Privacy Policy

Tecapa Electric, owner of the Adqueo software brand, with domicile in the Republic of El Salvador [registered name / NIT / domicile to be completed by the Provider], is responsible for the processing described here. For privacy matters: daniel@adqueo.com.

Adqueo acts as data controller for the personal data of its website visitors, prospects and account users (for example, contact and account data).

For the personal data contained in the Client Content that a client organization uploads to the products (for example, data of the client's own workers, technicians or requesters), Adqueo acts as data processor and processes such data only on the client's instructions and to provide the Services. In that case, the client organization is the data controller of that data.

• Account and contact data: name, work email, phone, organization, role, country.
• Usage and technical data: IP address, device and browser (user agent), logs, timestamps, and actions within the Services.
• Client Content: operational data the client uploads or creates, which may include third-party personal data under the client's responsibility.
• Consent and acceptance records: the version of each policy accepted, its cryptographic hash, date, time and technical metadata.
• Communications: messages you send us and support interactions.

We do not sell personal data, and we do not use Client Content to train models. AI features that use third-party model providers do so under terms that prohibit training on client data.

We process personal data to:

• provide, operate, maintain and secure the Services (performance of the contract);
• authenticate users, prevent fraud and abuse, and keep audit and acceptance records (legitimate interest and legal obligation);
• respond to inquiries and provide support (performance of the contract or your request);
• send service and, where you consent, commercial communications (consent, revocable at any time);
• comply with legal obligations.

We use cookies and similar technologies that are strictly necessary to operate the site and, where applicable and with your choice, for analytics. You can decline non-essential cookies without losing access to essential functions.

We share personal data only with the infrastructure and service providers needed to run the platform, under data-processing agreements. The current subprocessors are published on our security page and include:

• Cloudflare — edge, CDN, WAF/DDoS, Workers and D1 (global; SOC 2 Type II, ISO 27001/27701).
• Netcup GmbH — compute, PostgreSQL and storage (Germany, EU; ISO 27001, ISO 27701).
• Anthropic — agent reasoning via API (USA; no training on client data).
• Resend — transactional email (USA).

We may also disclose data when required by law or competent authority.

Product data is stored in the European Union (Germany, Netcup). Some providers (Cloudflare, Anthropic, Resend) process data outside El Salvador. Where transfers occur, we rely on providers that offer adequate safeguards (ISO 27001/27701, GDPR compliance) and contractual data-protection commitments.

We keep personal data for as long as the account is active and thereafter as needed to comply with legal obligations, resolve disputes and enforce agreements. Operational records are kept for the contract term plus 90 days; audit and acceptance logs for 12 rolling months (extendable for regulated clients). Acceptance records may be kept longer as evidence of consent.

We apply role-based access control, per-company isolation via Row-Level Security, encryption in transit, strong authentication and audit logging, on infrastructure certified by our providers. Details are on our security page.

Under Salvadoran law you may exercise the following rights over your personal data:

• Access — know what data we process and for what purpose.
• Rectification — correct inaccurate, incomplete or outdated data.
• Cancellation — request deletion when processing is unlawful or no longer necessary.
• Opposition — object to processing for specific purposes, such as marketing.
• Portability — receive your data in a structured, commonly used format.
• Forgetting — request removal in the terms allowed by law.
• Limitation — restrict processing in the cases provided by law.

To exercise them, write to daniel@adqueo.com. We will respond within the legal timeframe. If your data is contained in a client's Client Content, we will refer your request to that client, who is the controller.

In the event of a confirmed security breach affecting personal data, we will notify the competent authority and the affected data subjects without undue delay and within no more than 72 hours, as required by Legislative Decree No. 144.

The Services are intended for organizations and their authorized adult users. We do not knowingly collect data of minors.

We may update this Policy. Substantive changes are published with a new version and effective date. Where required, we request a renewed acceptance, which is recorded with its version, hash, date and technical metadata.

Privacy questions and rights requests: daniel@adqueo.com.