Personal Data Processing Policy

CERTEZA FINTECH S.A.S. (hereinafter "Certeza" or "the Company"), identified with NIT 902049480-6, with address at CR 103 53 75 UR CALATEA 703 C, Cali, Valle del Cauca, Colombia, acts as a data processor on behalf of its corporate clients (the data controllers) for the processing of personal data through the Certeza platform, its digital channels, and integrated communication services, including WhatsApp Business API. Our corporate clients are responsible for determining the purposes and means of processing personal data and for obtaining proper consent from data subjects before engaging our services.

As an authorized WhatsApp Business API technology provider, Certeza processes communication data through this channel under the following conditions:

• Messages are sent only to phone numbers provided by our corporate clients, who are responsible for ensuring they have obtained proper consent from data subjects.
• All messages sent comply with WhatsApp Business policies and local electronic communications regulations.
• Data transmitted through WhatsApp is protected with end-to-end encryption provided by Meta's platform. Meta Platforms, Inc. acts as a sub-processor for the delivery of messages through the WhatsApp Business API.
• We do not use WhatsApp data for purposes other than those expressly authorized by our corporate clients and consented to by data subjects.

Personal data may be shared with:

• Our corporate clients, as data controllers, for whom we act as data processors of their portfolio data.
• Meta Platforms, Inc., as a sub-processor for the delivery of messages through WhatsApp Business API.
• Technology service providers (cloud hosting, communication services) under confidentiality and data protection agreements.
• Competent authorities when required by law or court order.

We do not sell, rent, or trade personal data to third parties for marketing purposes.

Personal data subjects have the right to:

• Access: Know what personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete data.
• Withdrawal: Withdraw consent granted for the processing of your data.
• Objection: Object to the processing of your data for specific purposes.

To exercise these rights, you may contact us through the channels indicated in the Contact section of this policy. Requests will be processed within 10 business days.

Personal data is retained for the duration of the service agreement with each corporate client. Upon termination of the agreement, data will be retained only as required by applicable law or regulatory obligations, after which it will be securely deleted.

For inquiries, requests, or complaints related to the processing of your personal data, you may contact us through:

Email:

sebastian@certeza.app

Phone:

+57 318 222 2274

Address:

CR 103 53 75 UR CALATEA 703 C, Cali, Valle del Cauca, Colombia