General information
Data controller: NCA Technologies S.A.S., CUIT 30-71929379-0, with registered address at José A. Cabrera 3840, Piso 9, Dpto. E, Ciudad Autónoma de Buenos Aires, Argentina.
Privacy contact: [email protected]
NCA Technologies - Privacy Policy
Effective date: 03/15/2026
1. Scope
This Policy describes how NCA Technologies collects, uses, shares, and protects personal data when you visit our website, create an account, or use the Services. If you use NCA Technologies on behalf of an organization, that organization may control how Client Data is processed; in that case, NCA Technologies acts as a Processor in accordance with the DPA.
2. Data we collect
• Account data: name, email, company, role, credentials (hash), and preferences.
• Usage data: product events, technical logs, approximate IP, device/browser, and performance metrics.
• Client Data: content, files, prompts/instructions, and data integrated from third parties depending on your configuration.
• Support and communications: tickets, messages, and interaction records.
3. Purposes and legal bases
• To provide and administer the Services, authentication, and support (performance of a contract).
• Security, fraud/abuse prevention, and legal compliance (legitimate interest and/or legal obligation).
• Billing, collections, auditing, and commercial management (contract and legal obligation).
• Product improvement and operational analytics (legitimate interest; where applicable, aggregated/anonymized data).
• Marketing: commercial communications and updates (consent or opt-out depending on applicable law).
4. Sharing and recipients
NCA Technologies may share data with subprocessors and providers necessary to operate the Services, including hosting, analytics, support, messaging, payments, and AI providers. We may disclose data when legally required, to protect rights and security, or in the context of corporate transactions, subject to appropriate safeguards.
5. International transfers
Where data is transferred to other countries, NCA Technologies will apply appropriate safeguards in accordance with applicable regulations, such as standard contractual clauses or other valid transfer mechanisms for the EU/UK.
6. Retention
We retain data for as long as necessary to provide the Services, comply with legal obligations, resolve disputes, and enforce agreements. Retention of Client Data is governed by the DPA and/or the contracted configurations.
7. Individual rights
Depending on applicable law, you may request access, rectification, updating, deletion, objection, restriction, and portability. You may also withdraw marketing consents. To exercise your rights, contact us at [email protected]. We may request identity verification.
8. Security
We apply reasonable technical and organizational measures to protect your data. Below is a summary of our main security controls. Security contact: [email protected]
Governance and policies: Internal security and confidentiality policies, staff training, and vendor management with contractual security clauses.
Access controls: Least-privilege principle, role-based separation, MFA available, and audit logs.
Encryption and data protection: Encryption in transit (TLS), encryption at rest where applicable, and secure secrets management with periodic rotation.
Secure development: Code reviews, dependency management, security patches, and vulnerability monitoring.
Resilience: Backups, recovery procedures, and availability monitoring.
Incident response: Internal process for detection, containment, and recovery. Notification to affected users as required by applicable regulations.
9. Cookies
Cookies are small text files stored on your device to enable features, remember preferences, and measure site usage.
Technologies we use: Session cookies, preference cookies (language, settings), and usage and performance analytics.
Categories:
• Necessary: essential to operate the site and cannot be disabled.
• Preferences: remember your settings to improve your experience.
• Analytics: help us understand site usage and make improvements.
Management: You can accept or reject optional categories via the banner shown when you first visit the site, and change your choice at any time through your browser settings. Note that blocking cookies may affect some features.
10. Minors
The Services are not directed to individuals under 18 years of age.
11. Changes
NCA Technologies may update this Policy; the current version and its effective date will be published.