Privacy policy

1. Who is responsible for your data

The data controller is SeguiGestorWeb, reachable at contacto@seguigestorweb.com.

When the platform is used on behalf of a school, the school is the controller of its students’ academic data and we act as a processor: we handle that data on its instructions and never for our own purposes.

2. Children’s data

This is the most important section of this document.

The platform processes data about students who are, for the most part, minors: name, class, grades, attendance, notes and communications with the school.

Minors do not create accounts themselves. Accounts are created by the school or by a parent or guardian, who provides consent where the law requires it. We do not target advertising at minors, we do not build commercial profiles from their data, and we never sell or share it with third parties for commercial purposes.

If you find that a minor’s account was created without the proper authorisation, write to us and we will delete it along with its data.

3. What data we process

We do not ask for special categories of data (health, ethnic origin, beliefs) and we ask you not to enter them in free-text fields.

• Account data: email address and, if you sign in with Google, your name and profile picture.
• Academic data: whatever the school records about students, courses, enrolments, grades and attendance.
• Guardian data: name, relationship to the student and contact details.
• Communications: messages exchanged within the platform.
• Technical data: IP address and request timestamps, needed to limit abuse of the service.

4. Why we use it and on what legal basis

We do not use your data for advertising or to train artificial intelligence models.

• To provide the service and keep you signed in: performance of the contract or of the school’s instructions.
• To send sign-in, confirmation and password recovery emails: necessary to provide the service.
• To protect the platform against abuse and unauthorised access: legitimate interest in the security of the service.
• To comply with legal obligations where applicable.

5. Who else processes your data

We rely on providers acting as processors. Each one accesses only what it needs:

• Supabase — database and authentication.
• Vercel — hosting for the application and the API.
• Redis Cloud — short-lived counters used to rate-limit requests. It stores no identifiable personal data beyond an IP address for a few minutes.
• Brevo — transactional email delivery.
• Google — authentication, only if you choose to sign in with your Google account.

6. International transfers

Some of these providers process data on servers located outside your country, mainly in the European Union and the United States.

These transfers rely on standard contractual clauses and on the adequacy frameworks applicable to each provider. You may ask us about the specific safeguards for any of them.

7. How long we keep data

When data is no longer needed, it is deleted or irreversibly anonymised.

• Account data: while the account remains active.
• Academic data: while the school keeps its relationship with the platform, or for the period its own educational regulations require.
• Technical security logs: twelve months at most.

8. Your rights

You may exercise the following rights at any time:

• Access the data we hold about you.
• Correct anything inaccurate.
• Request its deletion.
• Restrict or object to certain processing.
• Receive your data in a portable format.
• Withdraw consent where processing is based on it, without affecting the lawfulness of earlier processing.

9. How to exercise them

Write to contacto@seguigestorweb.com stating which right you wish to exercise. We will respond within thirty days at most.

If the data belongs to a student who is a minor, the request must come from their guardian or from the school.

If you believe we have not handled your request properly, you may complain to the competent supervisory authority: Superintendencia de Industria y Comercio (Colombia).

10. How we protect data

No system is invulnerable. Should a breach affect your data, we will tell you and notify the competent authority within the legally required deadlines.

• All traffic is encrypted over HTTPS.
• The database enforces row-level security: every query is filtered by the authenticated user, so a coding mistake does not expose other people’s data.
• Credentials are never stored in plain text.
• Administrative access is limited to the people who need it.

11. Cookies

We use only the technical cookies needed to keep you signed in. We use no advertising or third-party analytics cookies, which is why you see no consent banner: there is nothing to consent to beyond what is strictly necessary for the service to work.

12. Changes to this policy

If we change this policy we will update the revision date shown above. When a change is significant we will tell you by email or inside the platform before it takes effect.

13. Contact

For any privacy matter, to exercise your rights, or for support, write to contacto@seguigestorweb.com.