Data and compliance
Last updated:
A summary of how data is handled and protected on yocemar.com. The legal detail is in Privacy.
Data inventory
| Data | Where it is stored | Retention |
|---|---|---|
| Chat conversations (text, language, mode, date; no IP or identity) | PostgreSQL database on the site’s own server | 6 months; deleted automatically |
| Contact form messages (name, email, message) | The site’s PostgreSQL database; also emailed through EmailJS | 6 months; deleted automatically |
| Visit statistics | Umami on the site’s own server, with no cookies or IP | Aggregated |
| IP address and anonymous session identifier | Server memory only, for usage limits | At most 1 hour |
Providers (processors)
| Provider | Role | Data it receives |
|---|---|---|
| AI model provider (MiniMax or Anthropic) | Generating the chat and fit analysis replies | Your messages and the public profile |
| EmailJS | Emailing the contact form | Name, email and message |
| Server (VPS) provider | Hosting the site, database and analytics | The data above, encrypted in transit |
Security measures
- Traffic encrypted with HTTPS.
- The AI providers’ keys exist only on the server. They never reach the browser, and automated tests check that they do not appear in the published code.
- Chat usage limits per minute, hour and day, plus a daily spending cap.
- The profile’s phone number is filtered out of every assistant reply, even if the model tries to show it.
- The database has no public access and stores no visitor IP address.
- Only the controller accesses the data, through a private panel with a username and password, signed 12-hour sessions and lockout after failed attempts.
- Data minimization: only what is needed is stored, and it is deleted after 6 months.
AI agents
The site publishes a Markdown version of the profile for AI agents (/llms.txt). It contains only public professional information, with no phone number or private data.
Applicable framework
Law 1581 of 2012 and Decree 1377 of 2013 (personal data protection, Colombia). Supervisory authority: Superintendence of Industry and Commerce (SIC).
This text is informative and does not replace legal advice.