Privacy Policy

1. INTRODUCTION

At Nymeria (hereinafter, the "Company", "we", "us"), operated by CHRISTIANS MANUEL CARTAYA AVILA and domiciled at CORONEL LEZICA 1019, VILLA LUZURIAGA, BUENOS AIRES, we are deeply committed to protecting the privacy and personal data of both our clients and the end users who interact with the solutions we offer.

The purpose of this Privacy Policy is to detail how we collect, use, store, and protect information within the framework of providing our conversational automation and artificial intelligence SaaS services.

We place special emphasis on the privacy of our users and their end clients, which is why this policy also explains how we treat and collect data through our integration with the WhatsApp Business API.

2. SCOPE

This Policy applies to:

• Business clients contracting the Service.
• End users interacting with automations implemented by our clients.
• Visitors to the Nymeria website.

3. ROLE IN DATA PROCESSING

Depending on the context:

3.1 Business clients

• The Client acts as the Data Controller.
• Nymeria acts as the Data Processor.

Nymeria processes data solely under the client's documented instructions.

3.2 Own client data

When collecting information for administrative purposes (billing, commercial contact), Nymeria acts as the Data Controller.

4. DATA WE COLLECT

We may collect the following categories of data:

4.1 Client data

• Name
• Email
• Phone
• Tax data
• Billing information

4.2 Data processed on behalf of the Client

• End users' phone numbers
• Name
• Conversation content
• Information voluntarily provided by the end user

Nymeria does not collect more data than necessary for providing the service.

5. PURPOSE OF PROCESSING

Data is used to:

• Provide the contracted service.
• Manage conversational automations.
• Provide technical support.
• Billing and administration.
• Legal compliance.

Nymeria does not use conversational data for its own commercial purposes.

6. DATA USE AND AI TRAINING

Nymeria expressly declares that:

• It does not use the data processed on behalf of the client to train general artificial intelligence models.
• It does not sell or market databases.
• It does not reuse conversations for its own purposes without the Client's express consent.

Any technical improvement of the system is carried out using pre-trained models or anonymized data when appropriate.

7. LEGAL BASIS

Data processing is based on:

• Execution of the contract with the Client.
• Consent granted by end users to the Client.
• Compliance with legal obligations.
• Legitimate business interest when applicable.

8. DATA RETENTION

Data will be retained:

• For the duration of the contract.
• As long as necessary to comply with legal obligations.
• According to the provisions of the Data Processing Addendum.

Once the contractual relationship ends, the data may be deleted or made available to the Client as appropriate.

9. SUBPROCESSORS

Nymeria may use subprocessors to provide the Service, including:

• Cloud infrastructure providers.
• API providers.
• Secure storage services.

Nymeria guarantees that it:

• Selects providers with adequate security standards.
• Enters into data protection contractual agreements.
• Requires equivalent regulatory compliance.

The list of subprocessors may be updated when necessary.

10. INTERNATIONAL TRANSFERS

Given that we use global technology providers (including infrastructure associated with Meta Platforms Inc.), data may be transferred to other countries.

In such cases, Nymeria will implement contractual safeguards and appropriate measures to protect the information.

11. INFORMATION SECURITY

Nymeria implements reasonable technical and organizational measures, including:

• Restricted access controls.
• Internal permission management.
• Protection against unauthorized access.
• Basic activity monitoring.
• Security practices according to industry standards.

However, no system is completely invulnerable.

12. SECURITY INCIDENTS

If a security breach affecting personal data is detected:

• Nymeria will notify the Client without undue delay.
• Relevant information about the nature of the incident will be provided.
• Reasonable corrective measures will be adopted.

The Client will be responsible for notifying authorities or end users when required by applicable regulations.

13. DATA SUBJECT RIGHTS

Under Law 25.326, data subjects can exercise their:

• Right of access.
• Right of rectification.
• Right to update.
• Right to erasure.

In cases where Nymeria acts as a Processor, such requests should be directed to the Client acting as Data Controller.

14. CONFIDENTIALITY

All processed information is treated as confidential.

Access is limited to authorized personnel under confidentiality obligations.

15. MINORS

The Service is intended for businesses. Nymeria does not intentionally collect data directly from minors.

16. MODIFICATIONS

Nymeria may update this Policy to reflect regulatory or technical changes.

The current version will be available on the official website.

17. SUPERVISORY AUTHORITY

In Argentina, the enforcement authority is the Agency for Access to Public Information (Agencia de Acceso a la Información Pública).