EGIXIA Logo

    Privacy Policy

    Last updated: August 12, 2026

    Last updated: August 12, 2026

    This is a courtesy translation. The Spanish version is the binding one, as EGIXIA S.A.S. is incorporated in Colombia and the processing is governed by Colombian law.

    Controller identification

    • Legal name: EGIXIA S.A.S.
    • Tax ID (NIT): 900.607.880-6
    • Registered address: Av. Calle 26 # 92-32, Connecta Centro Empresarial, Bogotá D.C., Colombia
    • Data protection contact: privacidad@egixia.com
    • General contact: contacto@egixia.com

    1. Introduction

    Welcome to the Artificial Intelligence (AI) Agents services of EGIXIA S.A.S. ("EGIXIA", "we", "our"). EGIXIA S.A.S. acts as the Data Controller of your personal data.

    This Privacy Policy describes how we collect, use, share, protect and process information, including personal data, obtained from users ("User", "you", "your") of our AI Agents and related services (the "Service"), offered through ai.egixia.com, egixia.com and other company platforms.

    We process your personal data transparently and securely in compliance with Colombian Statutory Law 1581 of 2012, Decree 1377 of 2013 and related regulations. Where applicable based on the data subject's residence, we also observe the principles of the European Union's GDPR and Brazil's LGPD.

    2. Key definitions

    • Personal data: any information linked to, or that can be associated with, one or more identified or identifiable natural persons.
    • Processing: any operation on personal data, such as collection, storage, use, circulation or deletion.
    • Data subject: the natural person whose personal data is processed.
    • Controller: the party deciding on the database and/or the processing (EGIXIA S.A.S.).
    • Processor: the party processing personal data on the Controller's behalf.
    • User Content: prompts, data and documents you enter or upload into the Service.
    • Generated Content: the output produced by the AI Agents.

    3. Information we collect

    Information you provide directly

    • Account data: first and last name, email, company, job title, phone number and password.
    • Commercial qualification data: country, number of employees, ERP in use and agents of interest, when you provide them in a contact or demo form.
    • Contact information: the content of the communications you send us.
    • Payment information: data required to process payments through external providers. We do not store full card details.
    • User Content: prompts, text and documents you upload for processing.

    Information collected automatically

    • Usage and log data: IP address, browser type, operating system, pages visited, access dates and times, device identifiers, interactions with the AI Agents and error logs.
    • Cookies and similar technologies: as detailed in our Cookie Policy.

    Third-party information

    We may receive information about you if you use third-party authentication services or integrate the Service with other platforms, subject to those third parties' privacy policies.

    4. How we use your information

    • To provide and maintain the Service.
    • To improve and personalize the Service and the user experience.
    • To communicate updates, security alerts and technical support, and to send commercial communications with an opt-out.
    • To process payments and manage subscriptions and usage credits.
    • To perform aggregated, anonymized analysis for research and development.
    • To ensure security, prevent fraud and comply with legal obligations.

    Regarding User Content, we use it primarily to generate the Generated Content you request. We do not use your confidential User Content to train general AI models without your prior consent or without irreversibly anonymizing it.

    5. Legal basis for processing

    • Consent: for commercial communications, non-essential cookies and uses requiring explicit consent.
    • Performance of a contract: to provide the Service and manage your account.
    • Legitimate interest: to improve the Service, ensure security and prevent fraud.
    • Legal obligation: to comply with applicable regulations.

    6. How we share your information

    We do not sell your personal data. We share it only: with service providers acting as Processors under confidentiality agreements; in corporate transactions such as mergers or acquisitions; to comply with legal obligations or protect rights and safety; with your explicit consent; and in aggregated or anonymized form for analysis or research.

    7. International data transfers

    We run on global provider infrastructure, so your data may be processed and stored outside Colombia, primarily in the United States and the European Union. We apply the safeguards required by Law 1581 of 2012 and its complementary regulations, including data processing agreements with each Processor.

    Our main Processors are:

    • Supabase — database, authentication and file storage.
    • Lovable — web application hosting and deployment.
    • Resend — transactional email delivery.
    • Google (Analytics and Ads) and Microsoft Clarity — usage analytics and advertising measurement.
    • AI model providers — processing of User Content to generate the output you request.
    • Slack — internal notifications for our sales and support team.

    8. Data retention

    • Prospect and commercial request data: up to 2 years from the last contact, unless you request earlier deletion.
    • Account data: while the account remains active, plus the period required to meet subsequent legal obligations.
    • User Content: for as long as necessary to provide the Service.
    • Technical logs: for a limited period, for security and Service improvement.

    9. Data security

    We apply technical and organizational measures including encryption in transit and at rest, per-user and per-organization access controls enforced at the database level, and activity monitoring. No transmission or storage is 100% secure, so absolute security cannot be guaranteed.

    10. Your rights as a data subject

    • To know, update and rectify your personal data.
    • To request proof of the authorization granted.
    • To be informed about how we use your data.
    • To file complaints with the Colombian Superintendence of Industry and Commerce (SIC).
    • To withdraw consent and request deletion, where no legal or contractual duty to retain applies.
    • To access your personal data free of charge.

    To exercise any of these rights, write to privacidad@egixia.com. We respond within the statutory deadlines: ten (10) business days for inquiries and fifteen (15) business days for complaints, extendable as permitted by law.

    11. Cookies

    We use cookies for authentication, preferences, analytics and advertising measurement. Details are in our Cookie Policy.

    12. Children's privacy

    The Service is not directed to individuals under 18 and we do not knowingly collect their data. If we identify a minor's data, we delete it.

    13. Changes to this policy

    We may update this Policy periodically. We will publish the revised version on this page and update the last-updated date. Material changes will be communicated through our usual channels.

    14. Contact

    EGIXIA S.A.S. — Data Protection Officer
    NIT 900.607.880-6
    Av. Calle 26 # 92-32, Connecta Centro Empresarial, Bogotá D.C., Colombia
    Data protection: privacidad@egixia.com
    General contact: contacto@egixia.com