This policy explains how Orvium processes the personal data of people who visit this website, fill in our forms, write to us on WhatsApp or other channels, or apply for a role with us. It is written to meet the information duty of Chile’s Ley 21.719 on the protection of personal data, and applies to anyone located in Chile as well as to visitors from other countries.
| Field | Detail |
|---|---|
| Registered name | [REVISIÓN LEGAL PENDIENTE — razón social completa] |
| Tax ID (RUT) | [REVISIÓN LEGAL PENDIENTE — RUT o identificación de la entidad extranjera] |
| Registered address | [REVISIÓN LEGAL PENDIENTE — domicilio completo] |
| Website | orvium.ai |
| Privacy contact | privacidad@orvium.ai |
| Data protection officer | [REVISIÓN LEGAL PENDIENTE — nombre del delegado, si se designa] |
If Orvium is not domiciled in Chile, Ley 21.719 requires a representative established in Chile. Write to privacidad@orvium.ai for that contact.
We only ask for what we actually need. These are the categories we handle, grouped by where they come from:
We do not knowingly collect sensitive data (health, beliefs, biometrics, union membership) or data from people under 18. Please do not send it to us. If you do, write to us and we will delete it.
Ley 21.719 requires a lawful basis for every purpose. Here is ours, purpose by purpose:
| Purpose | Data used | Legal basis |
|---|---|---|
| Reply to your enquiry and run a commercial demo | Identification, contact, conversation content | Your consent, given on the form |
| Evaluate a job application | Identification, contact, professional data | Your consent, and pre-contractual steps at your request |
| Send commercial communications and newsletters | Name and email | Your separate, optional consent — revocable at any time |
| Contact you over WhatsApp | Name and phone number | Your separate, optional consent for that channel |
| Measure site traffic and improve the site | Technical and navigation data, anonymized IP | Your consent to the analytics cookie category |
| Advertising, campaign measurement and remarketing | Technical data and advertising identifiers | Your consent to the advertising cookie category |
| Prove that consent was requested and given | Consent records | Legal obligation under Ley 21.719 |
| Site security, anti-spam and abuse prevention | IP, user agent, submission timestamps | Our legitimate interest in keeping the service available |
| Comply with tax, accounting and legal duties | Billing and contract data | Legal obligation |
Where the basis is consent, you may withdraw it at any time, and withdrawing it is as easy as giving it. Withdrawal does not affect processing carried out before the withdrawal.
We never sell, rent or trade your personal data. We do share it with providers that process it strictly on our behalf and under contract. The full, versioned list — with the service, the data categories and the country of each — is published at Subprocessors.
Beyond those providers, we may disclose data to: courts, regulators or public bodies when the law requires it; our legal and accounting advisors, bound by professional secrecy; and an acquirer, if Orvium is ever merged or acquired — in which case we will tell you before your data becomes subject to a different policy.
Some of our providers process data outside Chile, mainly in the United States and the European Union. Ley 21.719 allows this when an adequate safeguard is in place.
| Destination | Why | Safeguard |
|---|---|---|
| United States | Cloud hosting, analytics, scheduling, email and advertising platforms | Contractual clauses with each provider that mirror the duties of Ley 21.719, plus the provider's own DPA |
| European Union | Cloud infrastructure and database regions | Contractual clauses; the EU also provides an equivalent level of protection |
| Category | Retention period | Then what |
|---|---|---|
| Leads and enquiries that do not convert | 24 months from the last interaction | Deleted |
| Customer and billing data | Duration of the contract + 6 years (tax and commercial law) | Deleted |
| Job applications — candidate not hired | 12 months, so we can consider you for future roles | Deleted |
| Marketing subscribers | Until you unsubscribe, then 12 months to honor the opt-out | Deleted |
| Conversations with AI agents | 24 months from the end of the conversation | Deleted or anonymized |
| Consent records | 5 years from the withdrawal or expiry of the consent | Deleted |
| Rights requests and our replies | 5 years, as evidence of compliance | Deleted |
| Analytics data | 14 months in Google Analytics 4, with IP anonymization | Auto-deleted by Google |
Ley 21.719 gives you six rights over your personal data. All of them are free to exercise.
The fastest way to exercise them is the form at Exercise your rights. You can also write to privacidad@orvium.ai.
We answer within 30 calendar days, extendable once by a further 30 days if the request is complex — we will tell you if that happens. A temporary blocking request is applied within 2 business days. Exercising these rights is always free: rectification, erasure and objection without limit, and access at least once per quarter.
If you are not satisfied with our answer — or if we do not answer — you may lodge a complaint with the Agencia de Protección de Datos Personales of Chile, the supervisory authority created by Ley 21.719. You do not need to go through us first.
Yes, we use automation — it is what we sell. Here is exactly where it touches you, and what it does:
No automated decision produces legal effects for you or significantly affects you in a comparable way. Even so, you may object to profiling and ask for human intervention through the rights form. We do not use your conversations to train external AI models.
No analytics, advertising or remarketing script runs on this site before you consent to it. The full inventory — name, provider, purpose, duration and destination country — is in the Cookie Policy, and you can change or withdraw your choice at any time from Cookie preferences in the footer. We also honor the browser’s Global Privacy Control signal.
This site and our services are aimed at businesses and at people aged 18 or over. We do not knowingly process the data of minors. If you believe a minor has sent us data, write to privacidad@orvium.ai and we will delete it.
In general terms: traffic is encrypted in transit with TLS and data is encrypted at rest; access is role-based and granted on a need-to-know basis with multi-factor authentication; we keep audit logs, review our providers, and have an incident response procedure that includes notifying the Agencia and affected data subjects when the law requires it. The detail is on our Trust Center. No system is perfectly secure, and we do not claim otherwise.
When we change this policy in a way that affects you, we will re-ask for your consent and show the banner again. Every published version stays online so you can check exactly which text applied on a given date.