In accordance with Article 13 of Decree 1377 of 2013, the data controller for personal data collected through ravimercadeo.com is:

• Name: Ravi Mercadeo
• Type: Natural person
• Domicile: Medellín, Antioquia, Colombia
• Email: hola@mail.ravimercadeo.com

To exercise your rights as a data subject (habeas data), write to hola@mail.ravimercadeo.com with the subject "Habeas Data — [type of request]".

2.1 Account and registration data

• Full name
• Email address
• Password (stored using an industry-standard one-way hash function; never in plain text)
• Profile photo (optional)
• If you register with Google or GitHub: name and email provided by that identity provider

2.2 Usage and attribution data

• IP address
• Session token and expiration date
• UTM parameters (utm_source, utm_medium, utm_campaign, utm_content), referrer URL, and landing page at registration — used for internal marketing analytics
• Behavioral events on the platform (pages visited, features used, buttons clicked) via Mixpanel

2.3 Payment data

Payments are processed directly through Mercado Pago. Ravi Mercadeo does not store credit card data or bank account information. We only store subscription status (active plan, start date, end date) and the external payment identifier assigned by Mercado Pago.

2.4 Newsletter data (only if you subscribe)

• Name and email address
• Preferred language (Spanish or English)
• Email interaction history (opens, clicks) as timestamps and counters

2.5 Advertising tracking data

• Browser identifiers for Meta (_fbp and _fbc, generated by the Meta Pixel installed on our site)
• Hashed email (SHA-256), IP address, and User-Agent, sent to the Meta Conversions API (Meta CAPI) upon registration and newsletter subscription, to attribute conversions to our advertising campaigns

We process your personal data for the following purposes:

• Service delivery: create and manage your account, process your subscription, and give you access to the features of your plan.
• Transactional communications: send you account verification emails, password reset, payment confirmation, and account notifications.
• Newsletter (with your consent): send you periodic market updates about MercadoLibre Colombia if you subscribed to our newsletter.
• Product improvement: analyze aggregated and anonymized usage patterns to identify bugs, optimize the experience, and develop new features.
• Security and fraud prevention: detect and prevent unauthorized access, platform abuse, and fraudulent activities.
• Advertising campaign measurement: measure the effectiveness of our campaigns on Meta (Facebook/Instagram) through the Conversions API, to optimize advertising spend.
• Internal marketing attribution: understand which channels generate users to improve our content strategy.

In accordance with Article 26 of Law 1581 of 2012 and Articles 24-25 of Decree 1377 of 2013, we inform you that your personal data may be transmitted to the following service providers located outside Colombia, who act as Data Processors under data processing agreements:

We use the following cookies and tracking technologies on our website:

You can disable cookies from your browser settings. Note that disabling Ravi Mercadeo session cookies will prevent your account from working. Disabling third-party cookies (Meta, Mixpanel, Google) does not affect the core Service functionality.

• Account data: while your account is active. Upon account deletion, your personal data is deleted within 30 business days.
• Transaction and billing records: retained for 5 years from the transaction date, in compliance with Colombian tax and accounting obligations.
• Newsletter data: while you are an active subscriber. You may unsubscribe at any time via the unsubscribe link in each email or by writing to hola@mail.ravimercadeo.com.
• Analytics and attribution data: retained in aggregated or anonymized form for up to 24 months.

In accordance with Article 8 of Law 1581 of 2012, as the data subject you have the following rights:

• Access: access, free of charge at least once per calendar month, all personal data we have collected about you.
• Update: request the update of incomplete or outdated data.
• Rectify: request the correction of inaccurate or partial data.
• Proof of consent: request proof of the consent you granted for the processing of your data.
• Be informed: know how we have used your personal data.
• Complain to the SIC: file a complaint with the Superintendencia de Industria y Comercio (SIC) at www.sic.gov.co if you believe we have violated data protection law, after exhausting the direct channel with us.
• Revoke and/or delete: revoke your processing consent and/or request deletion of your data, where no legal or contractual obligation prevents it.
• Free access: access your data free of charge at least once per calendar month (Art. 21, Decree 1377 of 2013).

To exercise any of the above rights:

1. 1.Send an email to hola@mail.ravimercadeo.com with the subject: "Habeas Data — [type of request]" (e.g., "Habeas Data — Deletion").
2. 2.Provide your full name and the email address you registered with.
3. 3.Clearly describe your request.

Response deadlines (Arts. 14 and 15, Law 1581 of 2012):

• Queries (access to your data): 10 business days, extendable by 5 additional business days with prior notice.
• Claims (update, correction, deletion, revocation): 15 business days, extendable by 8 additional business days with prior notice.

If you do not receive a response within the indicated period, you may file a complaint directly with the SIC at www.sic.gov.co.

We implement the following technical and organizational measures to protect your personal data:

• Passwords are stored using an industry-standard one-way hashing function; they are never stored in plain text.
• HTTPS/TLS connections for all client-server communication
• Authentication based on secure session tokens
• Restricted database access based on the principle of least privilege
• Error and anomaly monitoring via Sentry

No security system is infallible. We recommend using a unique, strong password for your account. If you suspect a security breach, notify us immediately at hola@mail.ravimercadeo.com.

The Service is not intended for persons under 18 years of age, in accordance with Article 7 of Law 1581 of 2012. We do not knowingly collect data from minors. If you are a parent or legal guardian and believe your child under 18 has provided personal data through our Service, write to us at hola@mail.ravimercadeo.com to request immediate deletion. We will process the request within 15 business days.

This Service is designed for the Colombian market. If you reside in the European Economic Area and choose to use it, the General Data Protection Regulation (GDPR) may grant you additional rights. You may exercise them through the same channels described in Section 9. To the extent GDPR applies: the legal basis for marketing communications processing is your consent (Art. 6(1)(a) GDPR); for usage analytics and security, it is legitimate interest (Art. 6(1)(f) GDPR).

Any material change to this Policy — such as new categories of data collected, new processing purposes, or new third-party recipients — will be notified by email at least 30 days in advance, in accordance with Article 13 of Decree 1377 of 2013. Minor or clarifying changes will be notified with 15 days' notice. If changes involve a new purpose, we will request your explicit consent. The current version is always available at ravimercadeo.com/privacy.

This Policy takes effect on July 10, 2026 and replaces any previous version.

For any questions about this Policy or about the processing of your personal data:

• Controller: Ravi Mercadeo
• Email: hola@mail.ravimercadeo.com (subject: "Habeas Data — [type]" for rights requests)
• City: Medellín, Antioquia, Colombia