Privacy Policy
Effective date: Oct 10, 2026
1. Introduction
At Disrupsoft SpA, headquartered at Eulogia Sánchez 065, Providencia, Santiago, Chile, we value and respect the privacy of our users, customers and visitors to our website (https://disrupsoft.cl/).
This Privacy Policy explains how we collect, use, store and protect personal information, in accordance with Chilean Law 19.628 on the Protection of Private Life and with reference to international best practices, including the EU General Data Protection Regulation (GDPR).
2. Data we collect
- Identification and contact data: first and last name, company, email address, phone number.
- Browsing data: IP address, device type, browser, pages visited, time on site, traffic source.
- Data provided voluntarily: information sent through contact forms, course enrollment or service requests.
- Cookies and similar technologies: used to analyze navigation, improve user experience and offer personalized content.
- Conversations with the site's AI assistant: the text of the visitor's messages and of the assistant's replies, the language, the page it was opened from, the date and a value derived from the IP address (the site does not store the IP address itself).
- Details the visitor leaves in the assistant to be contacted: name, email or phone and company, only if they complete the assistant's form and give their consent.
3. Purposes of use
We process the information to:
- Respond to inquiries, information requests or commercial contact.
- Deliver and improve our services and trainings.
- Produce statistical analyses on site usage and campaign performance.
- Maintain communications about updates, events and related content (with prior consent for marketing purposes).
- Comply with legal and regulatory obligations.
- Answering questions asked to the AI assistant with the information published on this site and, when the visitor asks for it, routing them to the right person on our team with a summary of the conversation.
- Improving the assistant: our team reviews conversations to correct the site's content or the answers. The questions we use to evaluate the assistant are stored without personal data.
The assistant is an artificial intelligence, not a person, and says so from its first message. It does not make decisions with legal effects on the visitor, does not give prices or commitments, and the visitor can ask to talk to a person on our team at any time.
4. Information security
We implement administrative, technical and organizational measures to protect personal data against unauthorized access, loss, alteration or improper disclosure.
This includes access controls, encryption of sensitive data and security monitoring in our systems.
5. Sharing with third parties
Disrupsoft does not sell, rent or transfer personal data to third parties, except in the following cases:
- When we have the user's explicit authorization.
- When necessary to provide a contracted service, with providers that maintain confidentiality and data protection agreements.
- When required by law, competent authority or judicial process in Chile.
Providers that process data on Disrupsoft's behalf
To run the site we use the following providers, which process personal data only to provide their service to us:
- Supabase (the site's database): stores the enquiries submitted through the forms. Its servers are in São Paulo, Brazil.
- Cloudflare Turnstile (anti-bot verification for the forms): receives the IP address and technical browser signals of whoever submits a form.
- Resend (email delivery): receives the name, email and message of each enquiry, to notify our team.
- Google Analytics and Google Ads: receive browsing data, only if the visitor consents.
- The site's hosting provider: records technical data about each visit, such as the IP address and browser, in its operational and security logs.
- OpenAI or Anthropic: process the conversation messages and the site's public content needed to generate the assistant's answers. We do not use services that train their models on these conversations.
- DreamHost: hosts the assistant in the United States and stores its conversations and contact requests.
Some of these providers process data outside Chile —in Brazil, the United States or other countries where they operate— for the purposes described in this policy. Conversations with the AI assistant may be processed outside Chile. Retention periods are explained in section 6.
6. Retention periods
We keep each category of personal data only for as long as the purpose that justified collecting it lasts. We do not keep personal data indefinitely without an operational or legal justification.
- Business contact data (name, company, email address, phone number and the content of the message), submitted through the site's forms: kept for 12 months from receipt and then deleted automatically.
- Technical security data (a value derived from the IP address, the reported browser, and the form timestamp): stored with the enquiry and deleted with it, after 12 months. The site does not store the IP address in the clear; the forms' anti-bot verification service and the hosting provider do receive it, in their own technical logs (see section 5).
- Internal notification copy: when an enquiry arrives, a copy of the message is generated to notify the team by email. That copy is deleted as soon as the notification is sent.
- Browsing and analytics data: collected only if the visitor consents, and governed by the retention periods of the analytics tool in use. Consent can be withdrawn at any time from the site itself; once withdrawn, we stop collecting this data.
- Documentation feedback: kept for as long as it serves to correct or improve the content it refers to.
Where a legal obligation, an active contract, or the defence of a right requires keeping data beyond these criteria, that data is kept for that purpose only, and for as long as that purpose requires.
Anyone may request deletion of their data through the channels listed in the section on exercising rights. We review these criteria periodically and publish any change here.
Retention periods applied by Disrupsoft:
- Conversations with the AI assistant (messages, language, page, date and the value derived from the IP): kept for 90 days from their start and then deleted automatically, together with their messages.
- Contact requests made through the assistant (name, email or phone, company and the conversation summary): kept for 12 months, like the inquiries from the site's forms, and then deleted automatically.
- Assistant evaluation questions: stored without names, emails, phone numbers or companies, so they are not personal data and are kept while they are useful to evaluate the assistant.
Retention by AI providers: these periods are independent of those applied by Disrupsoft.
- OpenAI: normally keeps security and abuse prevention logs for up to 30 days. It may keep them longer to meet legal obligations or to protect its services or third parties.
- Anthropic: normally deletes inputs and outputs within 30 days. It may keep conversations flagged as violating its usage policy for up to 2 years, and apply other legal or safety exceptions.
The conditions are detailed in OpenAI's documentation and Anthropic's documentation.
7. Cookies and similar technologies
Our website uses cookies and analytics tools to improve the user experience, understand platform usage and personalize content.
Users can set their browser to reject cookies or to be notified about them. Some features may be limited if cookies are disabled.
8. User rights
Under Chilean Law 19.628, users have the right to:
- Access their personal data held by us.
- Rectify inaccurate, outdated or incomplete data.
- Request deletion of data when legally applicable.
- Object to the use of their data for marketing or other non-essential purposes.
9. Exercising rights & contact
Requests for access, rectification, deletion or objection are handled manually: just write to us or call us through any of these channels, stating which data and which request. The same channels can be used for questions about this policy:
- Email: contacto@disrupsoft.com
- Phone: +56 9 2394 9261
- Address: Eulogia Sánchez 065, Providencia, Santiago, Chile
To ask for a conversation with the assistant to be deleted before the 90 days, just give the conversation ID shown at the bottom of the assistant, or the email left in the assistant's form. We delete the conversation, its messages and the related contact request.
10. Changes to this policy
We may update this Privacy Policy to reflect changes in our practices, services or applicable regulations.
Updates will be published on our website with a visible effective date. In the event of material changes, users will be informed through available channels.
11. Acceptance
By using our website or services, the user acknowledges and accepts this Privacy Policy.