Privacy Policy

Last updated: September 25, 2026

Hey Rubio is operated by Jorge Rubio, a Colombian sole proprietor doing business under the trade name "Hey Rubio". This policy explains what data we collect when you visit heyrubio.com or hire our services, and what we do with it.

1. What data we collect

Data you give us directly: in the two-step form on this site, the kind of problem you want solved, your timeline, your company size and who makes the decision; then your name, email and WhatsApp number, plus an optional sentence describing your situation in your own words. If you choose to, also your website or social profiles for an automated pre-diagnosis, or documents and answers from your own AI assistant that you share with us to enrich that diagnosis.

Data we research ourselves: publicly available information about your business (website, social profiles, reviews) to prepare your pre-diagnosis. None of it is treated as confirmed until you validate it on the call.

Discovery call data, if applicable: with your explicit consent, we record and transcribe the call to document your process accurately. It is never shared outside the Hey Rubio team without your authorization, unless you agree to take part in a case study (separate consent).

2. Who we share data with

We do not sell your data to anyone. We use the following tools to run the business — each one processes data under its own security policy:

3. Cookies and analytics

Without your consent we use no cookies and no tracking that identifies you. The only two things we keep in your browser are technical: your answer to the banner (so we don't ask on every page) and, for the length of your visit, which link or site brought you here (session storage, deleted when you close the tab, and only sent to us if you submit the form).

When you arrive you'll see a banner with two options. If you choose "only what's necessary" (or don't choose), the site works exactly the same — no degraded version, no content hidden behind the yes — and all we do is count visits anonymously and in aggregate: PostHog computes on its server a temporary identifier that changes every day, with no cookies, that doesn't recognize you across visits and doesn't record your session; and Google Analytics 4 receives cookieless signals under its "consent mode".

If you accept, we turn on Google Analytics 4 (through Google Tag Manager) and PostHog, which tell us which sections get read, where people drop off the calculator and which pages don't work. With PostHog we also record the browsing session (clicks, scrolling and what's on screen) to find where the site gets stuck; what you type into form fields is masked and not recorded, and recordings are deleted after 30 days. We also turn on the Meta pixel, which tells Facebook and Instagram that you visited the site or sent the form, so we can measure ads and show them to people who already know us; we never send your name, email or phone. We use this to fix the site, not to follow you around.

There are no advertising pixels — no Meta, no Google Ads, no remarketing of any kind — and we don't sell or hand over that data to third parties for commercial purposes.

To change your decision, clear this site's data in your browser and come back: the banner will appear again. You can also write to privacy@heyrubio.com and we'll sort it out with you.

4. If you're a client and we operate your own customers' data

When the system we build for you processes data about your customers or leads (for example, a missed-call response system or payment reminders), you are the data controller for that data; Hey Rubio processes it only according to the instructions in your contract. You warrant that you have the legal consent of every contact who receives automated messages or calls, including compliance with the telephone regulations that apply in your country.

5. Your rights

You can ask at any time to see what data we hold about you, correct it, or delete it (except what we must keep for contractual or tax obligations). Write to privacy@heyrubio.com.

6. International transfers and retention

Your data may be processed in Colombia, the United States, or any country where our providers (section 2) have infrastructure. We keep it only as long as needed to fulfill the purpose of this policy or a legal obligation.

7. Changes to this policy

Any change is published here with a new update date. A material change in the third parties we use or in tracking tools is announced before it goes live, not after.

This is an English translation. If there is any discrepancy, the Spanish version prevails.