1. Who is responsible
The controller of the personal data collected through the Maquiven website and apps is Servicios ESOL Operations Leaders, C.A. You can write to hola@maquiven.com about anything related to your privacy.
2. What data we collect
- Account data: name, e-mail address, password (stored irreversibly as a hash, never in plain text), phone, WhatsApp, state and city, preferred language.
- Company profile (optional): trade name, logo, description, website and location, which are shown publicly.
- Listings: texts, photos and technical data of the equipment. We remove metadata (EXIF, including GPS location) from photos when you upload them.
- Inquiries and messages: the name, e-mail, phone and message you send to a seller or through the contact form.
- Suppliers and procurement: your company's details (name, RIF, phone, and the lines of business and states you work in), your notice preferences and, when you submit a proposal, its content: prices, equipment, licence plates, availability and the documents you attach.
- Information requests to partner brands: name, e-mail, phone, message and the model you are interested in.
- Payments: item, amount, date and status of the payment. If you pay by card, the card details are processed directly by Stripe; we never receive them. If you pay by Pago Móvil, we keep the details you report so we can verify the payment: the bank you paid from, the phone registered for Pago Móvil, the payer's cédula or RIF, the reference number, the date and amount paid and, if you attach it, the image of the receipt.
- Search assistant (if you use it): the messages you write to it, the searches it runs and the listings it shows you. Before storing them or sending them to the artificial-intelligence provider we replace any e-mail addresses and phone numbers they contain.
- E-mails we send you: recipient, subject, date and delivery status and, through a tracking image and tracking links of our e-mail provider, whether you open the e-mail and which links you click.
- Visits from our social-media and Google ads: the campaign and ad you came from (on Google Search, also the ad group and the keyword) and the inquiries, contacts, sign-ups or favourites that follow from that visit, linked to a pseudonymous identifier computed from your network and browser (never your IP address). The ad's click identifier (for example Google's gclid) is only kept in your session, never in our database.
- Technical data: IP address, browser or device type, date and time of access and security logs.
3. How we use it
- To provide the service: create your account, publish your listings and deliver your inquiries to the seller.
- To manage procurement: notify you of the requests that match your lines of business and your area, evaluate your proposals and tell you the outcome.
- To process and verify payments (we check Pago Móvil payments by hand before activating the service) and issue receipts.
- To send you notices about your account and listings (activation, expiry, inquiries received) and to know whether they arrive and are read.
- To answer your questions with the search assistant and improve its answers, for example by reviewing conversations where it did not find what you were looking for.
- To protect the platform: prevent fraud, spam and unauthorised access (for example by limiting login attempts).
- To improve the service with aggregated statistics and, only if you accept, analytics tools.
- To measure which of our social-media and Google ads bring visits and inquiries and, only if you accept analytics and advertising cookies, to report those results to Meta, TikTok and Google.
- To meet legal obligations and respond to requests from competent authorities.
4. Who we share it with
We do not sell your personal data. We only share it:
- with the seller, when you send them an inquiry (name, e-mail, phone and message);
- with the client company of a procurement request, when necessary to evaluate or award your proposal;
- with the partner brand (Official partner) when you ask it for information about one of its models;
- publicly, to the extent you include it in a listing or in your company profile;
- with providers that serve us, under confidentiality obligations: hosting; technical development and maintenance; e-mail delivery (Mailjet or Resend, which records delivery, opens and clicks); card payments (Stripe); and, if you use the search assistant, the artificial-intelligence provider that writes its answers (Anthropic or OpenAI), which receives your messages without e-mail addresses or phone numbers;
- only if you accept analytics and advertising cookies: with Google (Google Analytics and Google Ads), Meta (Meta Pixel and Conversions API) and TikTok (TikTok Pixel and Events API). The Google Ads tag in your browser tells Google when you send an inquiry, contact a seller or sign up, together with the click identifier (gclid) of the Google ad you came from, which it keeps in its _gcl_* cookies. From our server we send Meta and TikTok the type of action (for example viewing a listing, searching, sending an inquiry or signing up), your IP address and browser, their cookie and click identifiers and, when we have them, your e-mail, phone and user number hashed irreversibly (SHA-256);
- with authorities, when there is a legal obligation or a valid order.
Some of these providers may process data outside Venezuela (for example in the United States). In those cases we require adequate protection safeguards.
Maquiven connector for Claude: if you add the Maquiven connector in Claude, Claude looks up only Maquiven's public information (active listings, categories and open procurement requests), without contact data or seller or client names. The requests come from Anthropic's servers, not from your device. Maquiven logs each request (tool, filters and date) without storing IP addresses or other personal data, for statistics and abuse prevention. What you write in Claude is governed by Anthropic's privacy policy.
5. Cookies and local storage
We use essential cookies to keep you signed in, to protect forms against fraudulent submissions and, if you tick "Remember me", to keep your session for a while. We also store preferences such as your cookie choice in your browser.
Analytics and advertising cookies and technologies (Google Analytics, Google Ads with its _gcl_* cookies, which keep the gclid click identifier, Meta Pixel and TikTok Pixel, and sending those events from our server to Meta and TikTok) are only activated if you accept them in the cookie notice; with "Essential only" they stay off. You can change your mind by clearing this site's data in your browser.
6. How long we keep it
- Account data, for as long as your account is active.
- Contact form messages, for up to one year.
- Proposals and their documents, while the procurement request is open and for up to 2 years after it closes.
- Search assistant conversations, for up to 90 days after their last activity.
- The log of e-mails sent (delivery, opens and clicks), 180 days; the copy of each e-mail's content, 30 days.
- Data about visits from our ads, 180 days; events for Meta and TikTok, only for the few days needed to send them; the Google Ads _gcl_* cookies, up to 90 days in your browser.
- Security and login-attempt logs, for short periods (from hours to a few months).
- Payment records, including the Pago Móvil details and receipts of approved payments, for the period required by accounting and tax rules; receipts of rejected or expired payments, 180 days.
If you delete your account we erase your personal data or, where we must keep payment records, anonymise it.
7. Your rights
Under the Constitution of the Bolivarian Republic of Venezuela (articles 28 and 60) and other applicable rules, you may access your data, know how it is used, ask for it to be updated, corrected or deleted and withdraw your consent. You can do much of this yourself from "My account"; for anything else write to hola@maquiven.com.
8. Security
We apply reasonable technical and organisational measures: encrypted connections (HTTPS), passwords protected with hashing algorithms, access control and activity logs. No system is infallible; if we detect a breach affecting your data we will let you know.
9. Minors
The platform is intended for people aged 18 or over. We do not knowingly collect data from minors.
10. Changes to this policy
We may update this policy. We will publish the new version with its date and let you know if the changes are significant.