Assessment

Last updated: November 4, 2026 Español

Privacy Policy

This Privacy Policy establishes the terms under which Orbiom, a product of TEK de B.F.S.A. (RUC: 80142832-7), uses and protects the information that users provide when interacting with its commercial platform. We are committed to the security of personal data and its treatment in accordance with current privacy and data protection regulations. The platform is designed for Paraguay's Law No. 7593/2025 on Personal Data Protection.

1. About Orbiom

Orbiom is a platform that brings together commercial management and the operation behind it. Available features depend on what is enabled for each company:

  • Trade 360: Sales, quotes, orders, online store and wholesale portal, along with the operation behind them (stock, invoicing, delivery and collections)
  • MKT 360: Meta advertising management, WhatsApp campaigns and sales attribution
  • Inbox 360: A single inbox for WhatsApp, Instagram, Messenger and other channels
  • Team IA: Artificial intelligence agents configured according to each company's needs
  • Analytics 360: Reports and commercial performance indicators
  • Integrations: Connection with the systems and platforms the company uses

2. Information We Collect

Orbiom collects the following information to provide its services. For the data of each company's customers, that company is the controller and Orbiom acts as a processor, on its behalf and following its instructions:

  • Customer contact and profile data (names, phones, emails, addresses)
  • Messages and communications through all integrated channels
  • Purchase history and commercial transactions
  • Behavioral and navigation data on connected platforms
  • Usage metrics, interactions, and platform analytics
  • Business account information and access credentials
  • Profile data from third-party platforms (Meta, online stores, etc.)
  • Interaction logs, metadata, and activity records

3. How We Use Data

We use the collected information for the following purposes:

  • Provide commercial management: customers, sales, orders, service and operations
  • Bring each customer's data together in a single profile
  • Process and deliver messages through all communication channels
  • Run the AI agents, their automations and recommendations
  • Generate commercial performance reports and indicators
  • Synchronize data with the systems and platforms the company connects
  • Execute configured automations and workflows
  • Continuously improve service quality and functionality
  • Detect and prevent fraud, spam, and platform misuse
  • Comply with legal and regulatory obligations

4. How We Share Data

Orbiom shares data in a limited manner and only when necessary:

  • With Meta (Facebook): Data necessary for WhatsApp Business, Instagram, and Messenger APIs
  • With the systems the company connects (online store, ERP, payment methods): Data necessary to synchronize orders, customers and payments
  • With artificial intelligence providers (OpenAI, Anthropic and AssemblyAI): Data necessary to draft replies, summarize and transcribe, on behalf of the company
  • With infrastructure and service providers: Amazon Web Services (data is hosted in São Paulo, Brazil); Vercel, Clerk, Google Maps and Sentry (United States); OpenStreetMap (European Union)
  • We DO NOT sell your data to third parties under any circumstances
  • We DO NOT share data with advertisers or data brokers
  • We only disclose information when required by law or valid legal process

5. Data Retention

We maintain your data according to the following policies:

  • Customer data: While your account is active
  • Message and conversation history: While your account is active
  • Commercial transaction data: 5 years for legal and tax obligations
  • After account deletion: Additional 90 days to allow recovery
  • Anonymized data for analytics: May be retained indefinitely
  • You can request early deletion at any time

6. Your Rights

You have the following rights over your personal data:

  • Right of access: Request a copy of all your personal data
  • Right of rectification: Correct inaccurate or incomplete data
  • Right of deletion: Request deletion of your data
  • Right of portability: Receive your data in structured format
  • Right of objection: Object to certain types of processing
  • Right to withdraw consent: At any time
  • If your data was loaded by a company that uses Orbiom, you can also exercise these rights with that company, as the controller

7. How to Request Data Deletion

To exercise your right to data deletion:

  • Send an email to: privacy@orbiom.com
  • Subject: 'Data Deletion Request'
  • Include: Your full name, email associated with the account, and phone number if applicable
  • Response time: We will process your request within 30 business days
  • You will receive email confirmation when deletion is complete

8. Data Security

We implement the following security measures:

  • Encryption of data in transit and at rest
  • Second authentication factor available for accounts
  • Operational logs with error alarms
  • Internal security reviews
  • Role-based restricted access to sensitive data
  • Separation of each company's data and a record of who did what and when

9. Third-Party Integrations

Our service integrates with the following platforms:

  • Meta APIs: WhatsApp Business, Instagram Graph API, Messenger Platform
  • Company systems: Online stores, ERP and payment methods, according to what each company connects
  • AI Services: Natural language processing and automation
  • Cloud Services: Secure storage and processing
  • Use of integrations is subject to each platform's policies
  • We use each integration according to its platform's terms

10. Orbiom Mobile Application

The Orbiom mobile application (com.orbiom.mobile) is a work tool intended for employees and staff of Orbiom's business customers. Access requires an account created by the user's employer. In addition to the above, the application may access the following device features, always with the user's explicit consent and revocable at any time from the operating system settings:

  • Precise and approximate location: used in delivery, logistics, field sales and field work roles, to plan routes, record visits, deliveries and clock-in/clock-out, and to allow the employer to supervise operations. With the application open, location is collected when the user records an operation and while their workday is started
  • Workday tracking with the application closed: only if the employer enables it and the user accepts it in an in-app notice, location is also collected with the application closed, in the background or with the screen locked, exclusively between «Start workday» and «End workday», and is shared with that company's supervisors to show the live position and the route of the day. While it runs, a visible notification is shown on the device. The user can stop it at any time by ending the workday or revoking the location permission, and if they do not accept it, location is only collected with the application open. The employer defines how long the route history is kept (90 days by default). Location is not used for advertising and is not shared with third parties for commercial purposes
  • Microphone and voice recordings: the microphone is accessed for dictation, voice notes and, when the company enables it, to record meetings with its customers or patients, always with the prior consent of the person being recorded, which is registered in the application. The user starts and stops the recording of a meeting, and it continues with the screen locked or the application in the background while a visible notification is shown. Recordings are sent encrypted to our servers to be transcribed and summarized for the company, and are not used for any other purpose. Dictation is transcribed on the device whenever the hardware supports it
  • Camera, photos and media files: to attach images to operations, such as photographic proof of delivery. We only access images that the user expressly captures or selects
  • Biometric authentication (fingerprint or face): verification is performed entirely on the device through the operating system. We never receive, transmit or store biometric data
  • Push notifications: for operational alerts regarding orders, deliveries and messages
  • Diagnostics and error logs: crash reports and technical metrics used exclusively to maintain service stability
  • Providers that process data on our behalf in the mobile application: Amazon Web Services (infrastructure), Clerk (authentication), Google Maps (maps and routing), Sentry (error reporting), Expo (update distribution), AssemblyAI (transcription of recorded meetings) and OpenAI and Anthropic (AI summaries)
  • We do not sell personal data and do not use it for advertising purposes

11. Contact

For any questions about this privacy policy or how we handle your data:

  • Privacy email: privacy@orbiom.com
  • Legal email: legal@orbiom.com
  • Website: https://orbiom.com
  • We will respond to your inquiry within 5 business days