Cotti Privacy Policy

SideOps AI S.A.S is the Data Controller for personal data collected through Cotti.

• Company Name: SideOps AI S.A.S
• NIT: 901998870 - 2
• Privacy Contact Email: privacy@sideops.tech
• Address: Calle 3 A Sur # 81 A - 4 Medellin, Colombia

To provide our quotation generation and management Service, we collect the following types of data:

• Account and Profile Data: Full name, email address, phone number, company name, and login credentials.
• Quotation Data (User Content): Customer information, service/product descriptions, prices, and details entered by you when generating quotations through the App.
• Technical and Usage Data: IP address, device type, operating system, browser type, activity logs, and application interaction metrics.
• Payment Data: If applicable, billing information processed through secure third-party payment gateways (we do not store full credit card numbers).

In accordance with Article 6 of the GDPR, we process your data under the following legal bases:

• Performance of a Contract: Processing is necessary to provide you access to Cotti and enable you to generate quotations.
• Legitimate Interest: To improve our platform, ensure security, prevent fraud, and provide technical support.
• Consent: When you explicitly authorise us to send you marketing communications or use non-essential cookies.
• Legal Compliance: To comply with tax and accounting obligations or requirements from competent authorities.

We use the collected data exclusively for the following purposes:

• Create, maintain, and authenticate your Cotti account.
• Facilitate the creation, sending, and storage of your quotations.
• Provide customer support and respond to your inquiries.
• Improve the performance, design, and functionality of the application.
• Notify you about service changes, updates, or security issues.

We do not sell or rent your personal data to third parties. We only share your information in the following circumstances:

• Service Providers (Data Processors): We share data with third parties that provide us with cloud infrastructure, databases, and analytics (e.g., hosting providers, email delivery services). All providers are subject to strict confidentiality agreements and GDPR compliance.
• Legal Requirements: If required by law or to respond to a valid legal process by public authorities.
• Business Transitions: In the event of a merger, acquisition, or sale of assets of SideOps AI S.A.S, your data may be transferred, with prior notification to you.

Cotti operates from Colombia and may use servers located in other jurisdictions. If you reside in the European Economic Area (EEA), your data may be transferred outside the EEA. In such cases, we ensure that transfers are carried out under Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring an adequate level of protection.

We will retain your personal data only for as long as your account is active or as necessary to fulfill the purposes outlined in this policy, resolve disputes, and comply with our legal agreements. When we no longer need your data, we will securely delete or anonymise it.

As a user, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure (Right to be Forgotten): Request deletion of your personal data when it is no longer necessary.
• Right to Restriction of Processing: Limit how we use your data under certain conditions.
• Right to Data Portability: Receive your data in a structured, machine-readable format, or request its transfer to another controller.
• Right to Object: Object to processing based on legitimate interests or for direct marketing.

To exercise any of these rights, send an email to privacy@sideops.tech. We will respond to your request within a maximum of 30 days.

We implement industry-standard technical and organisational security measures (such as encryption in transit and at rest, and strict access controls) to protect your information against unauthorised access, alteration, disclosure, or destruction.

We may update this Privacy Policy periodically to reflect changes in our practices or legal regulations. We will notify you of significant changes through the application or by email before they take effect.

If you have any questions, concerns, or complaints about this Privacy Policy or our data handling practices, please contact us:

• Company: SideOps AI S.A.S
• Email: privacy@sideops.tech
• Address: Calle 3 A Sur # 81 A - 4 Medellin, Colombia