Privacy Policy

2. Personal Data Collected

Depending on the product phase and the level of interaction, we may collect the following personal data:

Capture phase (landing page forms):

• Full name.
• Email address.
• Professional role.
• Team size.
• Country of residence.

Product usage phase (active subscription):

• All data listed above, plus:
• Billing data (payment information processed by third-party payment gateways).
• Content generated within the platform (summaries, decisions, commitments, tasks).
• Meeting audio processed through the platform (when applicable).
• Usage and navigation data within the product.

3. Purpose of Data Processing

The collected personal data will be used for the following purposes:

• Account management: Creation, administration and authentication of user accounts.
• Service delivery: Meeting processing, summary generation and commitment tracking.
• Billing: Payment management, subscriptions and invoice or receipt issuance.
• Product communications: Notifications about account status, service updates, new features and scheduled maintenance.
• User support: Handling and resolving requests, inquiries and bug reports.
• Service improvement: Product usage analysis to optimize features and user experience.
• Internal statistical analysis: Generation of aggregated, anonymous metrics for continuous infrastructure improvement.
• Promotion validation: Verifying eligibility for launch discounts or benefits.
• Legal compliance: Fulfilling legal, regulatory obligations or competent authority requests.

4. No AI Model Training Protocol

Your information is processed exclusively to deliver the contracted service. We use technology infrastructure providers (see Transfers section) under configurations that prioritize user data privacy.

5. International Data Transfer

To deliver the Service, personal data may be hosted and processed on technology infrastructure located outside Colombia. Our primary providers include:

• Firebase / Google Cloud Platform — Data hosting, authentication and storage.
• Deepgram — Voice processing and audio transcription.
• Third-party AI models — Natural language processing for summary generation and decision detection.

These transfers are conducted under each provider's contractual privacy and security standards, and in accordance with Article 26 of Law 1581 of 2012 and the international data transfer provisions of the Superintendence of Industry and Commerce (SIC) of Colombia.

6. Information Security

Datascination implements reasonable security measures to protect personal data against unauthorized access, alteration, disclosure or destruction, including:

• Encryption of data in transit (HTTPS/TLS) and at rest.
• Secure authentication via OAuth protocols.
• Access control based on the principle of least privilege.
• Infrastructure access monitoring.

However, no electronic transmission or storage system is completely secure. Datascination cannot guarantee absolute data security but commits to implementing and maintaining protection measures appropriate to the nature of the processed information.

7. Data Retention and Deletion

Datascination will retain the user's personal data as long as:

• An active contractual relationship exists (active subscription).
• It is necessary to fulfill the purposes described in this policy.
• A legal obligation for retention exists.

Once the contractual relationship ends or a deletion request is received, data will be removed from production systems within a reasonable timeframe, not exceeding thirty (30) business days, unless a legal obligation requires retention for an additional period.

8. Data Subject Rights (Law 1581 of 2012)

In accordance with Law 1581 of 2012 and Decree 1377 of 2013, as a data subject you have the right to:

• Access your personal data and information regarding its processing.
• Update your personal data when it is inaccurate, incomplete or outdated.
• Rectify information that is incorrect.
• Request deletion of your data when you consider it is not being processed in accordance with constitutional and legal principles, rights and guarantees.
• Revoke authorization granted for the processing of your personal data.
• Access free of charge your personal data that has been subject to processing.

To exercise any of these rights, the data subject may send a request to the contact channel indicated in Section 1 of this policy. Datascination will address requests within the legally established timeframes:

• Inquiries: Within ten (10) business days following receipt of the request.
• Complaints: Within fifteen (15) business days following receipt of the complaint.

If a satisfactory response is not received, the data subject may appeal to the Superintendence of Industry and Commerce (SIC) as the competent authority for data protection matters in Colombia.

9. Cookies and Tracking Technologies

The website may use cookies and similar technologies to improve the browsing experience, analyze site usage and personalize content. The user may configure their browser to reject cookies, which may limit some site functionality.

10. Modifications to this Policy

Datascination reserves the right to modify this Privacy Policy at any time. Modifications will be notified to the data subject via the registered email address or through a prominent notice on the Platform, at least fifteen (15) days before taking effect.

Continued use of the Service after the modifications take effect shall constitute acceptance of the new policy.

11. Governing Law

This Privacy Policy is governed by the laws of the Republic of Colombia, particularly Law 1581 of 2012 and Decree 1377 of 2013. Any dispute shall be resolved by the competent authorities in the city of Bogotá, D.C., Colombia.