Skip to content

Privacy policy

Version 2026-10-16 · Effective October 16, 2026

This English text is a courtesy translation. If it differs from the Spanish version, the Spanish version prevails.

This Data Processing Policy explains how Aureo Technologies S.A.S., the company that operates Áureo Market ("Áureo," "we"), processes personal data from people who visit aureomarket.co, join the waitlist, use our app, or interact with verified pawn shops through the platform. Anonymity protects your private life from curiosity, not from legal obligations: when you sign a pawn contract in person, full identification is mandatory under Colombian law. Áureo keeps only what the law requires and deletes the rest once retention periods expire.

Data controller

The controller of your personal data is Aureo Technologies S.A.S., the Colombian company that operates Áureo Market.

  • Legal name: Aureo Technologies S.A.S.
  • Tax ID (NIT): 902.103.730-3
  • Registered address: Carrera 53 No. 46-27, Office 702, Medellín, Antioquia, Colombia
  • Phone: +57 316 834 8777
  • Privacy email: privacidad@aureomarket.co
  • Website: aureomarket.co

Team responsible for inquiries and claims

The Personal Data Protection Area of Aureo Technologies S.A.S. handles inquiries, claims, and requests from data subjects. You can write to privacidad@aureomarket.co or send a letter to Carrera 53 No. 46-27, Office 702, Medellín, Antioquia, Colombia.

Scope

This policy applies to clients who quote or book appointments, representatives of verified shops, website visitors, and people who join the waitlist. It does not cover processing by a shop when you sign a contract at their premises; in that case, the shop's policy and legal obligations apply.

Data we collect

We collect only the information needed to operate an information marketplace for pawning and selling gold. Depending on the stage, we may process:

  • Waitlist data: email, city, and profile (person or shop), together with the date of your authorization, your language, and the version of this policy you accepted.
  • Quote data: estimated weight, item type, approximate karat, reference neighborhood or area, and temporary alias.
  • Account data: name, email, phone, language preferences, and privacy settings.
  • Appointment data: date, time, selected shop, and confirmation code shown in the app.
  • Operation data: signing confirmation, amounts reported by client and shop, and discrepancy records for commission billing.
  • Shop data: legal name, tax ID (NIT), legal representative details, verification documents (KYB/KYC), and platform performance metrics.
  • Identity verification data: the verification result and, during the process, an image of your ID document and a liveness check (see "Sensitive and biometric data").
  • Technical data: IP address, device type, browser, security logs, essential cookies, and aggregated analytics.
  • Full identification data (ID number and document): only when Colombian law requires it at signing of the pawn contract at the shop. Áureo does not give your ID document to the shop.

Sensitive and biometric data

To verify the identity of users and shop representatives we use a specialized verification provider (Didit). The process takes a photo of your ID document and a liveness check with an image of your face. Biometric data is sensitive data under article 5 of Law 1581 of 2012.

  • Answering questions about, or providing, sensitive data is optional: you are not required to authorize its processing.
  • We process biometric data only with your prior, express, and informed authorization, which we request separately before verification starts.
  • We use it only to verify your identity and prevent fraud and impersonation. We do not use it for any other purpose.
  • Our systems keep the verification result (approved, rejected, or under review) and the minimum data needed to prove it, not the images of your document or face. The provider keeps them under its contract with us and applicable law.
  • If you do not authorize biometric verification, you cannot use the features that require it, but you can still browse the public information on this site.

Purposes of processing

  • Manage the pilot waitlist: record your request, tell you when you can get in, and send you information about the launch in your city.
  • Facilitate comparison of offers from verified shops.
  • Enable anonymized or filtered communication until you confirm an appointment.
  • Verify the identity of users and the identity and eligibility of shops (KYC/KYB), including the biometric verification described above.
  • Schedule, remind, and confirm in-person appointments.
  • Record closed operations, calculate commissions, and prevent fraud.
  • Handle inquiries, claims, support, and data-subject rights.
  • Comply with legal, accounting, and anti-money-laundering obligations.
  • Improve platform security, performance, and user experience.

Who we share data with

We do not sell or rent personal data. We may share limited information in these cases:

  • With the shop you book an appointment with: once you confirm the appointment, that shop receives your name and mobile number, only to serve you and coordinate that appointment. Before you book, shops see only a temporary alias and your quote details.
  • With providers that supply infrastructure, authentication, email, identity verification, analytics, or support, as data processors under contract and confidentiality.
  • With competent authorities when there is a valid legal requirement.
  • In legitimate corporate processes, with continuity of the safeguards in this policy.

What we don't do

  • We do not sell or commercialize your personal data.
  • We do not share your name or mobile number with any shop before you confirm an appointment, or with any shop other than the one you booked.
  • We do not custody jewelry, gold, or money: the transaction happens in person between you and the shop.
  • We do not require full identification to quote or compare offers in the app.
  • We do not use your data for unrelated third-party advertising.

Security

We apply reasonable technical, administrative, and organizational measures to protect data against unauthorized access, loss, alteration, or disclosure. These include encryption in transit, access controls, audit logs, sensitive-data filtering in chat, and periodic vendor review. No system is perfect; if we detect a relevant incident, we will act as required by law and notify the Superintendence of Industry and Commerce when applicable.

Retention and database validity

We keep data only as long as needed for the purposes described and applicable legal obligations. Our databases remain in force while the company carries out its corporate purpose and they are needed for those purposes.

  • Waitlist data: until we invite you to the pilot or you ask us to delete it, whichever comes first, and at most 24 months from your request. Proof of your authorization is kept as long as the law requires us to show it.
  • Contract, commission, and operational traceability records: as long as commercial, tax, and AML regulations require.
  • Quote data not converted to an appointment: for a limited period, then deletion or anonymization.
  • Inactive accounts: until you request deletion or the applicable legal retention period expires.
  • Security technical logs: for a reasonable time to investigate and respond to incidents.

Your rights

As a data subject in Colombia (article 8 of Law 1581 of 2012) you have the right to:

  • Know, update, and correct your personal data.
  • Request proof of the authorization you gave us, except where the law does not require it.
  • Be informed, on request, of how we have used your data.
  • File complaints with the Superintendence of Industry and Commerce (SIC) for violations of the law, after completing the inquiry or claim process with us.
  • Revoke your authorization and request deletion of your data when there is no legal or contractual duty to keep it.
  • Access your personal data free of charge.

How to exercise your rights

  • Email privacidad@aureomarket.co with the subject "Personal data rights". Include your name, ID number, how you want to receive our answer, the right you want to exercise (access, update, correction, deletion, or revocation), and any supporting documents.
  • You can also send a letter to Carrera 53 No. 46-27, Office 702, Medellín, Antioquia, Colombia.
  • If you have an account in the app, you can request an export or deletion of your data from your account settings.
  • To leave the waitlist, reply to any of our emails or write to the privacy email.
  • We may ask for more information to verify your identity or that of your representative. The process is free.

Inquiries

We will answer each inquiry within at most ten (10) business days from the date we receive it. If we cannot answer in that time, we will tell you why and when we will answer, which will be no later than five (5) business days after the first deadline (article 14 of Law 1581 of 2012).

Claims

  • If you believe your data should be corrected, updated, or deleted, or that we have breached the law, you can file a claim with your ID, a description of the facts, your address or email, and any documents you want to rely on.
  • If the claim is incomplete, we will ask you to complete it within five (5) business days of receipt. If two (2) months pass without you completing it, we will consider the claim withdrawn.
  • Within at most two (2) business days we will mark the record "claim in progress" with the reason, until it is decided.
  • We will resolve the claim within at most fifteen (15) business days from the day after we receive it. If that is not possible, we will tell you why and when we will answer, which will be no later than eight (8) business days after the first deadline (article 15 of Law 1581 of 2012).
  • Once this process is complete, you can go to the Superintendence of Industry and Commerce (SIC).

Cookies and similar technologies

We use cookies and similar technologies to maintain your session, remember preferences (such as language or theme), measure aggregated site usage, and protect the platform. You can configure your browser to reject non-essential cookies; some features may become unavailable.

International transfers

Some infrastructure and cloud service providers may process data outside Colombia. When that happens, we adopt contractual and security measures consistent with applicable law to protect your information.

Minors

Áureo is not directed at people under 18. We do not knowingly collect data from minors. If we detect such processing, we will delete it as required by law.

Effective date, version, and changes

This policy is effective from October 14, 2026 (version 2026-10-14). We may update it to reflect legal, technical, or service changes. We will publish the current version on this page with its date. If a change is material, we will tell you before it takes effect and, if the purpose of processing changes, we will ask for a new authorization.

Contact

For privacy questions, authorizations, or exercising your rights, email privacidad@aureomarket.co. Aureo Technologies S.A.S. · NIT 902.103.730-3 · Carrera 53 No. 46-27, Office 702, Medellín, Antioquia, Colombia · +57 316 834 8777.