Privacy policy.

This is an English translation for your convenience. The Spanish version at homli.com.co/privacidad/ is the one that governs.

This policy is in effect from October 26, 2026. Homli's databases will remain in effect for as long as Homli operates and, after that, only for the retention periods stated in this policy.

Last updated: November 4, 2026.

Who handles your data

Homli, a service for homes and workspaces based in Cali, Valle del Cauca, Colombia, with an address at Calle 14 # 105-17, local 12, Centro Comercial El Lago, Ciudad Jardín, is the controller of your personal data. You can write to us at [email protected] or on WhatsApp at +57 300 117 8292.

This policy complies with Law 1581 of 2012 on personal data protection and its regulations, now compiled in Decree 1074 of 2015.

What data we collect

Only what we need to serve you:

• Your name, phone or WhatsApp number and, if you give it to us, your email.
• The address where we provide the service and directions to get there.
• The details of the job: size of the space, window measurements and the photos you send us for a quote.
• The history of your services and payments: date, amount, payment method and reference.
• The short videos of the space that the professional records on arrival and at the end, with no audio and without focusing on people.
• If you create an account at app.homli.com.co: the name, address, mobile number and billing details, including your ID number, that you save in My details or with the box to save your details when you book (if you do not check it, we do not keep them for next time), the professionals you save as favorites, and the ratings you give and receive.
• If you book at app.homli.com.co with a confirmed email and agreed to let us help you finish your purchase: the step you reached, the service, the dates and time you chose, the price and, if you already entered them, your name, mobile number and neighborhood.
• The record of each acceptance of the terms and policies: the version, the date and time, the IP address and the device.
• The account where you receive a refund by bank transfer and the receipt of a Bre-B payment.
• The cases you open, with their photos, videos and decisions.

We do not ask clients for sensitive data, such as health information, origin or beliefs. Your card details go directly to our payment gateway: Homli does not see or store them.

Homli serves adults only: if you are a minor, do not create an account or make a purchase. Videos are recorded without focusing on people; if a child or teenager appears, the video is used only as evidence, with the same restricted access.

If you sign in to app.homli.com.co with your Google account, you authorize Google to share your name, email and profile photo with Homli. We use them only to identify your account, fill in your details when you book and send you the confirmation and the receipt. Homli does not receive your Google password or access anything else in that account, and you can remove our access whenever you want from your Google account settings.

You are responsible for making sure the data you give us is true and up to date. If you give us the data of another person, for example whoever will open the door on the day of the service, a tenant or a guest, you confirm that you have their permission to do so.

What we use it for

• Quoting, scheduling and coordinating the service you request.
• Charging for the service and issuing payment records.
• Keeping the data of people who buy without creating an account, on WhatsApp or in Pay here, to coordinate and invoice the service.
• Using your ID number to make sure the welcome discount is used only once per person.
• Handling the guarantee, requests, complaints and claims.
• Keeping evidence of how the space looked before and after the service, to resolve guarantee, damage and theft cases.
• Keeping you informed about your service: confirmations, schedule changes and reminders.
• Meeting legal, accounting and tax obligations.
• Improving the service with statistics that do not identify you.
• Writing to you by WhatsApp or email, if you left a purchase unfinished, to help you finish it. We only do this if you agreed to it in the privacy box on the platform.

We will only send you promotions if you say yes, and you can ask us to stop whenever you want.

We review more carefully the claims of anyone who has a refund flagged as suspicious because the evidence contradicted it, and we suspend accounts in the cases set out in the terms. You can ask us why and give us your side of the story.

Your authorization

When you write to us and give us your data to quote, schedule or pay for a service, you authorize us to handle it for the purposes in this policy. If you do not agree, we cannot provide the service, because without a name, a phone number and an address it is not possible.

You authorize the recording of the space separately, in its own checkbox when you buy, apart from accepting the terms. It is a condition of the service: if you do not give it, we cannot provide it.

Who we share it with

Homli does not sell, rent or transfer your personal data. However, if the operation of Homli passes to another person or company, your data passes to the new controller for the same purposes; we let you know beforehand, with their name, and you can ask for it to be deleted.

Only the following know your data, to the extent they need it:

• The professionals: before taking your service they see the neighborhood, the date and time, the description of the job and your rating as a client, never your address or contact details. The one who takes it receives your name, the address and the contact mobile number.
• The providers that help us operate: Supabase (database, accounts, documents and videos; United States), Cloudflare (hosting of the website and the platform, and email forwarding; United States), Resend (email; United States), Google (signing in with Google, Google Analytics and the inbox where we receive email; United States), Bold (payments; Colombia) and WhatsApp, by Meta (United States). They act as processors: they use the data only to provide their service to us and are bound by confidentiality. Some store the information on servers outside Colombia.
• The authorities, when a law or a court order requires it.

WhatsApp and the payment gateway also handle, on their own account, the data you give them directly, under their own privacy policies, which we recommend you read. Homli is not responsible for that handling.

Photos and videos of your space

The photos you send us for a quote are used only to quote, provide the service and resolve a guarantee case or a claim. We never publish them without your express permission.

The videos of the space are recorded by the professional, one on arrival and another at the end, with no audio and without focusing on people. Their only purpose is to serve as evidence to resolve guarantee, damage and theft cases. They are seen only by you, the professional who provided the service and the Homli team members who handle the case. They are not published, not used for advertising and not shared with other people who provide services.

Each video is saved with the date, the time and the location of the phone of the professional who records it.

We keep them for 120 days after the service and then we delete them. They are kept longer only if there is an open claim, until it is closed, or if an authority asks us to keep them or hand them over; in that case they are handed over only to that authority and through the channel of its request.

You have the same rights over your videos as over the rest of your data: you can ask to see them, find out how we have used them and ask us to delete them before the deadline. Deletion does not apply while there is a legal or contractual duty to keep them, such as an open claim or a request from an authority; in that case we reply in writing and tell you how long they will be kept.

If you provide services with Homli

If you sign up to provide services with Homli, we handle your identification and contact details, your bank account, the services you provide, your ratings and the videos of those services. We use them to review your sign-up, post services for you, receive payment for your services on your behalf and transfer it to you, manage your social security contributions if you authorize it, handle client claims and meet legal obligations.

We also handle your date of birth, your RUT (Colombian tax registration), the trades, areas and hours you choose, the certificates you upload, what you receive each month, your social security payment forms, the cases you are involved in and the location of your phone when you record a video or check in on arrival. We check your social security when what you receive exceeds one minimum monthly wage. The client sees your name, that your identity is verified and your ratings, and their receipt shows your name and ID number, because you are the one selling the service.

With your separate authorization we check your records with the National Police, the Inspector General's Office (Procuraduría), the Comptroller General's Office (Contraloría) and the National Registry of Corrective Measures; from that check we keep only the date, the sources, the result and who decided, never the certificate, and the result is deleted one year after the relationship ends.

The photo of your face and the photos of your ID document are sensitive data: you are not required to authorize them and you can verify yourself by video call. The selfie is deleted once you are verified and the photos of your ID document, once we decide on your sign-up. The contract, the acceptances and the payouts are kept for ten years (Law 962 of 2005, article 28).

You can access, update, correct and delete your data and revoke your authorization by writing to [email protected].

How long we keep it

While you are a client and for as long as needed to handle guarantee cases and claims, and to defend ourselves in legal proceedings if there are any. The videos of the space, 120 days after the service, unless there is an open claim or a request from an authority. What we keep from an unfinished purchase, until you pay for it, cancel it or the date of its first service passes. Payment and billing data is kept for as long as accounting and tax rules require. After that it is deleted or anonymized.

Your rights

As the owner of your data you have the right to:

• Access, update and correct your data.
• Ask for proof of the authorization you gave us.
• Find out how we have used your data.
• Revoke your authorization and ask us to delete your data, except when a legal or contractual obligation requires us to keep it.
• Check your data free of charge.
• File complaints with the Superintendencia de Industria y Comercio (Colombia's Superintendence of Industry and Commerce), after first sending your inquiry or claim to us.

How to exercise them

Write to us at [email protected] or on WhatsApp with your name, your phone number and what you need. We answer inquiries within 10 business days at most and claims within 15 business days at most. If we need more time, we let you know before the deadline and explain why; in that case the law gives us up to 5 more business days for inquiries and up to 8 for claims. If your claim is missing information, we ask you for it within 5 business days of receiving it; if two months go by without you sending it, the claim is considered withdrawn.

Inquiries and claims about personal data are handled by Homli, at [email protected] and on WhatsApp at +57 300 117 8292. Before answering, we confirm that you are the data owner, their successor, their representative or their attorney. In a claim, tell us your identification, the facts, where we should reply and any documents you want to submit. Within 2 business days of receiving it complete, your data is flagged as "claim in progress" until we decide it, and if the claim is not ours to handle, we forward it to whoever should handle it within 2 business days.

Security

We protect your information with reasonable technical and administrative measures, give access only to those who need it to serve you and require the same from our providers. No system is infallible: if an incident affects your data, we will act to contain it and report it to the Superintendencia de Industria y Comercio, as the law requires.

Website and cookies

We use Google Analytics 4, by Google LLC (United States), to measure statistically how the site is used: the pages visited, the clicks, how far you scroll on each page, the campaign or ad you came from and your approximate city. To do this, Google Analytics stores first-party cookies in your browser, such as _ga, with a random identifier, which you can block or delete from your browser. In addition, app.homli.com.co uses a necessary cookie to keep you signed in, the site stores the language you choose in the homli_idioma cookie, while you are signed in the homli_nombre cookie keeps your first name to greet you in the homli.com.co menu and the homli_iniciales cookie your initials to show them in the mobile menu (it is deleted when you log out or the session expires), and Cloudflare, our hosting provider, may log technical data such as the IP address to keep the site secure. If you leave a purchase unfinished on app.homli.com.co, the platform stores in your browser what you chose and the details you typed, only so you can pick it up again. Homli does not receive that information, which is deleted when you pay, cancel, log out or the service date passes, and the homli_carrito cookie only tells the site menu that you have a pending purchase.

Changes to this policy

You can buy as a guest or create an account at app.homli.com.co. If we change what we store in your account, we update this policy first and let you know.

If we change who the controller is or what we use your data for, we let you know by email or WhatsApp before the change takes effect, and if we add a purpose, we ask you for a new authorization. We publish any other changes here with their date.