Trust
Trust Center
Security posture and data practices.
AlunaIQ is pre-launch: we do not yet have a live product deployed with customers, nor any security or compliance certifications (SOC 2, ISO 27001, or others). This page describes, plainly, how we handle data today — on this website — and the standard we commit to as the product moves into production.
Infrastructure
The site and its security layer (DNS, TLS, abuse protection) run on Cloudflare. All traffic travels encrypted over HTTPS.
Who we share data with
We use three external providers: HubSpot (CRM, commercial contact management), PostHog (product analytics, hosted in the U.S., only with your consent), and Cloudflare (infrastructure). We do not use or sell your data to third parties to train models or for any purpose beyond what is described in the Privacy Policy.
Data retention
Contact form data: kept in the CRM for the commercial lifecycle, until you request deletion. Analytics data: a maximum of 1 year.
Control over analytics
Analytics (PostHog) does not load by default: it only activates if you explicitly accept the analytics cookie category, and you can revoke that consent at any time via "Cookie Settings" in the footer.
Certifications and compliance
We don't hold any third-party security or compliance certifications today. We comply with Colombian Law 1581 of 2012 (Habeas Data) for how this site processes personal data. As the product moves into production with customers, we'll assess which certifications apply at that point — and update this page accordingly, not before.
Reporting a security issue
If you find a vulnerability or have a security concern, write to us directly at [email protected].