Privacy policy

Colombians in New York (COLENNY) is a non-profit community project for the Colombian and Latino community in the New York area. You can reach the site owner at hola@colombianosenny.com.

We only collect what you give us, and each item has a reason. If it is not on this list, we do not ask for it.

• Newsletter: your email address.
• Service requests: name, business, category, phone, email and, if you want, neighborhood and address.
• Your account: name, email and phone. Your password is never stored as such, only encrypted; if you sign in with Google, we hold no password of yours.
• Date of birth: only to check that you are of legal age. It is never published.
• Address and ZIP code: optional, and only to help us check that you live in the New York area when you request verification. They are never published.
• Your main social account: required to request verification, because it is how we check that you are who you say you are.
• Your public profile: photo, public name, profile address, headline, bio, areas of expertise, neighborhood, languages, years in New York, role, website, contact email and social links. You choose all of it, and none of it is visible until you publish it.
• If you register a business: its legal details —name, registration or EIN, entity type, corporate email and phone, address— and any documents you upload, such as licenses or the certificate of incorporation.
• Your verification history: when you requested it, what was decided, who decided it and when. It is what backs the «verified person» badge, so it is kept while you hold it.
• The date you last signed in, rounded to the day. The exact time is not kept for display.

We do not collect browsing data, we use no analytics, and we build no usage profiles.

Your account and your profile live in a database managed by Supabase, and the site is hosted on Vercel. Photos and logos you upload are stored in Supabase storage. Business documents go to a separate, non-public place: they have no open address, and viewing one generates a link that expires after five minutes.

⚠️ This changed, and it deserves to be said plainly: this policy used to say your account lived only in your browser. That was true when the site was pages only. It is not true anymore: your account is on the server, which is why you can sign in from another phone and recover your password by email if you forget it.

Your browser only keeps what is needed so you do not have to sign in again on every page: the session cookies, your name and photo to greet you at the top, and display preferences. See «Cookies».

The site's forms still work differently, and we do not want to suggest otherwise: what you type into the newsletter or the free-website request is stored in your own browser as a backup, and it reaches us over WhatsApp when you press send. Until you press it, we have received nothing. From that message on, the conversation is also governed by WhatsApp's privacy policy.

Having an account publishes nothing. Your profile starts private and only you can see it.

If you choose to publish it, it gets an address of its own —colombianosenny.com/perfil/your-name— that anyone can open without an account, and that you can share over WhatsApp or social media. It shows what you filled in on your public profile, the verification badge if you have one, since when you have been a member, and the date of your last activity rounded to the day.

What is never shown, even when you publish: your legal name, your account email, your phone, your address, your ZIP code, your date of birth and your business documents. It is not that the page does not draw them: they never leave the database.

Two more things worth knowing up front. Publishing requires being verified. And if you change your legal name, your verification is withdrawn and your profile goes back to private immediately, until you request it again.

To work, the site uses these services, and each one sees only what it needs:

• Supabase — database, accounts and file storage.
• Vercel — site hosting.
• Resend — sending the emails we send you: confirming your sign-up, recovering your password, and telling you the result of your verification.
• Google — only if you choose «sign in with Google». In that case Google confirms your email to us and does not give us your password.

The site also links out to external platforms (Instagram, TikTok, Facebook, YouTube, WhatsApp and partner sites). Following those links takes you out of Colombians in NY and under each platform's policy. When the Instagram feed is active, images are downloaded when the site is generated: your browser does not talk to Meta when you visit the page.

We use no advertising or tracking cookies, and there is no analytics. The only ones present are those needed for your session to work:

• The session cookies, set by Supabase when you sign in. They are what keep you inside; they go away when you sign out.
• Your name and photo, to greet you in the top bar without asking the server on every page. They carry neither your email nor your identifier, so they cannot be used to get into your account.
• If you checked «remember me», a marker for how long your session should last.

If you do not have an account, the site sets no cookies at all.

Almost everything can be done without writing to us, from your own profile:

• See and correct any of your data, whenever you want.
• Switch your profile back to private. It stops being visible immediately.
• Release your profile address. It stays blocked for thirty days before anyone else can take it, so nobody can impersonate you using a link that is still going around.
• Delete your account. Your data and your public profile are deleted. If you were the only person responsible for a business, that business stops being visible.

What you typed into the site's forms is in your browser: clear it by clearing this site's data in your browser settings.

And if you would rather ask us, or you want us to delete a conversation we had over email or WhatsApp, write to hola@colombianosenny.com and we will.