Privacy policy

Last updated: October 12, 2026

1. Who is responsible for your data

There are two situations. The data of company accounts (those who create diagnostics) is processed by EbenOS as controller. The data of people who answer a company's diagnostic is processed by that company as controller, and EbenOS hosts it and shows it to the company on its behalf as processor. For diagnostics that EbenOS publishes for its clients, EbenOS is the controller.

2. What data we collect

• Company account: name, company name, email, phone, country, type of business, tax ID and the form of address you prefer (Dr., Mrs., etc.). Your password is stored encrypted, never in plain text.
• What you create: your diagnostics, questions, answer options and result levels.
• Respondent data: name, email, company and phone (if the diagnostic asks for them), their answers, the score and level obtained, the language and the date.
• In EbenOS diagnostics, also: company size, country, city and the respondent's role.
• Technical data: IP address (for security and usage limits), browser and device type, and error logs.

3. What we use it for

To create and manage accounts, provide the service, calculate and show results, deliver answers to the company that owns each diagnostic, send service emails (access, results), protect the platform against abuse, improve the service and comply with legal obligations.

We do not sell your data or use it for third-party advertising.

4. Who we share it with

• With the company that owns the diagnostic you answer: it receives your answers and contact details.
• With providers that help us operate: hosting and email delivery.
• City search: when you type your city we send that text, without your personal data, to an open map service (OpenStreetMap/Photon) to suggest options.
• Fonts: pages load Google Fonts from Google servers, which receive your IP address.
• With authorities, when the law requires it.
• With LinkedIn, WhatsApp or your email only if you press "share", and only the link to the diagnostic is shared: never your result or your data.

5. Cookies and storage on your device

We use a session cookie to keep you signed in, your preferred language, and the browser's local storage to save your progress while you answer a diagnostic (it is cleared when you finish). We do not use advertising or third-party tracking cookies.

6. How long we keep it

While your account is active or as needed to provide the service; afterwards we delete or anonymize it, unless a law requires us to keep it. The answers to a diagnostic are kept by the owning company until it deletes them, deletes the diagnostic or closes its account.

7. Security

We use encrypted connections (HTTPS), store passwords with one-way encryption, restrict access to the answers to the company that owns the diagnostic and apply limits against abuse. No system is completely secure, but we work to protect your data.

8. Your rights

You may know, access, update and correct your data, request its deletion, withdraw your authorization and lodge complaints with the data protection authority (in Colombia, the Superintendence of Industry and Commerce, under Law 1581 of 2012; in other countries, the competent authority).

If you answered a company's diagnostic, write to that company first, as it is responsible for that data. You may also write to us and we will help.

9. Deleting your account and data

Write to soporte@ebenos.io from your account email with the subject "Delete account". We verify your identity and handle the request within a maximum of 15 business days. Your account, your diagnostics and the answers received are deleted, except what the law requires us to keep.

10. Minors

Diagnostics is not aimed at people under 18. Companies must not use it to collect data from minors without the authorization the law requires.

11. Mobile applications

The Android and iOS apps use the same data and rules as the website. Today they do not request access to your location, camera, microphone or contacts. If they ever do, we will ask for your permission and update this policy.

12. International transfers

Servers and providers may be located in other countries. We apply measures to protect your data when it is processed outside your country.

13. Changes to this policy

We may update this policy. We will publish the current version with its date and, if the change is significant, let you know.

14. Contact

For any question about your data, write to us at soporte@ebenos.io.

You may also read: Terms and conditions.