Privacy policy

Effective date: May 22, 2025

1. Introduction

This policy describes how AVI Asistente Virtual (hereinafter, "AVI") collects, uses, stores and protects its users' personal information, both in Latin America and in the United States. This policy complies with Colombia's Law 1581 of 2012, the General Data Protection Regulation (GDPR) where applicable, as well as the California Consumer Privacy Act (CCPA) and other relevant U.S. state laws.

2. Information we collect

We collect personal information that the user provides directly when registering or interacting with our services. This may include, among others:

• Full name
• Email address
• Phone number
• Company or professional activity
• Browsing data (IP, cookies, approximate location)
• Messaging information through integrations with Meta and other providers

3. Purposes of processing

The personal data collected will be used to:

• Provide and improve our services.
• Manage the commercial relationship.
• Personalize the user experience.
• Contact the user for operational or promotional purposes, in accordance with local regulations.
• Comply with legal obligations applicable in each jurisdiction.

4. Legal basis for processing

In Latin America, AVI acts under the user's express consent and other legal bases provided for in national legislation. In the United States, processing is based on the necessity of the service, explicit consent (where required by the CCPA), and compliance with legal obligations.

5. Rights of data subjects

Users may exercise the following rights, in accordance with the legislation of their country of residence:

• Access, rectify and update their data.
• Request deletion of the information or withdraw consent.
• Object to the processing of their data for specific purposes.
• In the U.S., California residents may exercise their rights of access, deletion and opt-out of the sale of personal information as provided by the CCPA.

6. International data transfers

AVI may transfer data to third parties located in other jurisdictions (such as technology service providers) provided they offer adequate protection safeguards, including standard contractual clauses or recognized certifications such as the Privacy Shield (where applicable).

7. Information security

We implement reasonable administrative, technical and physical security measures to protect personal information from unauthorized access, loss or misuse. These measures include encryption, authentication, firewalls and continuous monitoring.

8. Use of cookies and similar technologies

We use cookies and similar technologies to improve the user experience, analyze traffic and personalize content. Users may configure their browser to block them or to be notified about their use.

9. Data retention

Data will be retained for as long as necessary to fulfill the purposes mentioned or while a contractual or legal relationship remains in force.

10. Changes to this policy

This policy may be updated periodically. Any substantial change will be communicated on the website or through other direct means. Continued use of the services implies acceptance of the changes.

11. Contact

To exercise your rights or raise questions or complaints related to your personal data, you may contact: soporte@aviasistente.com

12. Use of Google Workspace data

Our application allows users to connect their Google account in order to use the Google Sheets and Google Calendar features.

Data we access

With the user's consent, the application may access:

• Google Sheets data needed to read, create and update spreadsheets used by the application.
• Google Calendar data needed to create, view, update and delete events related to the appointments requested by the user.

The application only accesses the information necessary to provide the features requested by the user.

How we use the data

Data obtained through the Google Workspace APIs is used exclusively to:

• Save and update the information provided by the user in Google Sheets.
• Create, view, modify and delete events in Google Calendar when the user requests it.
• Provide the application's core functionality.

We do not use this data for advertising, profiling, or any purpose other than the operation of the application.

Use of artificial intelligence

The application uses external artificial intelligence providers, including OpenAI and DeepSeek, to generate responses during conversations with the user.

Data obtained through the Google Workspace APIs (Google Sheets and Google Calendar) is not used to develop, improve or train artificial intelligence or machine learning models.

Processing of such data is carried out solely to execute the actions requested by the user, such as saving information in Google Sheets or creating events in Google Calendar.

Data sharing

We do not sell or share data obtained through the Google Workspace APIs with third parties for advertising, commercial, or artificial intelligence model training purposes.

Data may only be processed by the technology providers necessary for the operation of the application, such as OpenAI and DeepSeek for conversation processing, in accordance with their respective privacy policies.

Data protection

We implement reasonable technical and organizational measures to protect information against unauthorized access, alteration, loss or disclosure.

OAuth credentials and access tokens are stored using appropriate security mechanisms and are used solely to provide the services authorized by the user.

Data retention and deletion

We retain data only for as long as necessary to provide the services requested by the user or while an active account exists.

Users may request deletion of their data and revoke the application's access to their Google account at any time from their Google account settings or by contacting us directly.

Compliance with Google's User Data Policy

The use of data obtained through the Google Workspace APIs complies with the Google API Services User Data Policy, including the Limited Use requirements.

User data obtained through the Google Workspace APIs is not used to develop, improve or train artificial intelligence or machine learning models, nor is it transferred to third parties for that purpose.