Privacy Policy

Effective date: October 8, 2026 · Last updated: October 8, 2026

This Privacy Policy explains how COLONY-ANTIMIMIK SAS ("Antimimik", "we", "us"), a simplified stock company (S.A.S.) organised under the laws of the Republic of Colombia, NIT 901.936.724-1, with registered address at DG 46 # 20-38, Bogotá D.C., Colombia, collects, uses, shares and protects personal data when you use Dealvane (the "Service"), including our website, web application and APIs. We act as the data controller (responsable del tratamiento) for the personal data described in this policy. This policy is our personal data processing policy for the purposes of Colombian Law 1581 of 2012 and its implementing regulations.

1. Summary

• We collect the account information you give us (name, work email, workspace name, password in hashed form) and the content you create in Dealvane (search criteria, research briefs, pipeline entries and notes).
• Dealvane builds research from public sources (Wikidata, Wikipedia, the GLEIF LEI registry, the GDELT news index and public company websites). We do not send your account details to these sources.
• If AI features are enabled, search criteria and public source material are sent to our AI provider (OpenAI or Anthropic) to generate analysis.
• The Service is hosted on Amazon Web Services (AWS). We use only essential cookies. We do not sell personal data, and we do not use advertising or analytics trackers.

2. Data we collect

Information about third parties in research briefs

Briefs describe companies and may include publicly available information about individuals acting in a professional capacity, such as founders or executives, obtained from the public sources listed in section 4. We process this information only to provide company research to our customers, cite its source, and correct or remove it on request. Individuals can contact us at the address below.

3. How we use personal data

• To provide the Service: create and secure your account, run searches, generate and store briefs, maintain your pipeline, and export documents. This is necessary to perform our contract with you.
• To keep the Service secure: authenticate sessions, prevent abuse (for example, rate-limiting sign-in attempts), and investigate incidents. This is our legitimate interest and legal obligation.
• To manage subscriptions: link AWS Marketplace subscriptions to your workspace and verify entitlements.
• To communicate with you: respond to support requests and send essential service notices.
• To comply with law: meet legal, tax and regulatory obligations and respond to lawful requests.

We do not use your customer content to train AI models, and we do not sell or rent personal data.

4. Public data sources

To produce candidate lists and research briefs, the Service sends requests containing search terms and company names (not your account details) to the following public sources and retrieves publicly available information:

• Wikidata and Wikipedia (Wikimedia Foundation)
• GLEIF, the Global Legal Entity Identifier Foundation's public LEI registry
• The GDELT Project news index
• Public websites of the companies being researched

These organisations process requests under their own terms and privacy policies. Content from Wikipedia is used under the Creative Commons Attribution-ShareAlike licence and is attributed in each brief.

5. Service providers (subprocessors)

We use these providers' business API offerings. Under their published terms, they do not use API data to train their models by default. We may update this list as the Service evolves and will update this page when we do.

6. International transfers

Our service providers are located in the United States, so your data may be transferred to and processed outside Colombia. We use providers that apply appropriate contractual and security safeguards. Where required by applicable law, we rely on your authorisation or another lawful transfer mechanism.

7. Cookies

We use only cookies that are strictly necessary for the Service:

We do not use advertising, cross-site tracking or third-party analytics cookies. Fonts and assets are served from our own domain.

8. Retention

• Account data and customer content are kept for as long as your account is active. Data is deleted within 30 days after you close your account or ask us to delete it, unless we must keep it longer by law.
• Sessions expire after 14 days. Security and server logs are kept for up to 90 days.
• Backups are overwritten on a rolling basis within 30 days.

9. Security

We protect data with industry-standard measures, including encryption in transit (HTTPS/TLS), Argon2 password hashing, HttpOnly secure session cookies, CSRF protection, per-workspace data isolation, least-privilege access to production systems, and regular backups. No system is completely secure. If we become aware of a breach that affects your personal data, we will notify you and the competent authorities as required by law.

10. Your rights

Under Colombian law (Law 1581 of 2012), and other data protection laws where they apply, you have the right to:

• know, access, update and correct your personal data
• request proof of the authorisation you gave us, and be informed how your data is used
• revoke your authorisation and/or request deletion of your data, where no legal or contractual duty requires us to keep it
• file complaints with the Superintendencia de Industria y Comercio (SIC) after first contacting us

If you are located in the European Economic Area, the United Kingdom or another region with similar laws, you may also have rights to data portability, restriction and objection.

To exercise your rights, email support@antimimik.com from the address linked to your account. We answer queries within ten (10) business days and claims within fifteen (15) business days, as provided by Colombian law. You can update your workspace name and password at any time from the Account page.

11. Children

The Service is a business tool and is not directed to anyone under 18. We do not knowingly collect personal data from children.

12. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify account holders by email or in the app before they take effect. The "Last updated" date shows the latest version.

13. Data controller and contact

The data controller (responsable del tratamiento) responsible for your personal data is:

Send privacy and data-protection requests, including queries and claims under Law 1581 of 2012, to support@antimimik.com, or by post to the registered address above.