Privacy Policy
Version [número], effective as of [fecha].
1. Who is responsible
The controller of the personal data processed in Monitoreo TECDEX and on this website is Servicios Tecnológicos TecDex SpA, Chilean tax ID (RUT) 76.564.606-5, with its registered address at Guardia Vieja 181, oficina 506, Providencia, Santiago, Chile. Privacy contact: privacidad@tecdex.net.
When the Customer enters personal data of third parties into the Service (for example, data about its team or in the addresses it monitors), TECDEX processes that data on the Customer's behalf under the Data Processing Agreement (https://monitor.tecdex.net/en/dpa/).
2. What data we process
| Category | Data | Where it comes from |
|---|---|---|
| Account | Name, email, company, role, language | Provided by the person when signing up or when invited |
| Sign-in with Google | Email and name of the Google account | Google, when the person chooses to sign in with Google |
| Security | Password (stored only as a hash), second factor, IP address and browser of each session, sign-in attempts | Generated when using the portal |
| Audit | Who performed which action and when (inviting, creating a monitor, entering a credential) | Generated when using the portal |
| Monitoring | Monitored addresses, results of each check, incidents, notes and reports | Provided by the Customer and generated by the Service |
| Monitoring credentials | Username and password of the Customer's test accounts | Entered by the Customer; they are stored encrypted and no one can view them again |
| Payment | Payment method and billing data | Received and processed directly by Paddle; TECDEX does not see them |
| Marketing | Source of the visit when signing up (campaign parameters in the address, such as utm_source) | The address through which the person arrived |
3. What we use it for
- To provide the Service: measure, send alerts and show status, incidents and reports.
- To manage accounts, secure sign-in and permissions.
- To protect the Service: detect unauthorized access, block repeated attempts and keep an audit trail.
- To communicate with you about the account: invitations, notices of changes and support.
- To learn, in aggregate form, which channels bring us customers.
We do not sell personal data or use it for third-party advertising. [Legal basis for each purpose: to be defined by the lawyer.]
4. Who we share it with
Only with providers we need in order to provide the Service, and only the data each one requires:
| Provider | Purpose | Data | Location |
|---|---|---|---|
| Amazon Web Services (SES) | Sending the Service's emails | Recipient's email and name, content of the alert | USA (us-east-1 region) |
| Sign-in with Google, if the person chooses it | Email and name of the Google account | [as determined by Google] | |
| Google (Google Analytics 4 and Tag Manager) | Analytics for this website, only if the person accepts cookies | Pseudonymous browsing data (pages viewed, visit source, clicks), without name, email or phone number | US and other countries where Google operates |
| Paddle | Billing, invoicing, taxes and refunds, as Merchant of Record | Payment and billing data, email and company | [as determined by Paddle] |
| Zoho | TECDEX's contact and support email | Whatever the person writes to us | [as determined by Zoho] |
| [Hosting for this website] | Publishing this website and its free tools | IP address of the visitor (technical log) | [as determined by the provider] |
The rest of the platform (portal, measurements, database and credential vault) runs on TECDEX's own servers in Chile. We may also disclose data to professional advisors bound by a duty of confidentiality, or when a competent authority requires it under the law.
Transfers outside Chile: Sending data to Amazon, Google and Paddle involves transferring data to other countries. [Mechanism and safeguards: to be defined by the lawyer under Ley 21.719 (Chilean Law No. 21,719) and, where applicable, the GDPR and Brazil's LGPD.]
5. How long we keep it
- Account and monitoring data: while the account is active and for [X days] after it is closed.
- Audit and security logs: [X months].
- Payment data: kept by Paddle in accordance with its legal obligations.
6. How we protect it
- Passwords stored only as a hash (argon2id), and a second factor required for all users.
- Monitoring credentials encrypted in a write-only vault.
- Encrypted connections (HTTPS), sessions that expire after inactivity, and lockout after failed attempts.
- Signed emails to prevent impersonation (DKIM and DMARC).
- Audit log of the actions taken in the portal.
7. Cookies
This website only uses analytics cookies if you accept them in the cookie notice. Until then, no Google tag is loaded, in any country.
| Tool | Purpose | When it runs | Retention |
|---|---|---|---|
| Google Tag Manager | Load the analytics tag | Only after "Accept" | Sets no cookies of its own |
| Google Analytics 4 (Google LLC) | Learn which pages help, where visits come from and which buttons are used, in aggregate, to improve the site | Only after "Accept" | GA4 data is kept for 14 months. The _ga and _ga_* cookies last up to 2 years in your browser unless you delete them |
We do not send Google data that directly identifies you (name, email or phone number), and we do not use these cookies for advertising.
How to accept, reject or change your choice: the notice has two buttons, "Accept" and "Reject". You can change your choice at any time with the "Cookie preferences" link in the footer of every page. We store your choice in your browser for 6 months, with its date and the notice version; if the notice changes, we ask again. If you withdraw consent, we stop loading analytics and delete this site's own measurement cookie.
Essential storage (no consent needed): the browser stores the chosen currency and your cookie choice, and after you submit the form a single-use technical cookie lasting 10 minutes is used.
The portal uses only necessary cookies: the session cookie, the cookie for the chosen language, and one that remembers the source of the visit for one hour when signing up.
8. Your rights
You can request access to your data, its correction or its deletion, and object to its processing, by writing to privacidad@tecdex.net from your account's email address. We respond within [legal deadline]. If your account belongs to a company, some requests may need to be approved by that company's administrator.
[The lawyer must complete: additional rights under Ley 21.719 (for example, portability), the authority with which to file a complaint and, where applicable, rights under the GDPR, the LGPD and the CCPA.]
9. Changes to this policy
If we make material changes to this policy, we will notify you by email before they take effect.
10. Contact
Privacy: privacidad@tecdex.net. General support: monitoreo@tecdex.net.