AutonomekWeb · AI · Software
Home/Privacy Policy
Habeas Data & GDPR Compliance

Privacy Policy & Data Protection

How Autonomek protects, encrypts, and processes your commercial and project data. We commit to zero sale of personal information and ensure customer conversations never train public AI models.

Last updated: November 2026Encrypted Cloud Storage (AES-256)Zero Public AI Model Training
/01

Data Controller & Contact Information

Identification of Autonomek and direct Data Protection Officer contact.

AUTONOMEK (hereinafter "Autonomek", "we", "us", or "our") operates as the data controller responsible for the processing of personal data collected through this website, our official WhatsApp channels, customer relationship management systems, and proprietary software platforms.

Data Protection Contact: For any privacy inquiries, exercising statutory rights, or requesting data erasure, you may contact our engineering and legal team directly at privacidad@autonomek.com or contacto@autonomek.com.

Legal Framework: We process personal information in strict compliance with the statutory principles of legality, purpose limitation, transparency, and security under Colombian Law 1581 of 2012 (Habeas Data), the European Union General Data Protection Regulation (GDPR - Regulation EU 2016/679), and relevant state privacy laws across the United States.

/02

Information We Collect

Contact data, commercial requirements, and technical telemetry.

Voluntarily Provided Data: When you contact us via WhatsApp, request a diagnostic audit, book an engineering consultation, or contract a project, we collect: full name, business email address, corporate telephone number, company name, geographical location, and project requirements.

Client Operational Data: During custom software or AI agent development, you may provide service menus, catalog prices, organizational policies, or workflow credentials under strict mutual confidentiality.

Automated Technical Data: When browsing our website, we collect anonymized technical telemetry including IP address, browser type, operating system, referrer URL, and interaction timestamps via privacy-preserving analytics.

/03

Purposes of Data Processing

Service delivery, technical scoping, and direct commercial communication.

Technical & Commercial Diagnosis: Evaluating your business requirements to prepare closed-price engineering proposals, architecture roadmaps, and return-on-investment projections.

Project Execution & Deployment: Building, testing in sandbox staging environments, and deploying your websites, AI agents, database architectures, and automated pipelines.

Operational Support & SLA: Delivering post-launch warranties, technical monitoring, critical updates, and customer support via authorized WhatsApp channels.

Legal & Invoicing Obligations: Issuing commercial tax invoices, maintaining accounting records, and complying with statutory fiscal requirements.

No Data Commercialization: Autonomek NEVER sells, rents, leases, or trades your personal data or your company’s customer records to data brokers, advertising networks, or third-party marketers.

/04

WhatsApp AI Processing & Zero Training Pledge

Client enterprise data is never used to train public foundational AI models.

API Data Privacy: Conversations processed through our WhatsApp AI agents utilize enterprise-grade APIs (Meta Cloud API, OpenAI API). Under enterprise API licensing agreements, your confidential business prompts and customer dialogues are NOT used to train, retrain, or improve public foundational AI models.

Ephemeral Vector Retrieval: Knowledge base documents and catalogs indexed into Retrieval-Augmented Generation (RAG) vector stores remain in isolated, encrypted cloud databases assigned solely to your project.

Multimodal Vision & Voice Notes: Voice notes transcribed and payment screenshots parsed by OCR are processed transiently in memory to perform the requested workflow action and are not retained for unauthorized secondary purposes.

/05

Subprocessors & Cloud Infrastructure

Encrypted tier-1 cloud providers with SOC 2 / ISO 27001 compliance.

To ensure sub-second global speed, 99.9% uptime, and end-to-end security, Autonomek engages vetted enterprise subprocessors:

• Hosting & Edge Infrastructure: Vercel Inc. and Google Cloud Platform (global edge networks, automated SSL, SOC 2 Type II certified).

• Database & Authentication: Supabase / PostgreSQL (AES-256 encrypted at rest, TLS 1.3 in transit).

• Official Messaging: Meta Platforms Ireland Ltd. / Meta WhatsApp Cloud API (end-to-end transport encryption).

• Analytics: Google Analytics 4 (configured with IP anonymization and zero cross-device ad targeting).

/06

Your Statutory Rights (Habeas Data & GDPR)

Access, rectification, erasure, portability, and consent withdrawal.

Regardless of your geographical residence, Autonomek guarantees your right to:

1. Access & Know: Request a full copy of the personal data we hold about you and understand how it is being processed.

2. Rectification: Request the correction of inaccurate, incomplete, or outdated information.

3. Erasure (Right to be Forgotten): Request the deletion of your personal records from our databases when they are no longer necessary for the contracted service or statutory tax retention.

4. Consent Revocation: Revoke at any time the authorization granted for optional communications.

To exercise any right, submit an email with the subject "Habeas Data Request" to privacidad@autonomek.com. We respond within a maximum of ten (10) business days.

/07

Cookies & Tracking Technologies

Essential cookies and privacy-respecting performance analytics.

We use minimal, privacy-first cookies and local storage tokens strictly required for:

• Essential Navigation: Preserving your language preference (EN/ES) and responsive UI states.

• Anonymized Analytics: Measuring aggregated page visit volumes and Core Web Vitals to optimize loading speed without building behavioral advertising profiles.

You can disable or delete cookies at any time via your browser settings. Our website does not gate access if optional analytical cookies are disabled.

Exercise your data rights

Request a copy of your records, update information, or ask for complete deletion of your data at any time.

privacidad@autonomek.com