Skip to content

Privacy policy

Last updated:

This page explains how Cressco handles personal data on cressco.dev. It covers what we collect, why, who processes it, and the rights you have over your data.

Who we are

Cressco runs the website at cressco.dev. The business is operated by Cressco SAS, a company registered in Colombia.

For any privacy question, email info@cressco.dev.

What we collect

Three categories of data move through this site.

First, what you give us directly. When you book a call, submit the AI Score quiz, send an email, or subscribe to the newsletter, the data in those forms is collected.

Second, what is collected automatically for security and product analytics. This covers IP address, browser, country, and visited pages, handled through Cloudflare (hosting) and PostHog (product analytics).

Third, what you let us collect after consent. If you accept marketing cookies in the consent banner, Google Analytics 4 and any advertising pixels we run start receiving page views and event data.

Cookies and analytics

PostHog runs in cookieless mode by default. Page views and product events flow to PostHog without setting a tracking cookie. If you accept the consent banner, PostHog upgrades to its full mode, which sets a session cookie to stitch visits together.

Google Tag Manager loads on every page but starts with all analytics and advertising consent denied (Consent Mode v2). Tags inside GTM, including Google Analytics 4, only fire after you accept marketing cookies.

The Calendly booking widget embedded on this site is loaded from Calendly directly. Calendly may set its own cookies when you interact with the widget. Their privacy policy applies to that interaction.

Third parties and processors

We use the following data processors:

  • Cloudflare: website hosting, CDN, and DDoS protection. Cloudflare may process IP addresses and request metadata.
  • PostHog: product analytics. Cookieless by default; full mode only after consent.
  • Google: Google Tag Manager and Google Analytics 4. Both gated by the consent banner.
  • Calendly: scheduling for booked calls.
  • GitHub: backend for our content management system. Only used by Cressco editors, not by visitors.
  • When advertising pixels are added (Meta and Vector AI are planned), they will load inside GTM and only fire after you accept marketing cookies. This page will be updated to list them as they go live.

How we use your data

We use the data we collect to respond to your booking or message, to send the newsletter you subscribed to, to measure how the site is used, and to keep the site secure.

We do not sell personal data. We do not share it with third parties for their independent marketing.

Your rights

You have rights over your personal data, regardless of where you live. Cressco SAS is based in Colombia and complies with Ley 1581 of 2012 (Habeas Data) and its regulations. If you are in the European Union or United Kingdom, the GDPR also applies. If you are in California, the CCPA also applies. You can ask us:

  • What data we hold about you.
  • To correct or delete it.
  • To stop processing it for a specific purpose.
  • To receive a copy of your data.
  • To withdraw consent for marketing cookies at any time, by clearing cookies for cressco.dev or contacting us at info@cressco.dev.
  • To file a complaint with the Colombian Superintendencia de Industria y Comercio (SIC) if you believe your Habeas Data rights have been infringed.

Data retention

We keep data only as long as we need it.

  • Form submissions (Calendly bookings, AI Score answers, newsletter signups): kept while you remain an active contact, or for 3 years after the last interaction, whichever is shorter.
  • Analytics events in PostHog: 12 months.
  • Server and edge logs (Cloudflare): handled per Cloudflare default retention.
  • Newsletter unsubscribes: kept indefinitely so we honor your opt-out.

Security

The site runs entirely on TLS. Hosting and edge delivery run on Cloudflare. We do not store payment information on this site.

Access to the content management system is gated by GitHub OAuth and Cloudflare Access. Only Cressco editors can sign in.

International transfers

Several of our processors (PostHog, Google, Calendly, GitHub) operate in the United States or run global infrastructure. By using this site your data may be processed outside your country of residence.

These processors operate under Standard Contractual Clauses or equivalent transfer mechanisms.

Children

This site is not directed at children under 16. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided data through this site, contact us and we will delete it.

Changes to this policy

We update this policy when our practices change. The effective date at the top of this page reflects the latest version. Material changes will be noted in a banner on the site for 30 days.

Contact

For any privacy question, email info@cressco.dev. We aim to answer within 5 business days.