Privacy Policy

1. Data controller

The controller of the data collected through this site is Tagnara LLC (United States) and Tagnara Colombia S.A.S. (Colombia), operating jointly under the Tagnara brand:

• Tagnara LLC — 80 SW 8th St, Brickell City Tower, Suite 2030, Miami, FL 33130.
• Tagnara Colombia S.A.S. — Calle 42 # 33-42, Torre Vitro, Oficina 1001, Bucaramanga, Santander.

Privacy contact channel: the email address listed at the end of this policy.

2. Scope: this site, not our clients’ platforms

This policy covers the tagnara.com website only.

It does not cover data that Tagnara processes on behalf of its clients inside the platforms it operates — including Clovai — where clinical, employment or financial information belongs to the contracting institution. In those cases Tagnara acts as a data processor and the relationship is governed by the services agreement, the data processing agreement and, where applicable in the United States, the corresponding Business Associate Agreement (BAA) under HIPAA.

If you are a patient or an employee of an institution that uses our software, that institution is the controller of your data. Please direct your requests to them; we assist them, but we cannot handle those requests directly.

3. Data we collect

We collect only what is voluntarily provided to us, plus the minimum technical data any visit generates:

• Contact form: name, work email, company or institution, phone, the area of interest selected and the message written.
• Email: whatever is included in the message, if you choose to write to us directly.
• Technical logs: our hosting provider may record IP address, browser type, request date and time, and page requested, for security and diagnostic purposes.

We do not request sensitive data through this site. Please do not include clinical information, financial details or third-party personal data in the message field.

4. Purposes and legal basis

We process data for the following purposes:

• Responding to contact, consultation or demo requests. Legal basis: pre-contractual steps taken at the request of the data subject, and their express authorization.
• Sending the technical or commercial information requested from us. Legal basis: the data subject’s authorization.
• Providing and tracking support for existing clients. Legal basis: performance of the contract.
• Maintaining the security and availability of the site. Legal basis: legitimate interest in protecting our infrastructure.
• Meeting legal or accounting obligations and requests from competent authorities. Legal basis: compliance with a legal obligation.

We do not use this data for automated advertising, nor to build profiles producing legal effects on individuals.

5. Who we share data with

We do not sell, rent or trade personal data. We share it only with providers who deliver services to us and are contractually bound to process it solely on our instructions:

• The site’s hosting and infrastructure provider.
• Our corporate email provider, to receive and answer messages.
• The contact form provider, once it is enabled.
• Competent authorities, where there is a legal obligation to disclose.

6. International transfers

Tagnara operates from the United States and Colombia, and its infrastructure providers may store information on servers located outside the data subject’s country of residence.

Submitting the form authorizes this transfer. In every case we require our providers to apply security and confidentiality standards equivalent to those described in this policy, through contractual clauses governing the processing.

7. Retention

We keep form data while the request is being handled and, afterwards, for as long as needed to meet legal or accounting obligations or to defend claims.

If an enquiry does not lead to a commercial relationship, we delete or anonymize the data once that purpose is fulfilled. Early deletion can be requested at any time.

8. Cookies and similar technologies

This site sets no first-party analytics, advertising or tracking cookies, and uses no audience measurement tools.

The brand typeface is loaded from Google Fonts, which means the browser makes a request to Google servers and Google may receive the visitor’s IP address. It is the only external resource the site loads.

If analytics or marketing cookies are introduced in the future, prior consent will be requested and this policy will be updated.

9. Your rights

As a data subject you may, at any time:

• Access, update and rectify your personal data.
• Request proof of the authorization you granted.
• Be informed about how your data has been used.
• Withdraw your authorization or request deletion, where no legal or contractual duty prevents it.
• File a complaint with Colombia’s Superintendency of Industry and Commerce or with the relevant data protection authority.
• Where the GDPR applies: object to processing, request its restriction, and exercise the right to data portability.

Requests are handled at the email address listed at the end of this policy, within the timeframes set by applicable law. We may ask for reasonable identity verification before responding.

10. Security

We apply technical and organizational measures to protect data against unauthorized access, alteration, loss or disclosure: encryption in transit (HTTPS), role-based access control, activity logging and periodic assessment of our providers.

No system is entirely infallible. Should an incident affecting personal data occur, we will notify data subjects and the competent authorities as required by applicable law.

11. Minors

This site is aimed at professionals and organizations. We do not knowingly collect data from minors. If we find that we have received it, we will delete it.

12. Changes to this policy

We may update this policy to reflect legal, technical or operational changes. The date of the current version appears at the top of the document. Where a change is material, we will announce it visibly on the site.

13. Contact

To exercise your rights, resolve questions or file a complaint about the processing of personal data, write to us at: