Privacy Policy

This Privacy Policy applies to Deltanova S.A.S., a Colombian sociedad por acciones simplificada with tax ID NIT 901.827.117-1 (“Deltanova”, “we”, “us”), and to the websites, products, and services we provide at deltanova.io and its subdomains (the “Service”).

Deltanova rebuilds existing businesses into AI-native operating models. To do that work, we collect a limited amount of personal information from the people who reach out to us, the people we have conversations with, and the businesses that grant us authorized access to their systems.

(a) Information you give us directly. When you submit a form on deltanova.io (including waitlist signups, applications for access, and contact requests), we collect the personal information you provide. This typically includes your name, work email, company, role, and any message you write to us.

(b) Information from conversations and discovery sessions. When you book or join a call with us through scheduling and video tools (for example, Google Calendar invites, Cal.com, Calendly, Google Meet, or Zoom), we collect the meeting metadata (your name, email, scheduled time, attendees) and the substantive content of the conversation. Calls may be recorded and transcribed using third-party AI transcription tools. We will obtain your consent before recording begins, and you may decline recording at any time without losing access to the conversation itself.

(c) Information from authorized access to your systems. If you become a design partner or customer and you grant us access to specific systems (for example, dispatching, CRM, scheduling, email, billing, or operational tooling), we access only what you authorize, only for the purposes you authorize, and only for the duration you authorize. The scope of access is documented in writing before access is granted. We do not extract data beyond the agreed scope.

(d) Website analytics. We use Vercel Analytics, a cookieless analytics product, to understand which pages people visit and how the site performs. This produces aggregate, non-identifying information about traffic. We do not use Google Analytics, Meta Pixel, LinkedIn Insight Tag, TikTok Pixel, or other cookie-based or fingerprint-based trackers on this site.

(e) Information automatically collected. Like most websites, our servers automatically receive technical information about your request (IP address, user agent string, referrer, timestamp). We use this information for security, debugging, and abuse prevention.

We use the information we collect to:

• Provide, operate, and improve the Service.
• Respond to your inquiries and process applications for access.
• Conduct discovery conversations with prospective design partners.
• Analyze operations within authorized systems and produce the deliverables you have requested.
• Send transactional and operational communications (for example, reply to your inquiry, follow up after a conversation, send agreed-upon deliverables).
• Maintain security, prevent fraud and abuse, and enforce our terms.
• Comply with legal obligations.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising.

Deltanova uses third-party large language model (LLM) providers, currently including Anthropic and OpenAI, to summarize, analyze, and structure information drawn from our work with you. This includes (a) transcripts and summaries of recorded conversations, (b) analyses of authorized data inside your systems, and (c) drafts of deliverables we produce for you.

We choose providers and configurations that contractually prohibit using submitted content to train their foundation models. To the best of our knowledge, the inputs and outputs we send to these providers are not used to train models that benefit other customers.

We apply the same standard to the AI transcription tools we use for recorded conversations: vendors are selected with a “no training on call content” requirement. The specific transcription vendor in use at any given time may vary; we will update this section as our vendor list changes.

We share personal information only in the following circumstances:

(a) With subprocessors that operate our infrastructure. Each subprocessor processes data only under contract and only for the purposes we direct.

(b) With your authorization. If you instruct us to share your information with a third party (for example, a partner you want copied on a deliverable), we will follow your instruction.

(c) For legal reasons. We may share information when required by law, legal process, or to protect the rights, property, or safety of Deltanova, our customers, or others.

(d) In a corporate transaction. If Deltanova is involved in a merger, acquisition, financing due diligence, or sale of assets, information we hold may be transferred as part of that transaction. Successors are bound by this Privacy Policy or a substantially similar one.

We do not sell or rent personal information, and we do not share it for cross-context behavioral advertising.

We retain personal information for as long as you maintain a relationship with us, or for as long as the information remains useful to the purpose for which we collected it, whichever is shorter.

You may request deletion of your personal information at any time by writing to hello@deltanova.io, and we will honor your request unless we are legally required to retain certain records (for example, tax records, audit trails, or fraud prevention).

When you request deletion, we remove your information from our active systems within 30 days and from backups on the standard backup rotation cycle.

We protect personal information with administrative, technical, and physical safeguards proportionate to the sensitivity of the information and the risks involved:

• Encryption in transit (TLS) and at rest where supported by our subprocessors.
• Access controls limiting who at Deltanova can view personal data, on a need-to-know basis.
• Audit logging of administrative actions on our infrastructure.
• Vendor selection requirements for security posture (SOC 2, ISO 27001, or equivalent where available).

No security control is perfect. If we become aware of a personal data breach affecting your information, we will notify you and any applicable authorities in accordance with the law (within 72 hours of becoming aware, where required).

Deltanova is based in Colombia. Some of our subprocessors (including Vercel, Supabase, Anthropic, and OpenAI) are based in the United States or process data in the United States. The United States is included in the list of countries with adequate protection under Circular Externa 005 of 2017 issued by the Superintendencia de Industria y Comercio (SIC).

By using the Service, you understand that your information may be transferred to and processed in jurisdictions outside Colombia, including the United States. For California and other U.S. residents, the converse also applies: your information may be processed in Colombia.

You have rights over the personal information we hold about you. The specific rights depend on where you are located.

Under Colombian Ley 1581 of 2012 (Habeas Data), you have the right to:

• Know what personal information we hold about you and obtain a copy.
• Update, correct, or rectify inaccurate or incomplete information.
• Request the deletion of your information when it is no longer needed or when processing violates the law.
• Withdraw consent to the processing of your information at any time.
• File a complaint with the Superintendencia de Industria y Comercio (SIC) if you believe your rights have been violated.

Under the California Consumer Privacy Act (CCPA / CPRA), you have the right to:

• Know what categories of personal information we collect, the sources, and the purposes.
• Access the specific pieces of personal information we hold about you.
• Delete personal information we hold about you, subject to legal exceptions.
• Correct inaccurate personal information.
• Opt out of the sale or sharing of personal information. We do not sell or share, but you may exercise this right as a matter of course.
• Non-discrimination for exercising any of these rights.

Other jurisdictions. If you reside elsewhere and applicable law grants you privacy rights similar to those above, you may exercise those rights with us.

To exercise any of these rights, write to hello@deltanova.io with the subject line “Privacy request”. We respond within 15 business days for Ley 1581 requests and within 45 days for CCPA requests, as required by the applicable law. We may verify your identity before fulfilling the request.

You may authorize an agent to make a request on your behalf. We require written authorization and may verify the agent’s identity and the underlying authorization.

The deltanova.io website uses only Vercel Analytics, a cookieless analytics product. Vercel Analytics does not set cookies, does not use cross-site identifiers, and does not fingerprint your device. Aggregate, non-identifying information about page traffic is the only output.

We do not use Google Analytics, Meta Pixel, LinkedIn Insight Tag, TikTok Pixel, or any other cookie-based or fingerprint-based tracking on this site. We do not need a cookie consent banner because we do not set non-essential cookies.

If this changes, we will update this section and, where required by law, present a consent banner before any non-essential tracking technology is loaded.

Deltanova is a business service for businesses. The Service is not directed to children, and we do not knowingly collect personal information from individuals under 18. If we learn that we have collected personal information from a child, we will delete it. If you believe a child has provided us personal information, please write to hello@deltanova.io.

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. For material changes, we will provide additional notice (for example, by email to people we have a contact relationship with, or via a notice on the website) before the change takes effect.

To exercise a privacy right, ask a question about this policy, or report a concern about how we handle personal information, contact us at:

Deltanova S.A.S.
NIT 901.827.117-1
Colombia
hello@deltanova.io

For complaints, Colombian data subjects may also contact the Superintendencia de Industria y Comercio (SIC), the national data protection authority, at sic.gov.co.