Privacy Policy and Data Processing

Who we are and our role

Diana is a product of Pine Capital S.A.S. (Colombian tax ID NIT 901895020-6, Bogotá, Colombia; contact: privacidad@mg.getdiana.app), operated by 4.0 Digital Partner. Pine Capital S.A.S. runs the AI messaging platform "Diana" on behalf of each client business (the data controller) that connects its WhatsApp, Facebook Messenger or Instagram channels to the platform. In that relationship, Pine Capital S.A.S. acts as data processor: we process data following the client business's instructions and solely to provide it with the automated customer-service product.

Data we process

When you message a business that uses Diana, the platform receives: your user identifier on the messaging platform (WhatsApp number or Messenger/Instagram user ID); your profile name and public username; the content of the messages you send, including images and files; and any data you choose to share during the conversation (for example name, email, phone number, or any other information about your request).

Purpose

This data is used to handle your request, inform you about the products or services of the business you contacted, qualify your interest and, where applicable, book an appointment or put you in touch with a sales representative of the business. Part of the conversation may be handled by an automated AI assistant; at any time you can ask to talk to a person. We do not use your data to send you unsolicited advertising, and we do not sell it to third parties.

Legal basis

Processing is carried out under Colombian Law 1581 of 2012 and Decree 1377 of 2013. By messaging a business that uses Diana through these channels, you authorize the processing described here.

Sub-processors

To provide the product, Pine Capital S.A.S. uses cloud infrastructure and AI language-model providers, contracted under terms that restrict the use of your data to operating the platform. Meta Platforms, Inc. is an independent controller of the processing it performs on WhatsApp, Facebook Messenger and Instagram, under its own policies.

Retention

We keep conversations for as long as there is a commercial or pre-contractual relationship between you and the business you contacted, and for up to 24 months after the last contact, unless a different legal obligation applies.

Your rights and how to exercise them

You can access, update, correct and delete your personal data, and withdraw the authorization you granted, at any time. To exercise these rights, write to privacidad@mg.getdiana.app or use the same messaging channel through which you contacted the business, stating your request. We handle requests within a maximum of 15 business days. For specific instructions on deleting your data, see Data deletion.

Security

Information is transmitted encrypted and access is restricted per client business: each business can only see the conversations of its own users.

Minors

This product is not intended for minors. If a business identifies that it is serving a minor, it must stop the automated processing and refer the case to a responsible adult.

Changes to this policy

We may update this policy to reflect changes in the product or in applicable regulations. The current version will always be published on this page with its update date.