Privacy Policy
How Qriptia collects, uses, protects and retains your personal information, and the rights you have as a data subject.
Last updated: June 2026
At Qriptia we treat the protection of personal data as an essential part of our security practice. This Policy describes, clearly and in accordance with Venezuelan law, what information we collect, for what purpose, how we safeguard it and how you can exercise your rights. We encourage you to read it carefully; by using our website or engaging our services, you accept the practices described herein.
1. Data controller
The controller of your personal data is Alex Tech, a company domiciled in the Bolivarian Republic of Venezuela. Qriptia (qriptia.com) is a commercial brand of Alex Tech. Any reference to “Qriptia”, “we” or “the agency” in this document is understood to mean Alex Tech as the responsible entity. For privacy matters you may write to us at hola@qriptia.com.
2. Data we collect
We collect the data you provide directly (when completing contact forms, requesting a consultation, subscribing to communications or engaging a service), as well as data generated during the provision of services. This includes: first and last name, email address, phone number, company and role, the content of your messages, and technical browser data such as IP address, device type and pages visited. Where a service requires it, we also process identity documents and information (see section 4).
3. Purpose and legal basis
We process your data to respond to your requests and inquiries; to provide, manage and invoice the services engaged; to comply with legal and contractual obligations; to prevent fraud and protect the security of our systems and those of our clients; and, where you consent, to send you informational communications. The basis legitimizing the processing is, as applicable, the performance of a contract or pre-contractual measures, the consent you grant, compliance with a legal obligation, and the legitimate interest in information security.
4. Identity and verification data (KYC)
Some of our services include identity verification processes (KYC, “Know Your Customer”). In that context we may process identification documents, facial biometric data, supporting records and other information necessary to confirm a person's identity. Such data is considered especially sensitive: it is collected only on a legitimate basis, limited to what is strictly necessary, encrypted, and accessed under the need-to-know principle. It is not used for purposes other than those agreed, nor disclosed to third parties except by legal obligation or the express instruction of the client responsible for the process.
5. Encryption and information security
We apply technical and organizational measures consistent with the state of the art to protect your data against unauthorized access, alteration, loss or disclosure. These include: encryption at rest and in transit, role-based access control, segregation of duties, activity logging and monitoring, and the progressive adoption of quantum-resistant (post-quantum) cryptography in line with the standards published by NIST. No measure is infallible, but we commit to maintaining a level of protection proportionate to the risk and sensitivity of the information processed.
6. Artificial intelligence and connected systems
Some of our services use artificial intelligence systems integrated with the client's platforms and data. When this occurs, processing is carried out under strict controls of access, traceability and minimization: the AI operates only on the data strictly necessary, within the agreed scope, and its outputs remain subject to human oversight. We do not use our clients' personal data to train third-party models without a legitimate basis and, where applicable, your consent.
7. Data retention
We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected and to meet the legal, contractual and security obligations that apply to us. Once those periods have elapsed, the data is securely deleted or irreversibly anonymized. Specific retention periods depend on the nature of the service and applicable legal requirements; you may request information about them at any time.
8. Processors and third parties
To provide our services we may rely on technology providers acting as data processors (for example, cloud infrastructure services, encrypted storage, messaging or analytics). These providers access data only for the stated purposes, under documented instructions and confidentiality and security obligations equivalent to our own. We do not sell or rent your personal data to third parties.
9. International transfers
Some of our infrastructure providers may be located outside Venezuela. Where an international transfer of data is necessary, we adopt appropriate safeguards —contractual clauses, encryption and the selection of providers with recognized standards— so that your information maintains a level of protection equivalent to that required by Venezuelan law.
10. Rights of the data subject
You have the right to access your personal data, to request its rectification when inaccurate, to request its deletion, to object to or limit certain processing, and to withdraw any consent you have given, without affecting the lawfulness of prior processing. To exercise any of these rights you may write to us at hola@qriptia.com stating your request; we may ask you to verify your identity before responding. We will address your request within a reasonable time and in accordance with applicable law.
11. Children's privacy
Our services are aimed at businesses and adults. We do not knowingly collect personal data from minors. If we become aware that we have processed a minor's data without the corresponding authorization, we will delete it promptly. If you are a parent or guardian and believe a minor has provided us with data, please contact us so we can address it.
12. Changes to this Policy
We may update this Privacy Policy to reflect regulatory, technical or operational changes. When we do, we will publish the revised version on this same page and update the “last updated” date. If the changes are substantial, we will endeavor to communicate them through appropriate means. We recommend reviewing it periodically.
13. Contact
For any question, request or complaint regarding your personal data or this Policy, you may contact us at hola@qriptia.com, via international WhatsApp at +34 674 698 399, or via WhatsApp and calls in Venezuela at +58 416 808 9400. We will handle your communication with the confidentiality that characterizes our practice.