Privacy policy

Effective September 24, 2026 · Last updated: September 24, 2026

This policy explains how Carbonode handles personal data under Colombia's Law 1581 of 2012 and Decree 1377 of 2013 (compiled in Decree 1074 of 2015). You don't need an account to search tenders, and Carbonode sets no cookies of its own. Google's ads do (see "Advertising"). The Spanish version is the one that governs.

Data controller

• Controller: Carbonode, run by Felipe Ospina Montoya (an individual).
• Address: Diagonal 79A, Medellín, Colombia.
• Email: hola@carbonode.co, with the subject "Personal data". Requests are handled by email only.

The controller also handles queries and complaints about personal data.

What we process, why, and for how long

Alerts waitlist

• Data: your email address and, if you give them, the keywords and country you care about, the language you signed up in, a record of your consent (date, the text you accepted and the version of this policy), and whether and when you confirmed your address.
• Purpose: to email you once to confirm the address is yours, and once more when email alerts launch. We don't send marketing and we don't share the list with anyone.
• Legal basis: your prior, express and informed consent, given by ticking the box on the form.
• Retention: if you don't confirm your address within 7 days, it's deleted automatically. If you do, we keep it until alerts launch and we've told you, and never longer than 12 months from sign-up. You can ask us to delete it sooner at any time.

Server logs

• Data: IP address, date and time, the page requested without search parameters, response code and browser type.
• Purpose: protecting the service from abuse and fixing faults.
• Retention: we keep at most the latest 30 MB of logs per service. Older entries are overwritten automatically as new visits come in.

Tender data

We republish procurement information that public entities already disclose on official portals. We don't store data about natural persons (such as individual contractors, aid recipients or ID numbers): records that contain them are discarded automatically. If you still find your data on a page, write to us and we'll take it down.

Your rights

Under Law 1581 (art. 8) you have the right to:

• Know, update and correct your data.
• Ask for proof of the consent you gave us.
• Be told how we have used your data.
• Withdraw your consent and ask us to delete your data, unless a legal or contractual duty requires keeping it.
• Access your data free of charge.
• Complain to Colombia's data protection authority, the Superintendencia de Industria y Comercio (sic.gov.co), after first making the request to us.

How to exercise them

Write to hola@carbonode.co with the subject "Personal data". Include your name, the email address or data the request is about, and what you're asking for.

• Queries (what data we hold and how we use it): we answer within 10 business days. If we can't, we tell you why and answer within the following 5 business days.
• Complaints (correction, update, deletion or withdrawal): we answer within 15 business days of the day after we receive them. If we can't, we tell you why and answer within the following 8 business days. If a complaint is missing information, we ask for it within 5 days. If we don't receive it within 2 months, the complaint is treated as withdrawn.

Service providers and international transfers

Carbonode runs on its own servers in Colombia. These providers process data on our behalf or alongside us, on servers outside Colombia:

• Cloudflare (United States) delivers the site, protects it from attacks and counts visits for anonymous traffic statistics (Web Analytics, no cookies). It sees the IP address and URL of every visit.
• Cloudflare Turnstile checks that the alerts form is filled in by a person, without advertising cookies.
• Brevo (France, European Union) sends the waitlist confirmation email. It receives your email address and nothing else.
• Google (United States) serves the AdSense ads (see below).

Advertising

Carbonode is funded by Google AdSense ads. Ads load only on content pages, never on the alerts form. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on those visits.

You can opt out of personalized advertising in Google's ad settings, and read how Google uses information from sites that use its services. You can also opt out of other vendors' cookies at aboutads.info.

Children

Carbonode is meant for businesses and professionals. We don't knowingly collect data from minors.

Changes to this policy

If we change this policy, we'll post it on this page with a new date. If a change affects the purpose you consented to, we'll ask for your consent again.