PRIVACY BY DESIGN & BY DEFAULT
Beauty Paisas does NOT store government document images or facial biometric vectors on internal servers. Identity checks are isolated and return only an auditable cryptographic hash.
1. Data Controller & DPO Identification
The Data Controller operates under the laws of the Republic of Colombia with registered databases before the National Registry of Databases (RNBD) overseen by the Superintendence of Industry and Commerce (SIC).
2. Data Collected & Purpose of Processing
We collect and process only the minimal required information:
- Account Information: Email address and securely salted/hashed passwords.
- Age Verification Cryptographic Hash: Cryptographic audit token proving age verification without retaining IDs or facial geometry.
- Preferences & Interaction Records: Private chat memory and token consumption logs, encrypted at rest.
- Technical & Cookie Data: Language cookies and short-lived secure session cookies.
3. Information Security & Encryption Standards
ð Encryption in Transit (TLS 1.3)
All client-server exchanges use modern TLS 1.3 encryption with Perfect Forward Secrecy.
ð Encryption at Rest (AES-256)
Databases and media volumes employ robust AES-256 encryption at rest.
4. Habeas Data User Rights
Pursuant to Colombian Law 1581 of 2012, you hold the following statutory rights:
- Access: Free access to review all stored personal information.
- Update & Rectify: Correct inaccurate, partial, or outdated information.
- Permanent Deletion: Irreversible deletion of your user profile, messages, and associated tokens.
- File Complaints with SIC: Lodge regulatory complaints with the Superintendence of Industry and Commerce.
5. Immediate Permanent Account Deletion
To guarantee immediate right to be forgotten, users can execute one-click permanent deletion from their account settings:
6. PQRS & Habeas Data Requests
To submit formal Habeas Data petitions or inquiries, reach out through our dedicated portal or contact dpo@beautypaisas.com. Responses will be resolved within statutory legal timeframes (15 business days).