1. Data Controller
Who is responsible for your personal data.
Kempro SAS
Kempro SAS ("Kempro," "we," "us"), located at Calle 7 Sur #42-70, Barrio El Poblado, Medellín, Antioquia, Colombia, is responsible for processing the personal data you provide through this website. You can contact us at:
2. Applicable Legal Framework
The Colombian laws that govern this notice.
This notice is governed by Colombian Law 1581 of 2012 and Decree 1377 of 2013 (personal data protection and Habeas Data regime), and takes as reference international privacy best practices (such as the principles of data minimization, transparency, and informed consent found in frameworks like the European GDPR), without this implying legal subjection to foreign regulations.
Law 1581 of 2012
General personal data protection and Habeas Data regime in Colombia.
Decree 1377 of 2013
Regulates Law 1581 of 2012 on personal data protection.
3. Data We Collect
The personal information we collect and how.
We collect the following personal data:
- Through the contact form: full name, email address, company, and the content of the message sent.
- Through our call scheduling system (Cal.com): name, email address, and selected time slot.
- Aggregated and anonymized browsing data through web analytics tools (Google Analytics), such as pages visited and session duration.
- If you contact us via WhatsApp, your phone number and the content of the conversation.
4. Purpose of Processing
What we use your data for.
- Respond to your contact or consulting requests.
- Coordinate and confirm scheduled calls.
- Improve the experience and content of our website.
- Send you information related to the services you requested.
We do not use your data for purposes other than those described here, nor do we sell it to third parties.
5. Data Transfer
Who we share your information with.
To operate this site, we share information with the following providers, who act as data processors under our instructions: Resend (email delivery), Sanity (storage of contact messages), Cal.com (call scheduling management), and Google Analytics (web analytics). Some of these providers process information on servers located outside Colombia; by using this site, you authorize this international transfer necessary for the provision of the service.
6. Data Subject Rights (Habeas Data)
Your rights over your personal data.
Know and update
Know, update, and rectify your personal data.
Proof of authorization
Request proof of the authorization granted.
Be informed
Be informed about the use given to your data.
File complaints
File complaints with the Superintendencia de Industria y Comercio (SIC) for violations of the law.
Revoke or delete
Revoke authorization and/or request deletion of your data when there is no legal or contractual duty preventing it.
Free access
Access your personal data free of charge.
To exercise these rights, write to us at cumplimiento@kempro.ai.
8. Data Security
How we protect your personal data.
We implement reasonable technical and administrative measures to protect your personal data against loss, misuse, unauthorized access, or alteration.
9. WhatsApp Customer Service and Sales
How data is processed in the WhatsApp bots that Kempro sets up and manages.
Kempro sets up and manages, for other businesses, a WhatsApp sales and customer service bot that lets people browse the catalog, build a cart, pay with Wompi, book appointments, get answers from an artificial intelligence assistant, and notify the business so that a person can attend to them. This section explains how the personal data of people who chat with these bots is processed.
Who is responsible for your data
When you chat with the WhatsApp bot of a business that contracted the service, that business is the data controller and Kempro acts as data processor: we process the data on behalf of the business.
When you chat with one of Kempro's own bots, Kempro is the data controller.
Data we process
- WhatsApp number and profile name.
- Messages in the conversation.
- Products and orders.
- Shipping address.
- Payment status.
- If applicable, appointment details.
- The consents you give (for example, to receive promotional messages).
- No card data is stored: payments are processed by Wompi on its own platform.
What it is used for
- Answering your questions.
- Taking orders and appointments.
- Generating the payment link.
- Notifying the business about your orders, appointments, and requests.
- Sending you service messages.
- Sending you promotional messages, only if you have opted in beforehand.
- Improving the service.
Artificial intelligence assistant
Some of the bot's replies are generated by an artificial intelligence assistant. You can ask to speak with a person: the bot will notify the business's manager so they can write to you. This option depends on the business having the assistant enabled; in any case, you can write directly to the business or to cumplimiento@kempro.ai.
Providers and international transfer
To provide the service, data is processed by the following providers, which may be located outside Colombia, mainly in the United States. This involves an international transfer of personal data; these providers are required to apply security measures to protect the information.
Anthropic states that it deletes the messages and responses sent to its API from its servers within a maximum of 30 days, unless the law or the enforcement of its usage policy requires keeping them for longer.
- Meta (WhatsApp): sending and receiving messages.
- Anthropic: the assistant's artificial intelligence model.
- Vercel: application hosting.
- Upstash: database.
- Wompi: payment processing.
- Google (Drive and Gmail): the business's catalogs and delivery of the daily report by email.
- GitHub: temporary execution of scheduled backup and reporting tasks; it does not store customer data.
How long it is kept
The personal data the bot stores about a business's customers (profile, WhatsApp number, conversation, shipping address, cart, and consents) is kept for as long as Kempro's relationship with the business lasts and until the data subject expressly and explicitly requests its deletion, plus any period required by law.
When the service with a business ends, its customers' data is delivered to the business in an exportable file within 15 business days of termination and permanently deleted, except for what the law requires to be kept, within 30 calendar days of delivery.
Orders and payments that the business must keep for accounting or legal obligations are not deleted at the data subject's request. Meta (WhatsApp) and Wompi process their own data under their own privacy policies.
The business receives by email every day a report with the order history (a CSV file with contact details, address, and products). That copy stays in the recipient's mailbox and is not deleted by a deletion request made in the chat; to have it deleted, write to cumplimiento@kempro.ai.
Your rights
Under Colombian Law 1581 of 2012, you may know, update, rectify, and delete your data, revoke the authorization you granted, and file complaints with the Superintendencia de Industria y Comercio (SIC).
To exercise these rights, write to cumplimiento@kempro.ai.
Inquiries are answered within a maximum of 10 business days and claims within a maximum of 15 business days.
Deleting your data
You can request deletion of your data by typing «BORRAR MIS DATOS» ("delete my data") in the business's WhatsApp chat, or by email. See the step-by-step instructions on our data deletion page.
10. Effective Date and Changes
When it takes effect and how it's updated.
This privacy notice is effective as of its publication date and may be modified at any time. We recommend reviewing it periodically.
11. Data Protection Officer Contact
How to reach us about Habeas Data matters.
Questions about Habeas Data?
If you have questions or want to exercise your Habeas Data rights over your personal data, write to us and we'll be glad to help.
cumplimiento@kempro.ai