Privacy policy

Who is responsible

NOVAINTEGRA SAS, based in Bogotá, Colombia, is the controller of the personal data processed through Opportia. You can contact us about this policy or to exercise your rights at the contact address published on this site.

What data we process

• Account data: name, email, password (stored hashed), role, company legal name and tax ID, country, and the date you accepted this policy.
• Company data you provide: profile, preferences, alerts, and the documents you upload (tax ID, chamber of commerce certificates, supplier registry, financial statements, certificates, per-process documents).
• Usage data: technical logs (IP address, browser, pages and actions) needed to run and secure the service.
• Analytics data, only if you accept analytics cookies (see the cookie policy).
• Public tender data (buyers, titles, values, dates) comes from official open data and is not personal data about you.

Why we use it and on what basis

• To create and run your account and provide the service you request (contract).
• To read your uploaded documents with AI and compare them with each tender's requirements (contract; you decide what to upload).
• To send service emails and the alerts you set up (contract / legitimate interest).
• To secure the service and prevent abuse (legitimate interest).
• To measure and improve the website with analytics and advertising pixels (consent only; you can withdraw it at any time).
• To process payments once paid plans are active (contract).

Who receives your data

• Service providers that process data on our behalf: hosting and infrastructure; the AI provider used to read documents (Anthropic); the payment processor (Wompi) once payments are active; and email delivery.
• Google (Analytics), LinkedIn and X only if you accept analytics cookies.
• In the Allies Network, your company profile is shown to other companies only if you choose to make it visible.
• We do not sell personal data.

International transfers

Some providers are located outside Colombia, the European Union and your country. Where required we rely on appropriate safeguards (such as standard contractual clauses) or on your consent.

How long we keep it

Account and company data while the account is active and afterwards for the legal limitation periods. Uploaded documents until you delete them or close the account. Technical logs for a limited period. You can ask us to delete your account.

Your rights

• You can access, rectify, update and delete your data, object to or restrict its processing, withdraw consent, and request portability, under Colombian Law 1581 of 2012, the EU/UK GDPR (including Portugal and Spain) and Brazil's LGPD, as applicable.
• To exercise them write to the contact address published on this site. You can also lodge a complaint with your data protection authority (in Colombia, the Superintendencia de Industria y Comercio; in Portugal, the CNPD; in Spain, the AEPD).

Security

We use access controls, encrypted connections and hashed passwords. No system is completely secure; tell us immediately if you suspect misuse of your account.

Changes

We will update this policy when the service changes and show the date above.