1. Scope and applicability

This policy applies to camtech.ai, pilot and production service delivery, and approved messaging-channel operations such as WhatsApp, Instagram, and Facebook Messenger integrations.

It covers both website visitors and business clients, including end-user interactions processed under client-authorized workflows.

2. Information we collect

• Identity and contact data: name, role, business email, phone or WhatsApp number, and company details.
• Commercial and operational data: project scope, workflow requirements, support records, and approved service configuration inputs.
• Channel interaction data: message content, timestamps, delivery status, and conversation context required for automation.
• Technical and usage data: IP, browser or device metadata, authentication signals, and audit logs.
• Payment and billing metadata processed through Stripe (when payment processing features are active). CAMTECH AI does not store full payment card numbers.

3. How we use information

• Deliver contracted pilots and production services.
• Operate messaging, scheduling, analytics, and workflow automation features requested by clients.
• Protect platform integrity, detect abuse, and maintain service security.
• Process billing, reconciliation, and lawful accounting obligations.
• Maintain legal and contractual compliance across applicable jurisdictions.

4. Legal bases for processing

• Performance of contract when delivering agreed services.
• Legitimate interests for quality improvement, risk prevention, and platform resilience.
• Consent where required by channel, feature, or applicable law.
• Legal obligations related to tax, records, lawful requests, and compliance requirements.

5. Sharing and provider relationships

CAMTECH AI does not sell personal data. We share data only when necessary for service delivery, legal compliance, or professional support.

Operational providers at launch include AWS, Supabase, and Meta channel integrations. Payment processing via Stripe will be activated when Synap subscription products launch commercially.

• Trusted providers are contractually or platform-governed for data protection obligations relevant to their role.
• Professional advisers may access limited information where legally necessary.
• Lawful disclosures may occur when required by competent authorities.

6. International transfers

Because CAMTECH AI operates through Colombia and the USA and uses global service providers, data may be processed across jurisdictions.

Transfer safeguards include contractual controls, provider governance, encryption in transit and at rest, and access restrictions aligned with operational risk.

7. Retention and deletion

Data is retained only as long as needed for service delivery, legal obligations, and dispute handling.

Deletion or anonymization is applied when retention is no longer required, subject to legal hold and backup lifecycle constraints.

8. Your rights

Subject to applicable law and processing role, you may request access, correction, deletion, portability, and processing restriction or objection where available.

Requests are processed through identity verification controls to prevent unauthorized disclosure.

• Requests can be submitted by email to{' '} legal@camtech.ai.
• CAMTECH AI targets initial response within 10 business days and final resolution within legally required windows.
• You may lodge a complaint with the Colombian Superintendencia de Industria y Comercio or the relevant authority in your jurisdiction.

9. Security measures

• Encryption in transit and at rest for supported systems.
• Least-privilege access controls and authentication protections.
• Audit and operational logging for security and integrity monitoring.
• Documented incident response processes, escalation workflows, and remediation governance.

10. Sensitive data and children

• CAMTECH AI services are not designed for biometric-data processing.
• CAMTECH AI services are not designed for health-data processing.
• Services are not directed to children under 18.
• If restricted data is submitted unintentionally, processing is restricted and handled through lawful deletion or controlled remediation steps.

10a. California Privacy Rights (CCPA/CPRA)

Californian residents interacting with CAMTECH AI LLC have additional rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to Know: You may request disclosure of the categories and specific pieces of personal information collected, the purposes for collection, and the categories of third parties with whom information is shared.
• Right to Delete: You may request deletion of personal information subject to legal retention exceptions.
• Right to Opt-Out of Sale/Sharing: CAMTECH AI does not sell personal information and does not share personal information for cross-context behavioral advertising.
• Right to Non-Discrimination: CAMTECH AI will not discriminate against you for exercising CCPA rights.
• Authorized Agent: You may designate an authorized agent to submit requests on your behalf with proper verification.

To exercise these rights, contact legal@camtech.ai. CAMTECH AI will verify your identity before processing requests and respond within the timeframes required by applicable law.

10b. EU and EEA Data Subjects — GDPR Rights

Where GDPR (EU Regulation 2016/679) applies to personal data processing by CAMTECH AI under Article 3(2) — because the site and services are accessible in EU languages and may be used by EU resident data subjects — the following rights are available in addition to those described in Section 8.

• Right of access (Art. 15): confirmation of whether personal data is being processed, access to the data, and information about processing purposes, categories, recipients, retention, and rights.
• Right to rectification (Art. 16): correction of inaccurate personal data without undue delay.
• Right to erasure (Art. 17): deletion of personal data where processing is no longer necessary, consent is withdrawn, or data has been unlawfully processed, subject to legal retention exceptions.
• Right to restriction (Art. 18): limitation of processing while accuracy or lawfulness is contested, or while an objection is under review.
• Right to data portability (Art. 20): receipt of provided personal data in a structured, commonly used, and machine-readable format, and transmission to another controller where technically feasible.
• Right to object (Art. 21): objection to processing based on legitimate interests, including profiling, unless compelling legitimate grounds override the objection.
• Right not to be subject to automated decision-making (Art. 22): CAMTECH AI services do not produce legal or similarly significant effects through solely automated processing without human oversight.

Supervisory authority: You may lodge a complaint with the competent supervisory authority in your EU member state or with the Colombian Superintendencia de Industria y Comercio.

EU Representative (Art. 27): CAMTECH AI does not process personal data on a large scale as defined by GDPR Article 27 and Recital 168 at this time. Should processing volumes or risks meet Article 27 thresholds, CAMTECH AI will designate an EU representative and update this policy accordingly.

To exercise GDPR rights, contact legal@camtech.ai. Identity verification will be required before processing. CAMTECH AI responds within one calendar month, extendable by two further months where necessary.

11. AI and automation transparency

• CAMTECH AI services may include automated assistance and workflow decision support configured by business rules.
• Human oversight is available through client teams and CAMTECH AI operators according to service design.
• Client and end-user data is not used to train external models without explicit written authorization.

12. Policy changes

This policy may be updated when services, providers, laws, or processing practices materially change.

The latest version is always published on this page with an updated date.