Privacy policy

1. Who is responsible and how to contact us

Comercializadora Microtec 2017, C.A., tax identifier RIF J-411590681, trading as MICROTEC2017, is responsible for the processing it determines to operate this website, respond to inquiries and administer its business relationships. Our contact address is Parque Central, Caracas, Venezuela, 1010. Write to [email protected] and indicate that your message concerns privacy.

You can use this channel to ask questions, correct information, request access or deletion, or report possible misuse of data. You do not need to purchase a product or maintain an active commercial relationship to submit a request concerning your own information. Our data deletion page explains the minimum details that help locate relevant records.

2. Website and service scope

This policy covers browsing our corporate website, using its forms, communicating with the company and administrative information about prospective customers, customers and organizational representatives. Our offering includes a business suite, WhatsApp assistants, customer service, clinic management, ERP, CRM, banking and fraud review solutions, custom software, AI automation, web design and mobile application development.

Describing these products does not mean their databases are hosted on this website. Each service may have its own installation, purposes, controller, hosting and conditions. Where MICROTEC2017 processes information on a customer's behalf, the agreement and documented instructions define that activity; this policy does not replace the notice that the customer must provide to patients, users, employees or buyers.

3. Information you provide

The contact form requests your name, company, email address, area of interest and message. A telephone number is optional. It also records the language, originating page, selected product and, where relevant, the plan, scenario and offer revision behind your inquiry. This helps us understand your request and preserve the commercial context you saw.

If you provide a telephone number, it is stored with its international dialing prefix. The country selector helps interpret the number; it does not establish your residence, nationality or applicable law. We also retain the WhatsApp contact preference submitted with the form. Older records without that preference are treated as unspecified.

Later exchanges may include representative details, project requirements, quotations, agreements, billing information or support communications. Keep your initial inquiry limited to what is necessary: do not submit passwords, access keys, full payment card numbers, medical records, identity documents or third-party databases through the public form.

4. Connection and operational information

Services that deliver and protect website pages process necessary connection information, such as your IP address and browser characteristics. When an inquiry is registered, our application may retain the IP validated by the incoming network infrastructure, browser user agent, language, origin, referral path and selected technical headers. Referral addresses are reduced to their origin and path, without query parameters or fragments.

Contact technical records may include the names of certain permitted preference cookies, but not their values. This does not mean the website sets every such cookie. Dates, internal identifiers and registration or delivery states are also generated to control duplicates, investigate errors and manage communications. A technical identifier can be linked to an inquiry and should not be regarded as necessarily anonymous.

5. Purposes and grounds for processing

We use your information to respond to inquiries, assess requirements, prepare proposals, coordinate meetings and perform or administer agreed services. Submitting an inquiry triggers its registration and a transactional email acknowledgment; it does not itself complete a purchase or subscribe your address to an advertising list.

We also process limited information to protect the form against abuse, prevent duplicates, diagnose errors, handle rights requests, meet legal obligations and document a relationship or dispute. We do not use contact messages to build advertising profiles or automatically feed them into an AI assistant.

Where a law requires identification of a legal basis, we distinguish steps requested by an individual before contracting, performance of their contract, legal obligations and, where permitted and subject to balancing affected rights, legitimate interests in security and professional relationship management. A person contacting us for a company does not automatically become a party to its contract. If a purpose requires consent, valid and separate consent must be obtained; browsing or reading this policy does not replace it.

6. Email, telephone and WhatsApp preference

Corporate email enables us to handle your request and acknowledge its registration. Receiving that acknowledgment does not establish that a person has reviewed the matter or guarantee a proposal, delivery date or project acceptance. You may request another response channel where appropriate for the inquiry.

The form initially selects the WhatsApp preference and lets you clear it without requiring a telephone number or preventing submission. This preference indicates a contact channel for the inquiry; it does not, by itself, amount to valid consent for campaigns, disclosures or unrelated purposes. Where the law requires a specific affirmative choice, that choice must be obtained before such use.

You may change your preference or ask us to stop using that channel by emailing our contact address. If you start a conversation through the WhatsApp link or visit our social profiles, the relevant platform processes information under its own terms. Deleting a record we hold does not automatically remove copies on your device or on that platform.

7. Cookies, local storage and measurement

The website version described in this policy uses browser local storage to remember your light or dark theme choice. You can remove that preference through browser settings; doing so resets the relevant experience and does not delete an inquiry already submitted.

The website does not incorporate advertising pixels, cross-site tracking campaigns or session replay tools. Security and diagnostic features are described separately. Third-party technologies may have their own storage conditions depending on configuration. If nonessential features requiring consent are introduced, activation must respect the applicable choices and requirements; this document is not advance authorization for them.

8. Cloudflare and form protection

We use Cloudflare delivery and protection infrastructure and its Turnstile service to distinguish legitimate requests from automated traffic. Your browser connects to that provider and may transmit network and device signals. Our application verifies the result before accepting a new inquiry and does not retain the verification token in contact records.

Cloudflare distinguishes processing on a website's behalf to provide Turnstile from certain processing for its own bot detection improvements. Its notice explains these roles. You can contact us about processing we determine and use Cloudflare's channels for processing under its own responsibility. If verification prevents you from contacting us, you may use our corporate email address.

9. Error diagnostics and operational logs

The website uses Sentry alongside server operational logs. Our integration limits events to codes, stages, results, durations, internal identifiers and code locations needed to investigate failures. It excludes inquiry text, email addresses, telephone numbers, IP addresses, cookies, credentials and tokens from those events, and removes arbitrary messages, user context and action history from captured errors.

Session replay and performance tracing are disabled in this integration. These restrictions concern the content prepared by the application; they do not remove connection information a provider may receive when a network connection is established. Nor do they mean every infrastructure log is anonymous or that contact database retention automatically applies to Sentry.

10. People and providers that may receive information

Personnel handling inquiries and administering services may access information needed for their roles. Contact form email is transmitted to our corporate environment through Microsoft, and your address receives a transactional acknowledgment. Hosting, content delivery, traffic protection, email and diagnostics may involve technical providers performing those functions.

We do not sell inquiry data or share it for cross-context behavioral advertising. Where there is a valid basis, we may disclose strictly necessary information to advisers subject to confidentiality obligations, competent authorities or recipients you request. An authority's request is evaluated against its scope and applicable obligations; it does not authorize unrestricted disclosure.

Providers for a particular project, including AI models, messaging, payments and customer infrastructure, are determined within its contractual scope. Mentioning an integration in the catalog does not mean every visitor's data is transferred to it. You may request information about the recipients relevant to your relationship with us.

11. International processing and transfers

We are established in Venezuela and receive inquiries from different countries. Email, content delivery and diagnostic services may involve processing outside the country from which you connect. This policy does not guarantee that all information resides exclusively in Venezuela, the European Union or any other location.

Where applicable law places conditions on international transfers, the destination, parties' roles, risks and permitted mechanism must be assessed, such as an adequacy decision, contractual clauses or another legally available safeguard or exception. Publishing this policy does not establish that a particular contractual safeguard has been executed or obtain consent to every transfer.

Projects with location restrictions must establish them before enabling access, integrations or remote support. Installation on customer infrastructure does not itself prevent transfers if external services are connected or access from another country is allowed. You may ask about the locations and safeguards relevant to the service you are considering.

12. How long information is retained

The contact database is configured to remove technical metadata after 30 days from registration and submissions with their delivery attempts after 12 months. Cleanup is scheduled periodically and temporarily skips records with an active delivery. These periods describe the application's contact records; a valid deletion request may be handled before they expire.

Copies delivered to mailboxes, later communications, commercial documents, provider logs and backups have different lifecycles. Retention is assessed against purpose, the ongoing relationship, legal obligations, the need to evidence transactions and applicable limitation periods. The 12-month period is not a statement that all these copies are erased simultaneously.

Where some information must be retained to meet an obligation or defend a claim, retention must be limited to relevant information, with access and use restricted to that purpose. Retention does not authorize indefinite reuse for unrelated activities. In responding to a request, we will explain the scope of deletion and, where applicable, the reason and retention criterion for remaining information.

13. Information managed on customer platforms

An organization using a suite, ERP, CRM, customer service system or custom application generally decides why it includes information about its customers, workers or suppliers. Where MICROTEC2017 processes that information solely under the organization's instructions, it acts as a service provider or processor within the agreed scope. This role differs from responsibility for our own billing and business contact information.

The relevant agreement should establish instructions, purposes, data categories, access, providers, security measures, assistance with rights, incidents and return or deletion at service end. We do not assume that purchasing a license authorizes use of other people's information for any purpose.

If your information is held in a clinic, retailer or other customer's platform, initially address your request to that organization. If you write to us, identifying the organization can help determine our role without attaching your complete record. MICROTEC2017 may have no database access in an on-premises installation; coordination with the responsible organization will follow the agreement and applicable law.

14. Local installations and infrastructure responsibility

Data is not always hosted on MICROTEC2017 servers. We offer installation on customer infrastructure and, within the installation scope, verify that the local environment meets the agreed security, backup and protection requirements. This verification concerns the environment and conditions reviewed; maintaining them requires ongoing operation and control of later changes.

The agreement allocates tasks during installation and support. After installation is completed and the infrastructure support agreement ends, the customer assumes administration of its servers and custody, security, backup, recovery and protection of its data, except for services expressly remaining under contract. Ending support does not automatically delete or transfer that information or give us permanent access to the customer's systems.

MICROTEC2017 retains its obligations for the installed software and valid licenses under the agreement, warranties and law. Allocation of tasks does not remove responsibility for our own actions or imply free, indefinite server maintenance. Requests concerning information in a local installation are coordinated with the responsible organization; we fulfill the obligations arising from our actual involvement.

15. Sensitive information, regulated systems and AI

Offering clinic or banking software does not make the public contact form an approved channel for health data, biometrics, financial credentials or information protected by professional secrecy. Processing such information in a project requires identifying legal and technical conditions, authorized people and responsibilities before introducing real data.

AI integrations and assistants may process conversations, documents or instructions only within the configured and agreed service. Permitted data, providers, permissions, retention, any training-use conditions and human controls must be defined. This policy grants no general authorization to train models on customer information and does not guarantee the conditions of providers that have not yet been selected.

The corporate website does not use an inquiry to make solely automated decisions producing legal or similarly significant effects on an individual. Security controls may temporarily restrict submission because of abuse or failed verification; email is available as an alternative. Significant decisions within a contracted system require a specific assessment and appropriate human involvement.

16. Access, correction, deletion and other rights

You may ask about processing of your information, request correction and seek deletion or an end to a particular use. Depending on applicable law and circumstances, you may also have rights to object, restrict processing, obtain portability, withdraw consent, seek review of automated decisions or opt out of certain processing. Withdrawing consent does not affect the lawfulness of earlier processing based on it.

To exercise your rights, write to [email protected], identifying the right you wish to exercise and information that helps locate the relationship or inquiry. We do not require a new account or purchase to receive a request. We may ask for proportionate information to verify identity or authority and protect other people's data; do not send sensitive documents with your initial message.

Requests are handled within the time limits and subject to the conditions and exceptions of the applicable law. If we cannot fulfill all or part of a request, we will explain the reason and available review or complaint routes. Our practical deletion instructions complement this information.

17. Venezuela and individuals in other jurisdictions

Venezuela's Constitution protects private life and provides mechanisms for access to information about oneself, its use and purpose, and judicial requests to update, correct or destroy erroneous information or information unlawfully harming rights. Our direct handling of requests does not restrict those mechanisms or require a court order for every voluntary correction or deletion.

Latin America and the Caribbean have distinct national regimes, including those in Brazil, Colombia, Mexico, Argentina, Chile, the Dominican Republic, Jamaica and Barbados. Their application depends on the processing and the territorial connection specified by each law. Rights, deadlines and authorities are not identical. Mandatory shorter local deadlines take precedence over any general reference in these documents.

For individuals in Spain or the European Economic Area, the General Data Protection Regulation and complementary national rules apply when their territorial and substantive conditions are met. Being able to open this website from Europe does not itself decide that issue. Where applicable, you may complain to the competent authority, including Spain's AEPD, and exercise the rights recognized under that regime.

In the United States, rights depend on state and sectoral laws and their thresholds or conditions. Where California law applies, rights may include knowing, accessing, correcting and deleting information, and opting out of sale or certain sharing, without discrimination for exercising them. A business-focused website does not itself exclude protection for a professional contact. We do not claim universal coverage or certified compliance with all these regimes.

18. Children and young people

This website is intended for people evaluating business solutions and is not designed as a service for children. We do not deliberately request children's information through the commercial contact form. If you believe a child supplied information that should not have been collected, contact us so we can review the circumstances and determine appropriate steps.

A customer's use of software to serve children, for example at a clinic, requires specific rules concerning representation, grounds for processing, security and rights. It does not turn this corporate notice into parental authorization or replace the obligations of the organization responsible for that service.

19. Security and incidents

The website implementation includes input validation, submission limits, bot protection, encrypted connections and separation of inquiry data from diagnostics. Administrative access and provider processing must correspond to service needs. No measure can completely eliminate the risk of error, unauthorized access or interruption.

If you detect exposed information or receive information in error, notify our contact email with a minimal description, without forwarding databases or credentials. Incidents will be assessed to contain their effects and determine communications required to affected people, customers or authorities under applicable law and agreements. This policy does not promise one notification deadline for every jurisdiction.

20. Policy changes and questions

The update date identifies this version. We may revise the policy to reflect actual changes in services, providers or legal requirements. Material changes require any additional information and, where relevant, choices or authorizations that must be provided before introducing an incompatible new purpose.

The Spanish and English versions aim to communicate the same scope. If you find a difference or do not understand a condition, you may request clarification. No update reduces nonwaivable rights or turns silence or continued browsing into blanket consent to process personal information.