrics generation
  • Technical support management
  • Compliance with legal obligations
  • Other purposes necessary for the operation and security of the platform

We perform profiling to segment product and content offerings according to user characteristics.
Marketing communications always include an unsubscribe link.


4. Sharing with Third Parties

We may share personal data with third parties acting as data processors to provide services (e.g., technology platforms, billing, payments, and communications).
These third parties may be located outside Colombia and ensure adequate data protection levels in accordance with applicable regulations.


5. Data Storage and Security

  • Data is stored in cloud computing services provided by third parties.
  • Servers may be located outside Colombia.
  • We retain data while the account is active and for an additional 12 months after termination for legal purposes or dispute resolution.
  • We implement digital security measures including strong passwords, two-factor authentication, encryption in transit (TLS), role-based access controls, backups, and activity logging.

6. Data Subject Rights

Under Colombian law, you have the right to:

  • Access, update, and rectify your personal data
  • Request proof of the authorization granted
  • Be informed about how your data is used
  • File complaints before the Superintendence of Industry and Commerce (SIC)
  • Revoke authorization and/or request deletion of your data, unless a legal or contractual duty requires its retention

7. How to Exercise Your Rights

  • Some data can be updated directly through the platform.
  • For other rights, send your request to hello@rischio.io or use the form available on our website.
  • The physical address for postal communications may be requested in writing via the email above.
  • The procedure is free of charge, except for physical reproduction costs.
  • We respond within the timeframes established by Colombian law:
    • Inquiries: up to 15 business days
    • Claims: up to 10 business days

8. Cookies and Similar Technologies

Our website uses strictly necessary cookies and analytics cookies to operate and measure platform usage.
We use Umami Analytics, which collects information in an anonymized manner.
We do not use third-party advertising tracking cookies.


Although we accept users from any country, data processing is governed by Colombian law.
The location of data processing is Colombia.


10. Updates to this Policy

We may update this policy at any time.
Changes will be notified by email to users registered in our mailing list and published on our website.
This policy is effective from its publication until it is updated.


11. Contact

For questions, comments, or requests regarding this Privacy Policy, please contact us at:
Email: hello@rischio.io
Physical address: Available upon written request to hello@rischio.io
City: Bogotá, Colombia