1. Scope and data controller
This Privacy Policy applies to the ContrataUnaIA website and platform. ContrataUnaIA processes the data needed to provide the service to its customers and users. When an organization adds other people's data, that organization is responsible for having a valid basis to do so and informing them as appropriate.
2. Data we process
Depending on how you use the service, we may process the following categories of data:
- Account and organization data, such as name, email address, protected credentials, language, organization membership, and permissions.
- Work content, such as conversations, instructions, tasks, results, training documents, and AI employee settings.
- Usage and security data, such as activity, consumption, technical logs, IP address, device, audit events, and cookies required for sessions and account protection.
- Billing and payment data. Payment providers process payment method data; ContrataUnaIA keeps the information needed to record balances, transactions, and receipts.
- Data from external connections you choose to enable, including connection metadata, granted permissions, and the information needed to perform a requested function.
3. Google Drive and Google Calendar
If you connect a Google account, ContrataUnaIA only requests and uses the permissions needed for the features you enable. Depending on the feature, this may include reading authorized Google Drive files and metadata, or checking calendars, availability, and events to coordinate meetings. The connection does not grant unlimited access to your entire Google account.
The use of information received from Google APIs complies with the Google API Services User Data Policy, including its Limited Use requirements. Read Google's policy.
ContrataUnaIA does not use data obtained through Google Workspace APIs to develop, improve, or train generalized or non-personalized artificial intelligence or machine learning models. It also does not sell this data or use it for advertising.
4. How we use data
- Create and manage accounts, organizations, AI employees, and permissions.
- Perform the tasks and features you request, including retrieving knowledge and using connected tools.
- Show activity, consumption, costs, and results so the organization can supervise the work.
- Process payments, provide support, prevent abuse, protect the platform, and comply with legal obligations.
- Improve service reliability and experience through operational metrics. We do not use Google Workspace content to train generalized models.
5. Artificial intelligence and providers
To perform a task, we may send only the necessary context to the configured artificial intelligence provider, such as the instruction, knowledge excerpts, or data retrieved from an authorized connection. AI employees operate with explicit capabilities and connections; connecting a service does not enable all of its functions by itself.
The organization must avoid adding information it is not authorized to process and review results before using them for important decisions.
6. Who we share information with
We do not sell personal data. We may share strictly necessary information with providers that help us deliver the service, such as infrastructure, authentication and managed integrations, artificial intelligence, email, analytics, security, and payment providers. We may also disclose data when required by law or to protect rights and safety.
Connections to services such as Google, GitHub, or a store are made at the organization's direction and are also subject to those services' terms.
7. Retention and deletion
We retain data while the account or connection is active and for as long as necessary to provide the service, resolve incidents, meet legal obligations, and maintain security and billing records. Some files generated by tasks have a specific retention period shown in the platform.
When data should be deleted, it is also deleted or anonymized in our active systems. Backups may retain it temporarily until their secure rotation, and certain records may be kept where there is a legal obligation or legitimate security need.
8. Security and isolation
We apply technical and organizational measures to protect information, including credential encryption, access controls, isolation between organizations, capability limits, and activity logs. No system is completely infallible, so we continuously review and improve these measures.
9. Your choices and rights
You may request access to, updates, correction, or deletion of your data, or withdraw consent when that is the basis for processing. You may also disconnect an integration from ContrataUnaIA and revoke its access from the connected service's security settings, including your Google account.
People in Argentina may also consult the official information from the Access to Public Information Agency about their personal data rights. View AAIP information.
10. International transfers
Some providers may process information outside the country where you are located. In those cases, we use contractual mechanisms and reasonable measures to require an adequate level of protection, as applicable.
11. Changes and contact
We may update this policy to reflect changes to the service or applicable rules. We will publish the current version and its update date on this page. If a change is material, we may also notify you within the platform or by email.
To exercise your rights or ask a privacy question, use our contact form.