Privacy Policy

Altivora AI LLC (“Altivora”, “we”, “us”) is a technology and operations company that develops and operates initiatives related to artificial intelligence, technology infrastructure, automation, international mobility and other related products and services.

This Privacy Policy explains how we collect, use, store and protect personal information when a person visits altivora.ai, contacts us or uses the forms available on the site.

Responsible entity: Altivora AI LLC

Privacy email: privacy@altivora.ai

We may collect information voluntarily provided by a person when contacting us, including:

• first and last name
• email address
• phone number, when provided
• company or organization
• country
• inquiry type or area of interest
• message content

consent related to the processing of the information.

We may also process limited technical information necessary to operate and protect the site, such as session information, IP address or request characteristics, particularly to prevent spam, abuse, fraud or improper automated use.

Altivora does not request identity documents, passports, banking information, medical records or other sensitive personal information through its corporate form.

Users should not send this type of information through the general contact form.

We may use the information collected to:

• respond to inquiries
• understand the needs of prospective clients or partners
• contact people who request information
• evaluate consulting, technology or collaboration opportunities
• manage business relationships
• improve our services and digital experience
• analyze site performance in aggregate
• maintain site security
• prevent spam, abuse or fraudulent activity
• maintain administrative and compliance records

comply with legal obligations when applicable.

We will not use personal information for a purpose that is materially different from the purpose disclosed at the time of collection without providing any additional notice or authorization that may be required.

Depending on the jurisdiction and the interaction, we may process personal data on the basis of:

• consent
• a request for information made by the user
• steps prior to entering into a contract
• performance of a contract
• legitimate interests related to security, administration and business development

compliance with legal obligations.

When Colombian law applies, Altivora will obtain any authorization required for the processing of personal data, subject to the exceptions provided by applicable law.

When the GDPR applies, processing will be carried out on a valid legal basis under that regulation.

When a person completes a form on Altivora.ai, the information is processed on the server and validated before it is stored.

The database is the primary record of the inquiry.

Email systems used by Altivora may later send an internal notification about the existence of that inquiry.

Email is not the primary record of the lead.

Altivora implements controls intended to reduce spam and abuse, including information validation, automated anti-spam mechanisms and request-frequency controls.

Altivora may use specialized providers for functions such as:

• hosting and content delivery
• cloud infrastructure
• database storage
• transactional email delivery
• analytics
• security

monitoring and abuse prevention.

These providers should receive only the information necessary to perform their respective services and will be subject to corresponding contractual and data-protection terms.

Altivora’s current technology architecture may use specialized providers for hosting, cloud infrastructure, PostgreSQL and transactional email.

Altivora does not sell or rent personal information of its users or contacts.

Nor do we use information provided through the corporate form to create profiles intended for sale to third parties.

If these practices change in the future, this Privacy Policy and the corresponding consent mechanisms must be updated before such a change is implemented.

Altivora may use technologies necessary to operate the site and analytics tools to understand in aggregate how the page is used.

Where a particular technology requires consent under applicable law, corresponding mechanisms will be provided.

Altivora does not currently use the corporate site primarily for behavioral advertising based on personal profiles.

Altivora will retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to meet legal, contractual or security obligations.

Lifecycle of corporate contact-form data (commercial leads):

(1) Collection: only form fields are captured, with explicit consent to respond to that inquiry.

(2) Active handling: the lead is retained while the conversation is answered, qualified or closed.

(3) No commercial relationship: if the inquiry does not become a contractual or service relationship, associated data may be retained for up to 24 months from the last meaningful interaction (for example, an email exchange about that same inquiry). This window aligns with common B2B follow-up practice in technology and with the principle of storage limitation.

(4) Spam or clear abuse: records marked as spam or clearly abusive may be deleted sooner, typically within 90 days.

(5) Later commercial relationship: if the inquiry leads to a contract, billing or another formal relationship, different retention periods required by that relationship or by law may apply (for example, accounting or contractual duties). Those periods are not governed solely by this site Policy.

(6) Deletion: when the applicable period expires or a valid deletion request must be honored, Altivora will delete or anonymize the lead record in its operational systems, subject to infrastructure backups that are purged according to the provider’s backup cycle.

United States: there is no single federal mandatory retention period for this type of B2B commercial lead; Altivora applies the reasonable-necessity standard above. Colombia (Statutory Law 1581 of 2012 and complementary rules): information must not be kept longer than needed for the stated purpose. Where the GDPR applies to a specific case, the storage-limitation principle also applies.

Altivora uses reasonable administrative, organizational and technological measures intended to protect information against unauthorized access, loss, alteration, disclosure or misuse.

These measures may include:

• server-side processing
• input validation
• separation between client code and server secrets
• access controls
• parameterized database queries
• management through environment variables
• anti-spam controls
• request limiting
• data minimization

infrastructure security updates and controls.

However, no system connected to the Internet can guarantee absolute security.

Because of the international nature of Altivora and its technology providers, certain information may be processed in countries other than the one where the user resides.

Where required, Altivora will use appropriate legal and contractual mechanisms for such transfers.

Depending on the applicable jurisdiction, a person may have the right to:

• know whether Altivora processes personal information about them
• request access to their information
• request update or correction
• request deletion where legally available
• withdraw consent
• object to certain processing
• request restriction of processing
• request portability where applicable

lodge a complaint with a competent authority.

Colombian law recognizes rights related to knowledge, updating, rectification and processing of personal data. Where the GDPR applies, it also provides rights of access, rectification, erasure, restriction, objection and, in certain circumstances, portability.

Channel to exercise rights (including access, correction or deletion relating to a contact-form lead): privacy@altivora.ai. legal@altivora.ai may also be used; both mailboxes are monitored operationally together with hello@altivora.ai.

We may request reasonable information to verify the identity of the requester before handling certain requests.

Where Colombian rules apply, Altivora will observe the response periods provided for inquiries and complaints. Where the GDPR applies, Altivora will seek to respond within the period that regime establishes. In other cases, including general U.S.-based handling of B2B site inquiries, Altivora will respond within a reasonable time and without undue delay.

There is no self-service deletion portal on the site: requests are handled manually through the privacy channel and the lead system records.

When Colombian law applies to the processing of personal information, Altivora will observe the principles and rights established by Statutory Law 1581 of 2012 and its complementary rules.

Data subjects may submit inquiries or complaints related to the processing of their information through Altivora’s privacy channel.

Under applicable Colombian rules, inquiries are generally answered within a maximum of ten (10) business days and complaints within a maximum of fifteen (15) business days, without prejudice to extensions that those rules themselves allow when applicable.

The Superintendence of Industry and Commerce is the competent Colombian authority for personal-data protection.

When the GDPR applies, individuals may exercise the rights provided by that regime and lodge a complaint with the competent data-protection authority.

Whether the GDPR applies depends on the circumstances set out in its territorial scope, not merely on the fact that a website can be visited from Europe.

The Altivora.ai corporate site is not designed for or specifically directed to children.

Altivora does not knowingly seek to collect personal information from children through its corporate forms.

If we determine that a child’s information was provided without the necessary authorization, we will take reasonable steps to delete it where appropriate.

Altivora.ai may contain links to companies, products or services related to its ecosystem, including Multivisa.ai and Australasian Student Services.

Those sites and services may operate under their own terms, privacy policies, processes and controllers.

This Policy applies exclusively to processing carried out directly by Altivora AI LLC through Altivora.ai, unless expressly stated otherwise.

We may update this Policy to reflect technological, operational, legal or business changes.

When we make material changes, we will update the date indicated at the top of this page and, where appropriate, provide additional notice.

For questions about this Policy or the processing of personal information:

Altivora AI LLC

Privacy & Data Protection

privacy@altivora.ai