Personal data policy

This policy explains which personal data we receive through numinet.co, what we use it for, who we share it with and how you can exercise your rights. It is issued under Colombian Law 1581 of 2012, Decree 1377 of 2013 (compiled in Decree 1074 of 2015) and other Colombian data protection rules. This English version is a courtesy translation; the Spanish text governs.

1. Data controller

Numi AI, domiciled in Medellín, Antioquia, Colombia, is the controller of the data it receives through this site. You can reach us through these channels:

City: Medellín, Antioquia, Colombia
Email: atencionnumi@gmail.com
Phone and WhatsApp: +57 312 767 6549
Website: https://www.numinet.co

2. What data we collect

Only what you give us, plus the minimum technical data the site needs to work:

Contact form: name, WhatsApp number, email and the description of what you need.
Appointment booking: name, WhatsApp, email, the date and time you choose and, if you came from the form, your message.
Chat assistant (Selene): the messages you type and a random conversation identifier. We do not ask for identifying data in the chat.
Technical data: the IP address and browser data any web server receives when serving a visit, used for security and to limit abusive form submissions.

We do not ask for sensitive data (health, racial or ethnic origin, political views, beliefs, biometric data, etc.) or data about children. Please do not include it in your messages. This site is not directed at anyone under 18.

3. What we use it for

To answer your request and contact you by WhatsApp or email to arrange the call you asked for.
To book your appointment and send you its confirmation and reminders.
To assess your case and prepare a proposal for your business.
To answer your questions in the chat.
To protect the site against abuse and fraud.

We do not use your data for advertising, we do not build profiles with it, and we will not send you bulk marketing without a separate, additional authorization.

4. Authorization

Before you send the contact form or book an appointment we ask you to tick a box by which you give prior, express and informed authorization to process your data under this policy. The box is never pre-ticked. We keep the date and the policy version you accepted as proof of that authorization.

When you use the chat, what you type is processed to answer you; the notice next to the text field tells you so before you send.

5. Who we share it with

We do not sell or transfer your data. To run the site we use providers that process it on our behalf, only to provide their service to us (data processors):

Vercel Inc. (United States): hosting of the site and technical access logs.
Supabase Inc.: database where we keep the contact form submissions.
Resend (Plus Five Five, Inc., United States): delivery of the internal emails that tell us about a new request, and of appointment confirmation and reminder emails.
Railway Corp. (United States): server that runs the appointment calendar and the chat assistant.
OpenAI, L.L.C. (United States): processes the messages you type into the chat assistant to generate its reply.

Some of these providers store or process information outside Colombia, mainly in the United States. With your express authorization you accept that international transfer (Law 1581 of 2012, art. 26). If you talk to us on WhatsApp, that conversation is also governed by WhatsApp (Meta) policies.

We may also disclose data to an authority that requests it in the exercise of its legal powers.

6. How long we keep it

We keep form and booking data while there is a business relationship or an active conversation with you and, afterwards, only as long as needed to meet legal obligations or handle claims. If you ask us to delete it and there is no legal duty to keep it, we delete it.

The chat history is stored in your own browser and you can clear it at any time (see the Cookie policy).

7. Your rights

As the data subject you have the right to:

Know, update and correct your data.
Request proof of the authorization you gave us.
Be told how we use it.
Revoke the authorization or ask for your data to be deleted when there is no legal or contractual duty to keep it.
Access your data free of charge.
File complaints with Colombia's Superintendence of Industry and Commerce (SIC) after first raising them with us.

8. How to exercise your rights

Write to atencionnumi@gmail.com with your name, your specific request and a way to reach you. If you act on someone else's behalf, show that you are entitled to.

Queries: answered within 10 business days of receipt, extendable by up to 5 more business days with notice of the reason (Law 1581, art. 14).
Claims (correction, update, deletion or revocation): answered within 15 business days, extendable by up to 8 more business days with notice of the reason (Law 1581, art. 15).

9. Security

The site runs only over an encrypted connection (HTTPS). The keys to the database and the email services live only on the server, never in your browser, and access to the data is limited to those who need it to serve you. No system is infallible; if we detect an incident affecting your data we will tell you and report it to the SIC as the law requires.

10. Changes and effective date

This policy is effective from September 26, 2026 (version 2026-09-26). If it changes in any material way we will publish it here and, if the change affects the purpose for which you gave us your data, we will ask for a new authorization.