Privacy and data processing
Last updated: 25 August 2026
This policy covers the corporate site sari-ai.com and the data SARIBOT SAS processes directly. In deployments operated for a customer, for example a clinic, that customer may be the data controller and its own policies also apply.
This is a courtesy translation. In case of discrepancy, the Spanish version prevails.
1. Controller and contact
SARIBOT SAS, domiciled in Medellín, Colombia. For enquiries, complaints or requests about personal data: info@sari-ai.com.
2. What information we process
- Data you send us voluntarily when you write to us, such as name, email, company and the content of your message.
- Technical records needed for security and operations, such as IP address, date, requested path, browser agent and error events.
- In the voice demo, microphone audio while the session is active and the technical conversation data needed to provide and protect the service. Do not use the demo to communicate clinical, financial or other sensitive information.
- In contracted products, the data defined in the contract, the data subject’s authorisation and the responsible customer’s policy.
3. Purposes
Answering requests, providing and securing the services, diagnosing failures, preventing abuse, keeping operational traceability and meeting legal or contractual obligations. We do not sell personal data and we do not use the corporate site for behavioural advertising.
4. Providers and transfers
We may use infrastructure and specialised communications or artificial-intelligence providers to perform a requested function. We limit the data shared to what is necessary and apply contractual and technical controls according to the service and the jurisdiction of the deployment.
5. Retention and security
We keep information for as long as needed for the stated purpose, the applicable obligations and the defence of rights. Specific retention periods for enterprise products are set per deployment. We apply access controls, encryption in transit, operational logs and backups; no system can promise zero risk.
6. Your rights
Under Colombian Law 1581 of 2012 and its regulations you may access, update and correct your data; request proof of authorisation; learn how it has been used; file complaints with the Superintendencia de Industria y Comercio after exhausting the direct process; and, where applicable, revoke authorisation or request deletion.
Send your request to info@sari-ai.com, identifying the data subject, the request and a reply channel. If the data belongs to a customer’s deployment we will point you to that controller’s channel.
7. Cookies and changes
The corporate site does not install advertising cookies. Authenticated applications may use strictly necessary storage or cookies to keep the session and security. We will publish substantial changes here with their effective date.