Privacy Policy

1. Who we are

Invisible Machine AI ("Máquina Invisible IA") is a digital growth agency based in Medellín, Antioquia, Colombia. We provide SEO, AEO and GEO services, web design and development, marketing automation and AI agents. This Privacy Policy describes how we collect, use, share and protect your information, including data we access through Google APIs. For any questions you can email us at invisiblemachine.ai@gmail.com.

2. Information we collect

We collect information you provide directly to us when you fill out forms, request a diagnostic, access our platform or communicate with us (name, email address, phone number, company and website). We also automatically collect technical data such as IP address, browser type, device, pages visited and usage data, through our own and third-party cookies. See our Cookie Policy for details.

3. How we use information

We use the information we collect to:

• Provide, maintain and improve our services.
• Respond to your requests and communicate with you about your account.
• Send you technical notices, updates and security alerts.
• Generate marketing and analytics reports for the digital assets you authorize us to manage.
• Comply with legal obligations and prevent fraud or misuse.

4. Google user data we access (OAuth)

When you authorize our application through Google OAuth 2.0, we access only the data necessary to provide the contracted service. The scopes we use and their purpose are:

• Google Analytics 4 (analytics.readonly): read audience, traffic and conversion metrics for the property you authorize.
• Google Search Console (webmasters.readonly): read impressions, clicks, CTR, average position and search queries for the site you authorize.
• Google Business Profile (business.manage): read and manage your business listing information, including posts, reviews, photos, questions and answers, and call data.

5. Google API Services User Data Policy compliance (Limited Use)

Our use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically: we do not sell Google user data; we do not use it for advertising, profiling or targeting; we do not allow third parties to use it for those purposes; we do not use it to train artificial intelligence models; and human access to that data is restricted to cases you authorize or that are required by law. You can review the policy at https://developers.google.com/terms/api-services-user-data-policy.

6. How we share information

We do not sell your personal information. We share it only with providers that help us operate the service (subprocessors), including Google (Analytics, Search Console and Business Profile), Vercel, Cloudinary, Supabase and n8n, under confidentiality obligations, or when required by law.

7. Data retention

We retain personal data only for as long as necessary to fulfill the purposes described and our legal obligations. Data obtained from Google APIs is retained while the service relationship exists or until you revoke access; afterwards it is deleted or anonymized, unless the law requires us to keep it.

8. Security

We apply reasonable technical and organizational measures to protect your information against loss, theft, misuse and unauthorized access, disclosure, alteration or destruction. No system is 100% secure, so we cannot guarantee absolute security.

9. Your rights and control of your data

You can request access, correction, update or deletion of your personal data by emailing us at invisiblemachine.ai@gmail.com. You can also revoke our application's access to your Google account at any time at https://myaccount.google.com/permissions. If you revoke access, we will stop accessing Google data and delete the derived information, without affecting the lawfulness of prior processing.

10. Cookies

We use cookies and similar technologies for the operation of the site and for analytics. See the details in our Cookie Policy.

11. International transfers

Your data may be processed on servers located outside Colombia (for example, the United States and the European Union) through our providers. We adopt reasonable contractual and technical measures to protect your information in accordance with this policy.

12. Children

Our services are intended for businesses and adults. We do not knowingly collect information from children under 18. If you believe a child has provided us with data, please contact us to delete it.

13. Changes to this policy

We may update this Privacy Policy. We will post the current version on this page with its last-updated date. If the changes are significant, we will notify you through the available channels.

14. Contact

If you have questions about this Privacy Policy or about the processing of your data, email us at invisiblemachine.ai@gmail.com. Data controller: Invisible Machine AI, Medellín, Antioquia, Colombia.