Privacy Policy

This is a translation of the Spanish-language document; in case of any discrepancy, the Spanish version prevails.

This Privacy Policy applies to the personal data of site visitors, distributors, and Omnisol’s end clients. Effective as of October 20, 2026.

1. Who processes your data

Omnisol S.A.S. (in formation, Colombia) (“Omnisol”, “we”), is the data controller for personal data collected through omnisol.app, the panel (panel.omnisol.app), and commercial processes with distributors and end clients, except as described in Section 8 (data entered by the Client inside its instance), where Omnisol acts as Data Processor under the Data Processing Agreement (Data Processing Agreement).

Privacy contact: [email protected].

2. Applicable legal framework

We process data in accordance with:

• Colombia: Law 1581 of 2012 and its implementing decree (Decree 1377 of 2013, compiled into Decree 1074 of 2015), and Law 1480 of 2011 where applicable.
• Ecuador: the Organic Law on Personal Data Protection (2021), for data subjects located in Ecuador.
• For data subjects in other countries, we apply, at minimum, principles equivalent to the EU General Data Protection Regulation (GDPR): lawfulness, purpose limitation, proportionality, transparency, access, security, and confidentiality.
• E-commerce: Law 527 of 1999 (Colombia) for data messages and electronic signatures.

3. What data we collect

Category	Examples	From whom
Identification and contact data	name, email, phone, company, country	visitors, clients, distributors
Account data	username, encrypted password, role	panel and instance users
Commercial data	plan, instances, payments, credits, bonuses	distributors and clients
Usage data	pages visited, device, IP, access logs	visitors and users
Content you enter in your instance	data about your own business and, where applicable, your patients/clients	end Clients (see Section 8)
Communications	support, WhatsApp, form messages	anyone who writes to us

We do not knowingly request or process sensitive data (health, biometric, religion, sexual orientation, political or union affiliation) through the public site. Within an instance, the Client is responsible for the lawfulness of processing sensitive data about its own clients/patients; see Section 8.

4. Why we use your data

• Creating and managing your account and instance(s).
• Processing payments, credits, and bonuses.
• Providing support, resolving issues, and sending operational notices (delinquency, renewal, pricing changes, data deletion).
• Improving the site and Platform, including security.
• Complying with legal, accounting, and tax obligations.
• Sending marketing communications, only if you authorized it or where law permits without prior authorization; you may unsubscribe at any time.
• Operating the AI assistant, per the AI Terms (AI Terms).

5. Legal basis / authorization

We process your data based on: (i) your express authorization (checkbox at registration), (ii) performance of your contract with Omnisol or your distributor, (iii) compliance with legal obligations, and (iv) our legitimate interest in security and service improvement, provided it does not override your rights.

6. Who we share your data with

• Infrastructure and service providers who process data on our behalf (hosting, file storage, email, payment gateway, AI providers). See Section 7 on international transfer.
• Your distributor, only commercial data about the relationship (plan, payment status, usage) — never your instance’s data or passwords (see Distribution Agreement, “distributors never access your instance”).
• Authorities, when required by law.
• We do not sell your personal data to third parties.

7. International data transfer

Our infrastructure (servers, file storage, and backups) and some providers, including AI providers (e.g., Anthropic), operate outside Colombia and Ecuador, mainly in the United States. This involves an international transfer of personal data.

Omnisol carries out this international transfer with providers that offer adequate data-protection guarantees, through contractual clauses and internationally recognized standards (standard contractual clauses or equivalents) and, where required by law, with the data subject’s authorization. These guarantees comply with Law 1581 of 2012 and the regulations of Colombia’s Superintendencia de Industria y Comercio (SIC) on countries with adequate protection levels.

8. Data inside your instance: who is responsible

If you are a business (Client) using an Omnisol App, the data you enter about your own business and, where applicable, your patients or clients, is handled as follows:

• You (the Client) are the Data Controller of that data toward your own data subjects (your patients, your clients).
• Omnisol acts as Data Processor: we process that data only per your instructions and to provide the service, per the Data Processing Agreement (Data Processing Agreement).
• Distributors have no access to your instance’s data or passwords. They only see commercial status (payments, usage, plan).
• Your instance’s AI assistant only queries aggregated commercial data about your business (sales, inventory, appointments), never health records or other sensitive data about your own clients/patients. See AI Terms.

9. Retention and deletion

• While your instance is active, your data is retained to provide the service.
• If your instance is shut down (for non-payment, cancellation, or another reason), your data is retained for a maximum of 60 days from shutdown, during which you may request export. You will receive upcoming-deletion notices (per our internal schedule, roughly at days 30, 50, and 58 after shutdown).
• After that period, data is permanently deleted, leaving only an administrative record without personal data (instance, date, reason).
• You may request early deletion of your data at any time, unless we must retain some data under legal or accounting obligations.

10. Your rights

As a data subject in Colombia and Ecuador, you have the right to: know, update, and correct your data; request proof of the authorization granted; be informed about the use of your data; file complaints with the competent authority (in Colombia, the Superintendencia de Industria y Comercio); revoke your authorization or request deletion of your data where there is no legal duty to retain it; access your data free of charge; and request export of your data per Section 9.

To exercise these rights, write to [email protected] stating your request. We will respond within the legal deadlines (in Colombia, 10 business days for inquiries and 15 business days for complaints, subject to a duly notified extension).

11. Security

We apply reasonable technical and organizational measures: encryption in transit, per-instance isolation (dedicated database and storage per client), daily backups, role-based access control, and mandatory two-factor authentication for administrative roles. No system is 100% secure; see the limitation of liability in the License Agreement.

12. Cookies and similar technologies

Omnisol.app uses only essential cookies for the site to function (e.g., language preference or panel session). We do not use analytics or advertising cookies; our web analytics does not use cookies. See details in the Cookie Notice (Cookie Notice).

13. Minors

The site and Platform are directed at businesses and professionals; they are not designed for use by minors. We do not knowingly collect data from minors without parental or guardian consent as required by applicable law.

14. Changes to this policy

We may update this policy. Material changes will be announced on the site or by email. The current version is always available at Privacy Policy.

15. Contact

[email protected] · [email protected] · WhatsApp +57 316 922 7313.