Privacy policy

We collect only what is needed to provide the service:

• Account data: name, email address and encrypted password.
• Business data: trading name, category, address, opening hours, services and contact phone.
• Your Google profile data: what you authorise when connecting your account (see section 3).
• Billing data: what is needed to issue the invoice. Your full card details are processed by the payment gateway, not by Presenzai.
• Technical usage data: IP address, browser type, pages visited and error logs, to operate and debug the platform.

We do not collect sensitive data (racial origin, political orientation, religious beliefs, health or biometric data) and we do not request it by any means.

To work on your profile we need you to authorise access from your own Google account, through Google's standard OAuth flow. We never ask for your Google account password, and we cannot see it.

With that authorisation we access:

• Your profile's public information: name, category, opening hours and services.
• Your posts, to create new ones and look up previous ones.
• Your reviews, to read them and publish the replies you approve.
• Your performance metrics: views, searches, calls and clicks.

We store an encrypted access token that lets us keep working without asking your permission every day. You can revoke that access whenever you want, without going through us, from the permissions section of your Google account. Once revoked, the service stops operating on your profile immediately.

Presenzai's use of information received from Google APIs is governed by the Google API Services User Data Policy, including its Limited Use requirements. Specifically:

• We use Google data only to provide the features you signed up for.
• We do not sell it or pass it to third parties for advertising purposes.
• We do not use it to train generalised artificial intelligence models.
• No human reads it, except with your express permission, to resolve support you requested, or where the law requires it.

We process your data for these purposes and no others:

• Creating and maintaining your account, and authenticating you when you sign in.
• Generating and publishing content on your profile according to the settings you define.
• Drafting and publishing replies to your reviews.
• Calculating and showing you your position on the map and your metrics.
• Charging you for the plan you signed up for and issuing the corresponding invoice.
• Sending you operational notices: failures, reports and changes to the service.
• Complying with legal obligations and responding to requests from competent authorities.

If in future we want to use your data for something different, we will ask you separately.

We process your data with your prior, express and informed authorisation, which you give when creating the account and connecting your Google profile. We also process it where necessary to perform the service contract, to comply with a legal obligation, or to respond to an authority's request. You can revoke your authorisation at any time, except where a legal or contractual duty to retain certain information exists.

The text of posts and of review replies is generated with artificial intelligence models, from your business information and the tone you configure.

We send those providers only what is needed to draft the content: business data and the text of the review being answered. We do not send your credentials, your billing data or your metrics. We work with providers that contractually commit not to use that information to train their models.

All generated content stays available for you to review, edit or delete from the dashboard.

We do not sell your data. We share it only with those needed for the service to work, and only with the portion each one needs:

• Google: to read from and write to your profile, according to what you authorised.
• Infrastructure provider: where the application and the database are hosted.
• Payment gateway: to process the recurring charge.
• Artificial intelligence providers: to generate the content described in section 7.
• Competent authorities: where a legal order obliges us.

Some of our providers operate servers outside Colombia. By accepting this policy you authorise the international transfer of your data to those countries, on the commitment that the security measures and the purposes described here are maintained, and in accordance with Ley 1581 de 2012 on international transfers.

No cookie is installed when you arrive at this site. We use Google Analytics to measure which pages are visited, but it only loads if you accept it in the notice: if you decline, or if your browser sends a privacy signal such as Global Privacy Control, the script is not downloaded and no cookie is created. We do not use advertising pixels. The dashboard will use strictly necessary cookies to keep you signed in.

Declining analytics takes access to nothing away from you. The full detail, cookie by cookie, is in the cookie policy.

We keep your data while your account is active. On cancellation, we delete the access token to your Google account immediately and stop operating on your profile.

The rest of the information is deleted or anonymised within ninety (90) days of cancellation, except what we must keep by legal obligation — chiefly accounting and tax records, which Colombian law requires to be kept for longer. Posts and replies already published on your Google profile remain under your control, not ours.

We encrypt passwords and Google access tokens, both in transit and at rest. Internal access to customer data is restricted to staff who need it to operate or provide support, and is logged. No system is infallible: if a security incident affecting your data occurs, we will notify you and report it to the Superintendencia de Industria y Comercio, Colombia's data protection authority, in accordance with the applicable rules.

As the data subject, Colombian law gives you the right to:

• Know what data of yours we hold and how we are using it.
• Update and correct anything incomplete or wrong.
• Request deletion of your data where no legal duty to keep it exists.
• Revoke the authorisation you gave us.
• Obtain a copy of your data.
• File a complaint with the Superintendencia de Industria y Comercio if you consider that we did not handle your request.

To exercise any of these rights, write to us through the channels in section 15. We answer queries within ten (10) business days and complaints within fifteen (15) business days, in line with the deadlines in Ley 1581 de 2012.

Presenzai is a service for businesses and is not directed at minors. We do not knowingly collect data from minors. If we detect that we have recorded a minor's data without authorisation from their legal representatives, we will delete it.