{"id":957,"date":"2023-08-03T20:40:31","date_gmt":"2023-08-03T20:40:31","guid":{"rendered":"https:\/\/piyion.com\/?page_id=957"},"modified":"2026-11-04T21:31:39","modified_gmt":"2026-11-04T21:31:39","slug":"politica-de-privacidad","status":"publish","type":"page","link":"https:\/\/piyion.com\/en\/politica-de-privacidad\/","title":{"rendered":"Privacy Policy"},"content":{"rendered":"<\/trp-replace-0>\n
<\/p>\n
\n
\n
Privacy and Data Protection<\/div>\n

Privacy and Personal Data Processing Policy<\/h1>\n

Learn how PIYION INC collects, uses, protects, and manages personal data across its platform, channels, and integrations.<\/p>\n

Last updated: October 18, 2026<\/div>\n<\/div>\n<\/section>\n
\n
\n
PIYION INC states:<\/strong> In compliance with Law 1581 of 2012, Decree 1377 of 2013, applicable data protection regulations in the United States of America, and the General Data Protection Regulation (GDPR) \u2013 Regulation (EU) 2016\/679, PIYION INC.<\/strong> informs individuals whose personal data is contained in its databases about the use and processing of information collected through the PIYION platform, its channels, and its integrations. PIYION INC acts as a Data Controller<\/strong> when it directly determines the purposes and means of a processing activity, and as a Data Processor<\/strong> when it processes personal data on behalf of and under the documented instructions of its business clients, who act as Data Controllers. The assignment of these roles is determined for each specific activity and in accordance with the applicable contracts. PIYION INC declares that the personal data contained in its databases is collected and processed for the purpose of carrying out procedures related to its corporate objectives and the purposes described in this Policy.<\/div>\n

The use and handling of such data are carried out under strict standards of responsibility, which include respect for due process and the protection of information.<\/p>\n

We collect data from platform users\u2014including information about companies, administrators, and individual users\u2014as well as business information relevant to the commercial relationship, such as company name, industry, company size, job title, needs, interests, interaction history, and the status of the commercial process. Depending on the nature of the relationship, the authorizations granted, and the applicable legal basis, this information may be used for commercial profiling, opportunity management, marketing, the distribution of information, customer support, service, and the enhancement of the customer experience.<\/p>\n

The general purposes of commercial profiling, marketing, advertising, and the recovery of abandoned shopping carts do not apply to user data obtained via Google APIs, except where a specific purpose constitutes a visible function of PIYION that has been expressly requested by the user and is permitted under Google\u2019s policies. The specific processing of data received from Google is governed by the section titled \u201cSpecific processing of data obtained via Google APIs\u201d<\/strong> within this Policy.<\/p>\n

Data contained in conversations between administrators or advisors and users is collected in order to maintain and display interaction history, provide support, address requests, ensure continuity in the business relationship, and improve the customer experience. This information will not be used for PIYION INC\u2019s own promotional campaigns unless there is explicit authorization or an applicable legal basis.<\/p>\n

The data recorded in our databases includes, but is not limited to: personal data such as first and last names, telephone numbers, email addresses, date of birth, age, identification documents, and other information specified in this policy. At any time, the data subject may revoke their consent and exercise their right to the deletion of personal data\u2014as established under Law 1581 of 2012\u2014as well as the rights to cancel or object to the processing of their personal data, in accordance with the parameters set forth in the General Data Protection Regulation (GDPR).<\/p>\n

If you wish to access information or request the deletion of your personal data from our databases, please contact us within 30 days of the publication of this notice via email at datasupport@piyion.com, or by phone at (+57) 3013373550.<\/strong> If you choose not to take action, once the aforementioned period has elapsed, we will consider the processing of your personal data to be authorized. This is without prejudice to the data subject\u2019s right, at any time, to consult, access, or update their personal data, or to request its deletion or rectification.<\/p>\n

PIYION INC.<\/strong> may contain hyperlinks to other websites or social media networks, which may, in turn, have privacy policies that differ from those of PIYION INC.<\/strong><\/p>\n

For further information, please consult the Personal Data Processing Policy via the following available channels:<\/p>\n

Website:<\/strong> Piyion website<\/a><\/p>\n

Web application:<\/strong> Piyion web application<\/a><\/p>\n

Android mobile application:<\/strong> Piyion on Google Play<\/a><\/p>\n

iOS mobile application:<\/strong> Piyion on the App Store<\/a><\/p>\n\n\n\n\n\n\n\n
Role as Data Controller:<\/strong> PIYION INC., when it determines the purposes and means of the processing.<\/td>\n<\/tr>\n
Role as Data Processor:<\/strong> PIYION INC., when it processes data on behalf of and under the instructions of a client acting as a Data Controller.<\/td>\n<\/tr>\n
Address:<\/strong> 5350 NW 84th Ave, Apt. 1607, Doral, FL 33166, United States<\/td>\n<\/tr>\n
Email:<\/strong> datasupport@piyion.com<\/td>\n<\/tr>\n
Website:<\/strong> Piyion website<\/a><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

PERSONAL DATA PROCESSING POLICY<\/h2>\n

This is the Privacy and Personal Data Processing Policy of PIYION INC.<\/strong>, applicable to the application PIYION<\/strong>, its websites, channels, integrations, and databases. PIYION INC.<\/strong> shall act as a Data Controller with respect to processing activities for which it determines the purposes and means, and shall act as a Data Processor when it processes data on behalf of and under the instructions of a client acting as a Data Controller. This document is prepared in compliance with Law 1581 of 2012, Decree 1377 of 2013, Regulation (EU) 2016\/679, and other applicable regulations, with the objective of ensuring the proper processing of information and the effective exercise of the rights of the data subjects.<\/p>\n

All information received by PIYION INC.<\/strong> through its various communication channels\u2014whether in digital or printed format\u2014that constitutes our databases, and which is obtained from clients, suppliers, employees, contractors, or other data subjects, is governed by the following usage policies. If your information is included in any of our databases, it is because you have had or currently maintain a business relationship with PIYION INC.<\/strong>, because you have provided your data on our platform to access our services, or because you have voluntarily submitted your data during events or activities organized by PIYION INC.<\/strong>, or directly at our office.<\/p>\n

PIYION INC.<\/strong> is a company focused on the development of software and other cutting-edge technologies designed to enhance the productivity of both individuals and legal entities across various functional areas (such as communication, sales, marketing, finance, accounting, logistics, control, administration, human resources, planning, procurement, strategy, and\/or production). Given this, we want you to be informed about what data we collect and how we use it. Our privacy policy applies to all information we collect about you.<\/p>\n

Identification of PIYION INC and processing roles:<\/strong><\/p>\n

Legal name:<\/strong> PIYION INC.<\/p>\n

Registered address:<\/strong> 5350 NW 84th Ave, Apt. 1607, Doral, FL 33166, United States<\/p>\n

Telephone:<\/strong> +57 3013373550<\/p>\n

Email address:<\/strong> datasupport@piyion.com<\/p>\n

Website:<\/strong> Piyion website<\/a><\/p>\n

Web application:<\/strong> Piyion web application<\/a><\/p>\n

Android mobile application:<\/strong> Piyion on Google Play<\/a><\/p>\n

iOS mobile application:<\/strong> Piyion on the App Store<\/a><\/p>\n

1. LEGAL FRAMEWORK AND SCOPE OF APPLICATION<\/h2>\n

This Personal Data Processing Policy has been drafted in accordance with the provisions of the Political Constitution, Law 1581 of 2012, Regulatory Decree 1377 of 2013, Regulation (EU) 2016\/679 of the European Parliament and of the Council, and any other provisions that may supplement, amend, or regulate it. It shall be applied by PIYION INC.<\/strong> hereinafter referred to as PIYION<\/strong> with respect to the collection, storage, use, circulation, deletion, and all other activities that constitute the processing of personal data. Any gaps in the aforementioned regulations shall be interpreted in accordance with the provisions of Colombian legislation in general, as well as in light of Articles 15 and 20 of the National Constitution of the Republic of Colombia and international law, while taking into account the provisions established in Regulation (EU) 2016\/679 of the European Parliament and of the Council of April 27, 2016. Accordingly, PIYION<\/strong> states that it guarantees the rights to privacy, personal intimacy, and a good reputation regarding the processing of personal data; consequently, all its actions shall be governed by the principles of legality, purpose, freedom, truthfulness or quality, transparency, restricted access and circulation, security, and confidentiality. Any person who\u2014in the course of various contractual, commercial, virtual, or other activities, whether on a permanent or occasional basis\u2014provides PIYION<\/strong> with any type of information or personal data, shall have the right to access, update, and rectify such information or data.<\/p>\n

2. DEFINITIONS<\/h2>\n

For the purposes of implementing this Policy and in accordance with legal regulations, the following definitions shall apply: a) Authorization: Prior, express, and informed consent given by the owner of the information and personal data, allowing PIYION<\/strong> to carry out activities that involve the processing of said personal data; b) Privacy Notice: A physical or electronic document\u2014or one in any other format\u2014generated by the Data Controller and made available to the data owner regarding the processing of their personal data. The Privacy Notice informs the data owner about the existence of the Information Processing Policy applicable to them, how to access it, and the purpose for which the personal data is intended to be processed; c) Database: An organized set of personal data that is subject to processing by PIYION<\/strong> ; d) Personal data: Any information linked to, or that can be associated with, one or more specific or identifiable natural persons; e) Public data: Data classified as such under the mandates of the law or the Political Constitution, and which is not classified as semi-private, private, or sensitive. Public data includes, among other things, information regarding a person\u2019s civil status, profession or trade, status as a merchant or public servant, and any information that can be obtained without any restrictions. By their nature, public data may be contained in, for example, public registries, public documents, official gazettes and bulletins, as well as in final judicial rulings that are not subject to confidentiality requirements under express legal provisions; f) Private data: Data that, due to its intimate or confidential nature, is relevant only to the data subject; g) Sensitive data: Data that affects the privacy of the data subject or whose misuse could lead to discrimination. This includes information revealing racial or ethnic origin, political orientation, religious or philosophical convictions, membership in labor unions, social organizations, or human rights groups\u2014or organizations that promote the interests of any political party or safeguard the rights and guarantees of opposition political parties\u2014as well as data concerning health, sexual orientation, and biometric data. Because such information may affect an individual\u2019s privacy, all reasonable security measures have been adopted to protect it, and the necessary authorizations have been obtained to carry out the relevant activities. Furthermore, clients, applicants, current and former employees, and suppliers have been informed about how their data is processed, the purpose of such processing, and the duration for which their information is retained in our databases. h) Data Processor: A natural or legal person, whether public or private, who, either independently or in association with others, carries out the processing of personal data on behalf of the Data Controller; i) Data Controller: A natural or legal person, whether public or private, who, either independently or in association with others, makes decisions regarding the database and\/or the processing of the data; j) Data Subject: A natural person whose personal data is subject to processing; k) Processing: Any operation or set of operations performed on personal data, such as the collection, storage, use, dissemination, or deletion thereof; l) Transfer: A data transfer occurs when the Data Controller and\/or Data Processor\u2014located in Colombia\u2014sends information or personal data to a recipient (who is also a Data Controller) located either within or outside the country; m) Transmission: A transmission is a form of processing involving the communication of information and personal data\u2014either within or outside the territory of the Republic of Colombia\u2014for the purpose of having a Data Processor carry out processing activities on behalf of the Data Controller; n) National Database Registry: A public directory of personal databases subject to processing activities within the country, administered by the Superintendency of Industry and Commerce, which serves as the primary administrative authority for the oversight and control of personal data processing and habeas data; \u00f1) Data security incident: A breach of security protocols, or the loss, theft, and\/or unauthorized access to personal data processed by the Data Controller or Data Processor. Incident management refers to the documentation of corrective and preventive steps to be taken in the event of potential incidents; this process must define timelines, roles, and responsibilities; o) Social engineering: techniques used by criminals to deceive users of information and communication technology (ICT) systems\/services in order to obtain data such as credentials, information about the systems they use, and installed services, among other things; p) Demonstrated accountability: the manner in which an entity must comply (in practice) with personal data protection regulations, and how it must demonstrate that the measures implemented are useful, relevant, and efficient; q) Malware: a term derived from the combination of the English words “malicious” and “software.” The purpose of malware is to damage or infiltrate an information system without the owner’s consent. Examples include viruses, worms, Trojans, backdoors, and spyware. r) Cookie: a file downloaded to a user’s device when accessing certain web pages; it collects information about the user’s browsing experience, which helps in understanding such experiences and establishing necessary improvements to provide a more efficient and secure service. Cookies are not spam, computer worms, or viruses capable of damaging a user’s browser or device.<\/p>\n

3. PURPOSE FOR THE COLLECTION AND PROCESSING OF PERSONAL DATA, AND THE INFORMATION COLLECTED:<\/h2>\n

Data is collected from users of the Application\u2014whether they are companies, clients, administrators, advisors, or end users. This includes account information, contact details, conversations, activity, analytics, and metrics, as well as business information used to identify needs, create commercial profiles of clients and prospects, provide support, address requests, and improve the customer experience. The use of conversations for promotional purposes PIYION INC.<\/strong> will require authorization or an applicable legal basis.<\/p>\n

PIYION<\/strong> may use personal data to: i) Review and address requests for services made by the Data Subject at any time; ii) Exercise its right to gain a sufficient understanding of the client\/affiliate\/user with whom it intends to establish a relationship or provide services, and to assess the current or future risks associated with such relationships and services; iii) Offer\u2014either jointly with third parties, separately, or on behalf of third parties\u2014financial, commercial, and related services, as well as conduct promotional, marketing, advertising, charitable, or social service campaigns, whether independently or in collaboration with third parties. This is done in light of their mutual synergies and their combined capacity to provide more favorable service conditions to their clients. Consequently, for the purposes described, PIYION<\/strong> may: i) Access, store, and process all information provided by the Data Subject in one or more databases, in whatever format it deems most appropriate; ii) Organize, catalog, classify, divide, or separate the information provided by the Data Subject; iii) Verify, corroborate, confirm, validate, investigate, or compare the information provided by the Data Subject against any information it may legitimately possess, including information held by its parent companies, subsidiaries, affiliates, or any other related company. PIYION<\/strong>. iv) To access, consult, compare, and evaluate all information concerning the Data Subject that is stored in the databases of any credit, financial, judicial, or security-related risk bureau\u2014whether public or private, domestic or foreign\u2014or any commercial or service-related database, in order to establish a comprehensive and historically complete record of the Data Subject\u2019s conduct in their capacity as a debtor, user, client, guarantor, endorser, affiliate, beneficiary, subscriber, taxpayer, and\/or holder of financial, commercial, or other types of services. v) To analyze, process, evaluate, handle, or compare the information provided by the Data Subject. The data resulting from such analysis, processing, evaluation, handling, or comparison shall be subject to the same authorizations granted by the Data Subject in the Authorization Form regarding the information originally provided. vi) To study, analyze, customize, and use the information provided by the Data Subject for the purpose of monitoring, developing, and\/or improving\u2014both on an individual and general level\u2014service conditions, administration, security, or customer support, as well as for implementing marketing plans, campaigns, special benefits, and promotions. PIYION<\/strong> may share the results of the aforementioned studies, analyses, customizations, and uses\u2014as well as all information and personal data provided by the Data Subject\u2014with its shareholders, parent companies, subsidiaries, related entities, affiliates, or other companies within the same corporate group, or with business partners who agree to abide by the terms of this authorization. vii) To report, communicate, or grant access to the information provided by the Data Subject\u2014or any other information held regarding the Data Subject\u2014to legally established credit, financial, commercial, or service-related risk bureaus, and to financial institutions, in accordance with applicable regulations.<\/p>\n

Furthermore, PIYION<\/strong> it may use the personal data and information of its clients to:<\/p>\n

a) Maintain a record of individuals who complete or review forms, surveys, or other virtual tools used by PIYION<\/strong>. b) Understand, observe, and analyze the tastes, preferences, needs, and interests of clients, prospects, and potential business partners. c) Provide the services and products offered by PIYION<\/strong> and requested by its users. d) Provide information regarding new products, services, or changes thereto. e) Evaluate service quality, manage support requests, and improve the customer experience. f) Conduct internal studies on consumption and usage habits. g) Send information\u2014via physical or digital means\u2014regarding products or services offered by PIYION<\/strong> or third parties, provided there is authorization or an applicable legal basis. h) Retain data concerning transactions, orders, billing, and payment status when necessary\u2014noting that PIYION<\/strong> does not intend to store full payment card credentials. i) Provide business references upon the data subject\u2019s request. j) Track sales, accounts receivable, and business opportunities. k) Customize software services and technologies according to client needs. l) Analyze system performance and effectiveness to enhance productivity and user experience. m) Identify opportunities for business process optimization. n) Comply with applicable data protection regulations. o) Create commercial profiles of clients and prospects based on their business information, interactions, interests, needs, and stage within the commercial process. p) Provide support, document cases, resolve issues, and measure customer satisfaction and experience. q) Manage reminders and communications regarding abandoned shopping carts, subject to the data subject\u2019s authorization and communication preferences.<\/p>\n

Purpose for collecting information on potential clients (natural or legal persons): To maintain a database of potential clients interested in our services with whom we may establish a business relationship.<\/p>\n

Purpose of processing information regarding registered users (natural or legal persons): To authenticate the client upon accessing the platform, provide purchased services, analyze information, identify areas for improvement, understand user needs and interests based on their activity on the website, and thereby offer a better service experience, provide access to offers, market products, and keep users informed about new developments.<\/p>\n

Purpose of processing data regarding applicants, current employees, and former employees of PIYION INC.<\/strong>: Personal information of applicants, current employees, and former employees\u2014including their immediate family members\u2014is collected for the purpose of fulfilling obligations arising from their respective employment relationships. Such obligations include, among others: payroll processing, granting benefits, performance evaluations, improving training processes, handling requests, issuing certificates and official statements, enrolling individuals in Social Protection System entities, conducting workplace well-being activities, maintaining accounting records, submitting reports to regulatory and oversight authorities, communicating with employees, managing tax liabilities, and maintaining contact in the event of an absence. This falls under the scope of organizational performance management.<\/p>\n

Furthermore, personal information may be collected from applicants participating in selection processes for the purpose of carrying out the necessary hiring procedures. Additionally, information provided by individuals participating in these processes may be stored indefinitely and used for future personnel selection processes.<\/p>\n

Moreover, PIYION<\/strong> may record or capture audio, video, or photographs of employees during events, training sessions, or other activities. These audio recordings, videos, or photos may be used by PIYION<\/strong> in bulletins, reports, announcements, advertising, promotional materials, publications, and, in general, in any of the organization\u2019s activities\u2014even after the employee has left the organization.<\/p>\n

Purpose for processing information regarding suppliers and contractors:<\/p>\n

1.<\/strong> To access, update, and rectify personal data. 2.<\/strong> To invite companies that provide the requested types of services to submit price quotes, enter into contracts, and present work proposals as part of the relevant procurement process. 3.<\/strong> To monitor and track obligations arising from contracting processes, ensuring compliance with the established quality and safety parameters; this also applies to providers who, due to the nature of their work, are entrusted with a database belonging to PIYION<\/strong>\u2014in which case they must fully comply with all data protection requirements and other legal provisions stipulated in the supplier contract. Otherwise, such information and personal data may be disclosed to national or international regulatory and supervisory authorities, in response to legal, administrative, or regulatory requirements; furthermore, such information and personal data may be used or disclosed to defend the property rights of PIYION<\/strong> and our clients, or for the detection or prevention of fraud, as well as for the apprehension or prosecution of criminal acts. 4.<\/strong> To compile a database of potential suppliers for the company\u2019s future product and service requirements. 5.<\/strong> To carry out processes related to the evaluation of proposals, payments, consolidation, organization, updating, quality assurance, accreditation, statistics, reporting, interaction, auditing, surveys, legal defense, and the management of the company\u2019s operations, information, and activities. 6.<\/strong> To verify whether a supplier appears on any restricted lists\u2014such as those concerning money laundering or terrorist financing\u2014or any other list that would preclude the establishment of a contractual relationship. 7.<\/strong> To grant access to information and personal data to auditors or third parties engaged for internal or external audit processes related to our business operations. 8.<\/strong> Evaluate the capability and suitability of a potential supplier\u2014including the individuals under their coordination\u2014to meet supplier selection requirements by verifying the supporting documentation submitted during the process, such as r\u00e9sum\u00e9s, proof of experience, and academic credentials, among others. 9.<\/strong> Request from the supplier or distributor\u2014as well as from the personnel assigned to perform the contracted service or work\u2014the relevant documentation confirming their enrollment in the general social security system.<\/p>\n

If personal data is provided, such information shall be used solely for the purposes specified herein; therefore, PIYION<\/strong> it shall not be sold, licensed, transmitted, or disclosed, except when: (i) the data subject has provided express authorization; (ii) it is necessary to enable contractors or agents to perform the assigned services; (iii) it is necessary for the provision of our services and\/or products; (iv) it is necessary to disclose such information to entities that provide marketing services on behalf of PIYION<\/strong> or to other entities with which there are joint marketing agreements; (v) the information relates to a merger, consolidation, acquisition, divestiture, or other corporate restructuring process; or (vi) such disclosure is required or permitted by law.<\/p>\n

PIYION<\/strong> Third parties may be engaged as subcontractors to process specific functions or information. In cases where the processing of personal data is subcontracted to third parties, or where personal data is provided to third-party service providers, PIYION<\/strong> such third parties are instructed to protect the personal data using appropriate security measures; the use of this information for their own purposes is prohibited, and it must be limited to the purposes specified by PIYION<\/strong>; furthermore, they are required not to disclose the personal data to any other parties.<\/p>\n

For the purposes mentioned above, PIYION<\/strong> third parties providing services to this company may be granted access to the collected information, provided that adequate data management is guaranteed and the identity and confidentiality of the data subjects are protected. To this end, PIYION<\/strong> appropriate precautionary measures will be taken prior to the transfer of such data. This includes requiring third parties to have in place proper data processing policies\u2014applicable to recipients\u2014as well as confidentiality agreements, where necessary. Furthermore, the right to collect, use, and share the provided data is secured based on the user\u2019s prior, informed consent, as granted through the authorization for the processing of personal data.<\/p>\n

3.1. DATA ANALYSIS<\/h3>\n

Regarding the processing of data\u2014which, for PIYION<\/strong>, serves the purposes of product promotion and the management of personnel and suppliers\u2014it is important to note that PIYION<\/strong> is a software development company. Consequently, data may be used to personalize the user experience by offering services and products tailored to each client’s individual preferences. It may also be used to conduct internal analyses to better understand how clients interact with our services, identify areas for improvement in internal processes, and optimize the operational efficiency of PIYION,<\/strong> as well as to identify opportunities for innovation in our products and services, anticipate future market needs, and develop advanced technological solutions.<\/p>\n

We wish to emphasize that the security of your data is our highest priority. Therefore, under no circumstances will your personal data (such as document type, document number, first and last names, phone number, or email address) be used in the creation of reports on consumer habits. For these purposes, personal data will be disassociated\u2014anonymized\u2014so that the resulting insights cannot be linked to any specific individual.<\/p>\n

Considering that PIYION<\/strong> it will collect data from individuals belonging to member countries of the European Union, PIYION<\/strong> states that the collected data offers an adequate level of protection under the framework of Regulation (EU) 2016\/679 of the European Parliament and of the Council of 27 April 2016, providing appropriate safeguards for the personal data of this population. Such data is collected in an appropriate and lawful manner, in line with the needs of the users who provide their personal data, while respecting their general interests.<\/p>\n

International data transfers that may arise PIYION<\/strong> will be carried out in accordance with the provisions of the GDPR. Therefore, by signing the authorization for the processing of personal data, you are authorizing PIYION<\/strong> to use this information in line with its objectives and approach, as set out in this policy. PIYION<\/strong> will respect the rights of the data subjects and ensure an adequate level of protection. Such transfers of personal data are made solely for the purpose of fulfilling the legitimate interests for which the data subject provides their personal data to PIYION<\/strong>. Furthermore, such transfers are not repetitive and will only concern the data subjects, whose rights and interests take precedence.<\/p>\n

Website: Web analytics tools are used to obtain aggregated information on traffic to websites\u2014covering audience, acquisition, behavior, and conversions occurring on the site. This service is provided by an intermediary that supplies information on how to improve the website\u2019s service, but under no circumstances does it provide personal information.<\/p>\n

Data of potential clients (individuals or legal entities): Data collected via our website and our sales agents is processed using an in-house or third-party email marketing platform. This platform enables the management of contacts and the scheduling of marketing activities aimed at converting potential clients into registered clients, or offering services to non-registered individuals (such as providing service quotes).<\/p>\n

Data of registered users (individuals or legal entities): This data is managed within our platform, where we analyze user behavior on our webpages. Such data is provided directly by our users, allowing us to understand their tastes and preferences. This information also helps us organize promotional efforts and service delivery, ensuring an excellent user experience. Consequently, we maintain digital records that allow us to analyze, calculate, and develop statistical data\u2014information we deem relevant to the operation and marketing of our services, as well as to maintaining long-term commercial relationships with our clients.<\/p>\n

Data of job applicants, current employees, and former employees: PIYION<\/strong>We maintain digital files containing resumes and all information requested from job applicants, current employees, and former employees. This allows us to access the data as needed to carry out the processes described in the stated purpose for this type of database. These digital files are stored on our servers and on computers located within the department assigned to handle these processes.<\/p>\n

Suppliers and contractors: Information is processed via a series of digital files containing data on suppliers, proposals submitted, PIYION<\/strong> and performance analyses\u2014that is, our experience working with each supplier. These digital files are organized into categories, and the data is stored on our servers and the computers of the relevant department. Contractors and suppliers may also provide their information in person by completing supplier registration forms at our facilities.<\/p>\n

3.2. DATA SUBJECTS<\/h3>\n

Users: This category includes anyone who accesses our website\u2014whether an individual or someone visiting on behalf of a company to learn about PIYION.<\/strong><\/p>\n

These individuals do not register on our website; therefore, we consider them anonymous.<\/p>\n

Potential clients: individuals who are interested in receiving notifications and commercial information from PIYION<\/strong> and who, for this purpose, provide us with their details to receive such information\u2014whether digitally, in physical form, or through a sales representative. This type of client is categorized as follows:<\/p>\n

Individuals: persons interested in our services or who wish to obtain commercial information via our website, social media, or sales representatives, and who provide us with their name, email address, and phone number.<\/p>\n

Companies: individuals who, on behalf of a company, provide us with their details (company name, contact person\u2019s name and job title, email, phone number, and address) for the purpose of receiving commercial information about our services\u2014whether via our website, social media, or sales representatives.<\/p>\n

Registered users: individuals who, in order to use our services, complete the registration process in our system\u2014either through our website or via a sales representative.<\/p>\n

Registered individuals: persons who register by providing their national identification number, full name, phone number, address, email, and age. Through our web portal, they are assigned a password\u2014which they must then customize\u2014to access our services, which are focused on the promotion and marketing of vehicles.<\/p>\n

Registered companies: entities that register by providing their official identification number, company name, address, the full name of a contact person for the legal entity, and an email address.<\/p>\n

Applicants, current employees, and former employees: individuals who provide us with information relevant to selection processes and the fulfillment of obligations arising from employment relationships.<\/p>\n

Suppliers and contractors: These are the individuals or legal entities that provide PIYION INC.<\/strong> with the products and services necessary to fulfill its objectives; for this reason, we consider our suppliers to be strategic partners in the success of our operations.<\/p>\n

3.3. INFORMATION COLLECTED<\/h3>\n

The information that may be collected PIYION<\/strong> includes: user or company name; age; gender; address; official identification; email addresses; phone numbers; profile information; date of birth; country, state\/department, and city; the company for which the individual works; job title; academic, professional, family, social security, payroll, and banking information (when necessary for an employment or contractual relationship); and other information described in this Policy. For purposes of commercial profiling and customer management, business-related information may also be collected, such as the legal business name, sector or industry, company size, location and market, website, products or services, business model, needs, interests, purchase intent, sales stage, interaction history, CRM notes, support requests and cases, and experience or satisfaction ratings. Through e-commerce integrations, information may also be processed regarding products viewed, cart content and value, abandoned cart status, orders, discounts, shipping and billing details, and transaction status.<\/p>\n

Data concerning users, administrators, and companies is used to: (i) manage accounts and provide the service; (ii) send promotional information about products and services, where applicable; (iii) track the sales process; (iv) compile statistics; (v) conduct commercial profiling of customers and prospects; (vi) provide support, document requests, and improve the customer experience; and (vii) manage communications regarding abandoned carts. Clients of PIYION<\/strong> may store data belonging to their end users in order to carry out their business processes; in this context, the client acts as the Data Controller and PIYION<\/strong> acts as the Data Processor, unless a specific activity dictates a different designation in accordance with the law and the applicable contract.<\/p>\n

Documents that data subjects are requested to complete and provide: i) A completed Supplier Registration Form; ii) A copy of the identity document (for individuals) or a copy of the legal representative\u2019s identity document (for legal entities); iii) A current Chamber of Commerce certificate for the principal place of business and any branch office(s) (if applicable); iv) An updated Unified Tax Registry (RUT); v) The income tax return for the immediately preceding year; vi) Financial statements as of December 31 of the immediately preceding year, including the balance sheet and income statement with notes; vii) Current quality management certificates (if held); viii) Operating authorizations (where applicable, e.g., for security firms, transport companies, customs agencies, accredited laboratories, telecommunications providers, prepaid medical service companies, etc.); ix) A portfolio of products and\/or services; x) A current document certifying the existence and legal representation of the entity in its country of principal domicile, issued no more than 60 days prior. This document must be duly legalized in accordance with applicable regulations\u2014meaning it must include an official translation (if in a language other than Spanish) and a chain of authentication (comprising the notary and consulate in the country of origin, followed by the Ministry of Foreign Affairs in Colombia); xi) A document certifying registration in the equivalent of a tax registry (such as the RUT) in the country of principal domicile, duly apostilled; xii) Operating authorizations, licenses, or permits (where applicable\u2014e.g., for transport companies, customs agencies, accredited laboratories, or telecommunications providers\u2014duly apostilled).<\/p>\n

3.3.1. Specific information collected based on the category and type of Data Subject<\/h4>\n

a) Website:<\/strong> You may be a User, a potential client (individual or legal entity), or a registered client (individual or legal entity). The following procedures, carried out on our website, apply to all these types of clients. Piyion website<\/a><\/p>\n

The content or information collected includes: internet browser, computer or operating system, online identifiers (such as IP address), connection speed, geographic location, the point of entry to our website, or the sites from which you connected to our website. Furthermore, we analyze the time spent and behavioral patterns on the site to improve our service. Information is collected directly from the data subject via the website, including personally identifiable information such as: name, identification number, telephone number, employer (company), email address, location, residential address, and economic, cultural, or mental health-related information, among other required data.<\/p>\n

b) Potential clients:<\/strong> Potential clients are subdivided as described in this policy.<\/p>\n

c) Individual (natural person) users:<\/strong> This category consists of clients who register in our database by providing the following information: type of identification document, identification number, full name, email address, contact telephone number, department\/state, city, address, password, and age. Additionally, PIYION<\/strong> users may post testimonials on our website, which may contain personal information such as their name, residential address, and details regarding the services they wish to market.<\/p>\n

d) Corporate users:<\/strong> These are entities that contract for the services of PIYION<\/strong> for the supply of products offered by PIYION<\/strong>. The information they provide\u2014whether through the web portal or a sales representative\u2014includes their legal business name, tax identification number (NIT), the legal representative\u2019s identification, address, email, telephone number, and residency information.<\/p>\n

e) Data regarding applicants, current employees, and former employees of PIYION INC:<\/strong> This database contains information on our applicants, current employees, and former employees, and is managed by the Human Resources department.<\/p>\n

f) Suppliers and contractors:<\/strong> These are the natural or legal persons that supply PIYION<\/strong> with the products and services necessary to meet its objectives; for this reason, we consider our suppliers to be strategic partners in the execution of our operations.<\/p>\n

Suppliers and contractors selected through our procurement processes will be evaluated periodically to assess their performance during the execution of their contracts. This allows us to define objectives for continuous improvement, ensuring that the supply of goods or services meets high standards of quality and efficiency.<\/p>\n

g) Payment methods:<\/strong> PIYION INC.<\/strong> We primarily use Stripe as a technology provider for payment processing. When a data subject makes a payment via this service, the information required to process the transaction may be collected or received directly by Stripe, in accordance with its own terms, conditions, and privacy policy.<\/p>\n

PIYION INC.<\/strong> We may receive and retain information related to the transaction, such as the payer\u2019s identification, email address, payment purpose, amount, currency, date, payment status, receipts, and\u2014where applicable\u2014limited details regarding the payment method used, such as the card brand and the last four digits of the card number. PIYION INC.<\/strong> We do not store full card numbers, CVV security codes, or complete payment credentials.<\/p>\n

Authorization for the processing of payment-related data may be obtained through contractual clauses, electronic mechanisms, or the clear, unambiguous actions of the data subject, provided that they have been previously furnished with sufficient information regarding such processing and that PIYION INC.<\/strong> we are able to retain evidence of the mechanism used. Making a payment does not constitute authorization for commercial purposes other than those previously disclosed.<\/p>\n

In exceptional cases, PIYION INC.<\/strong> we may accept other payment methods, subject to internal authorization by our President, provided that these are documented in the relevant subscription contract, commercial agreement, or equivalent document. In these cases, only the data necessary to execute, verify, reconcile, and validate payments, prevent fraud, manage the contractual relationship, and comply with applicable legal, tax, and accounting obligations will be processed and shared.<\/p>\n

Financial providers or payment processors may process certain data in accordance with their own legal obligations and privacy policies. The Data Subject may consult Stripe\u2019s privacy policy at Stripe Privacy Policy<\/a>.<\/p>\n

3.4. HOW INFORMATION IS COLLECTED<\/h3>\n

Information may be provided directly by Data Subjects via email, telephone, in-person interaction, websites, applications, social media, WhatsApp, virtual platforms, commercial agents, events, forms, and registration processes; it may also be received through integrations, APIs, webhooks, cookies, and similar technologies, in accordance with the settings authorized by the client and the Data Subject.<\/p>\n

3.4.1. Websites and automatic data collection<\/h4>\n

Our websites use a technology known as “cookies”\u2014files that can be downloaded to your device via the websites. These tools play an essential role in the provision of many information society services. Among other functions, they allow a website to store and retrieve information about a user\u2019s browsing habits or their device; depending on the information obtained, they can be used to recognize the user and improve the service provided. Information is also collected directly from the Data Subject through the completion of forms.<\/p>\n

Information may be collected or synchronized by PIYION INC.<\/strong> through the platform and active channels and integrations, including Google, TikTok, WhatsApp, Instagram, Facebook Messenger, LinkedIn, iMessage, Meta Business, email, websites, contact forms, WooCommerce, Shopify, Zoho CRM, and Zapier. It can also be received via phone calls, online or physical forms, and direct contact with the individual.<\/p>\n

Information from digital channels and partners may be transmitted via APIs, webhooks, and pre-configured automations. The scope of the data depends on the enabled integration, the permissions granted, the client\u2019s configuration, and the provider\u2019s terms. PIYION will limit data processing to the purposes described in this Policy, the instructions provided by the client (when PIYION acts as a data processor), and the applicable agreements with providers and sub-processors.<\/p>\n

3.4.2. Third-party integrations and e-commerce<\/h4>\n

Depending on the integrations enabled by each client, PIYION INC.<\/strong> the platform can connect directly with Meta and its services (Facebook, Instagram, Messenger, and the WhatsApp API), Telegram, TikTok, Google, WooCommerce, Shopify, Zoho CRM, Zapier, contact forms (including those managed via “Contact Form” or similar tools), as well as the client\u2019s own APIs or systems for which a specific, documented integration has been requested. It may also connect with other channels and platforms that might be integrated as the platform PIYION<\/strong> evolves over time.<\/p>\n

The mention of these platforms does not imply that all integrations are available to every client. Their availability and scope depend on the service plan, the configuration applied, the features offered by each provider, and the permissions granted by the client.<\/p>\n

These integrations allow the client to access and utilize PIYION<\/strong> specific features inherent to the connected platforms. Depending on the integration enabled, PIYION<\/strong> the client may receive, view, transmit, or synchronize account and profile identifiers; data regarding contacts, customers, and leads; messages and interactions; forms; campaigns and audiences; as well as information related to products, browsing activity, shopping carts, orders, discounts, shipping, invoicing, and transaction statuses. CRM opportunities, activities, notes, and cases; files; metadata; technical logs; and any other fields specifically authorized by the client.<\/p>\n

In the case of a client\u2019s proprietary APIs or specific systems, the scope of the connection shall be defined in the request, contract, technical annex, or other applicable document. Such a document may identify the data involved, the permitted purposes, the responsibilities of the parties, the conditions for access, and the corresponding security measures. The client must possess the necessary authorizations, permissions, and authority to allow for the access, transmission, or synchronization of the information included in the integration.<\/p>\n

The activation and maintenance of integrations are carried out using the official or documented mechanisms provided by each platform, including their respective processes for authorization, verification, permission assignment, and technical validation. Where applicable, PIYION<\/strong> internal technical and legal reviews are conducted to verify the requested scope and ensure that the connection is configured in a direct, legitimate, and secure manner.<\/p>\n

PIYION<\/strong> Personal credentials used by the client to log in to connected platforms\u2014such as usernames, passwords, or one-time verification codes\u2014are neither requested nor stored, provided that authentication takes place within the environment of the respective provider.<\/p>\n

To establish and maintain the connection, PIYION<\/strong> essential technical information may be processed, such as account or business identifiers, connection addresses, granted permissions, access tokens, API keys, webhook secrets, integration status, and technical logs. These elements are used solely for the purpose of configuring, operating, verifying, maintaining, and securing the integration, and are subject to internal access controls and applicable security measures.<\/p>\n

When PIYION<\/strong> processes personal data through an integration on behalf of and under the instructions of the client, it shall act as a Data Processor, while the client shall retain the status of Data Controller. This is without prejudice to any operations in which PIYION<\/strong> it acts as a Data Controller by directly determining the purposes and means of processing. Each third-party provider may also process information in accordance with its own terms, privacy policies, and legal obligations.<\/p>\n

Data obtained through these integrations may be used to provide and automate the service; manage communications, contacts, and opportunities; perform commercial profiling; provide support; personalize and improve the customer experience; measure results; maintain security; prevent fraud; execute authorized automations; and manage the recovery of abandoned carts through reminders or authorized communications.<\/p>\n

The aforementioned purposes apply depending on the platform, the permissions granted, and the relevant legal relationship. In the case of data obtained via Google APIs, only the purposes, restrictions, and conditions set forth in the following section shall apply; these shall take precedence over any incompatible general purpose contained in this Policy.<\/p>\n

3.4.3. Specific processing of data obtained via Google APIs<\/h4>\n

This section specifically describes how PIYION INC.<\/strong> it accesses, uses, stores, protects, shares, and deletes information received via Google APIs. For the purposes of this section, \u201cGoogle user data\u201d refers to information obtained directly from a Google account or service through permissions authorized by the user.<\/p>\n

Connection and authorization method:<\/strong> The connection is established using Google\u2019s official OAuth 2.0 authorization system. Before the integration is activated, Google displays the requested permissions to the user. PIYION INC.<\/strong> It will only request the permissions necessary to enable the features selected by the user or the client organization. PIYION INC.<\/strong> It does not request, have access to, or store the user\u2019s Google account password or personal verification codes.<\/p>\n

The user may choose not to grant the requested permissions or may revoke them at a later time. In such cases, features that rely on integration with Google will no longer be available, without affecting any functionality PIYION<\/strong> that does not require such a connection.<\/p>\n

Google data that PIYION may access:<\/strong> Depending on the enabled features and the permissions displayed on the consent screen, PIYION INC.<\/strong> it may access the following categories of information:<\/p>\n