Privacy Policy

Data controller: OnnIA (NCA Technologies S.A.S.), CUIT 30-71929379-0, with registered address at José A. Cabrera 3840, Piso 9, Dpto. E, Ciudad Autónoma de Buenos Aires, Argentina.

Privacy contact: [email protected]

This Policy describes how OnnIA collects, uses, shares, and protects personal data when you visit our website, create an account, or use the Services. If you use OnnIA on behalf of an organization, that organization may control how Client Data is processed; in that case, OnnIA acts as a Processor in accordance with the DPA.

• Account data: name, email, company, role, credentials (hash), and preferences.
• Usage data: product events, technical logs, approximate IP, device/browser, and performance metrics.
• Client Data: content, files, prompts/instructions, and data integrated from third parties depending on your configuration.
• Support and communications: tickets, messages, and interaction records.

• To provide and administer the Services, authentication, and support (performance of a contract).
• Security, fraud/abuse prevention, and legal compliance (legitimate interest and/or legal obligation).
• Billing, collections, auditing, and commercial management (contract and legal obligation).
• Product improvement and operational analytics (legitimate interest; where applicable, aggregated/anonymized data).
• Marketing: commercial communications and updates (consent or opt-out depending on applicable law).

OnnIA may share data with subprocessors and providers necessary to operate the Services, including hosting, analytics, support, messaging, payments, and AI providers. We may disclose data when legally required, to protect rights and security, or in the context of corporate transactions, subject to appropriate safeguards.

Where data is transferred to other countries, OnnIA will apply appropriate safeguards in accordance with applicable regulations, such as standard contractual clauses or other valid transfer mechanisms for the EU/UK.

We retain data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention of Client Data is governed by the DPA and/or the contracted configurations.

Depending on applicable law, you may request access, rectification, updating, deletion, objection, restriction, and portability. You may also withdraw marketing consents. To exercise your rights, contact us at [email protected]. We may request identity verification.

We apply reasonable technical and organizational measures to protect your data. Security contact: [email protected]

• Governance and policies: Internal security and confidentiality policies, staff training, and vendor management with contractual security clauses.
• Access controls: Least-privilege principle, role-based separation, MFA available, and audit logs.
• Encryption and data protection: Encryption in transit (TLS), encryption at rest where applicable, and secure secrets management with periodic rotation.
• Secure development: Code reviews, dependency management, security patches, and vulnerability monitoring.
• Resilience: Backups, recovery procedures, and availability monitoring.
• Incident response: Internal process for detection, containment, and recovery. Notification to affected users as required by applicable regulations.

Cookies are small text files stored on your device to enable features, remember preferences, and measure site usage.

Categories:

• Necessary: essential to operate the site and cannot be disabled.
• Preferences: remember your settings to improve your experience.
• Analytics: help us understand site usage and make improvements.

Management: You can accept or reject optional categories via the banner shown when you first visit the site, and change your choice at any time through your browser settings.

The Services are not directed to individuals under 18 years of age.

OnnIA may update this Policy; the current version and its effective date will be published.