Personal Data Processing Policy

1. Data Controller

Dinnartec, a company domiciled in Colombia, is the controller of personal data collected through its platforms and services. For any privacy-related inquiry you can reach us at hello@dinnartec.com.

2. Data we collect

We collect only the data strictly necessary to operate the service and fulfill the purposes described in this Policy.

• Identification data: name, ID document, email, WhatsApp or phone number.
• Account data: credentials, company information, role, and permissions.
• Business and usage data: information entered into the platforms (clients, products, transactions, content), service usage, and activity metrics.
• Technical data: IP address, device type, browser, cookies, and activity logs.
• Payment data: handled by certified providers; Dinnartec does not store full card information.

3. Purposes of processing

We process your data for the following purposes:

• To provide, operate, and maintain the contracted services.
• To create, authenticate, and manage user accounts.
• To process subscriptions, payments, billing, and recurring charges.
• To deliver customer support and assistance.
• To improve, personalize, and develop new products and features.
• To train, fine-tune, and operate AI models and agents used within the service, on customer and usage data, in aggregated or anonymized form whenever possible.
• To send operational, transactional, security, and — if you authorize it — commercial communications.
• To comply with legal, accounting, and regulatory obligations.
• To prevent fraud, abuse, and protect the security of the service.

4. Authorization to use your data

By registering and/or using our services, you freely, expressly, and informedly authorize Dinnartec to collect, store, use, circulate, process, analyze, and delete your personal data in accordance with the purposes described in this Policy.

This authorization expressly includes the use of data to train and improve our products, AI models, and agents, as well as to generate aggregated statistics, metrics, and insights that help optimize the service.

5. Third-party integrations

To deliver the service we integrate with external providers (hosting, databases, authentication, messaging, payments, analytics, AI, communications, and others). You authorize Dinnartec to share with these providers the data strictly necessary to operate the service.

These third parties act as data processors under agreements that require security and confidentiality levels equivalent to those of this Policy. Some providers may be located outside your country of residence, which may involve international data transfers, which you also authorize by accepting this Policy.

6. Data retention

We retain data while your account remains active and for any additional periods required by legal, accounting, or security obligations. Once those periods are met, data is anonymized or deleted.

7. Data subject rights

As the data subject you have the right to:

• Know, update, and rectify your personal data.
• Request proof of the authorization granted.
• Be informed about the use given to your data.
• File complaints before the competent authority for breaches of data protection regulations.
• Revoke your authorization and/or request deletion when no legal or contractual duty requires retention.
• Access your data free of charge under applicable law.

To exercise these rights, write to hello@dinnartec.com clearly stating your request and contact details.

8. Information security

We implement reasonable technical, administrative, and organizational measures (encryption in transit, access controls, backups, monitoring, and audits) to protect your data against unauthorized access, loss, alteration, or disclosure.

9. Cookies and similar technologies

We use cookies and similar technologies for authentication, user preferences, usage metrics, and service improvement. You can configure your browser to reject them, although some features may stop working properly.

10. Minors

Our services are intended for adults. We do not knowingly collect data from minors. If we detect information from a minor, we will proceed to delete it.

11. Changes to this Policy

We may update this Policy to reflect legal, technical, or operational changes. We will publish the current version on our website and indicate the date of the last update. Continued use of the service after publication implies acceptance of the new version.

12. Contact

For any privacy, data protection, or rights-related inquiry: hello@dinnartec.com.