Privacy and data protection policy

This policy explains how Medikorp processes the personal data it receives through grupomedikorp.com, its forms, its WhatsApp widget, the Medikorp AI assistant and its newsletter, under Ecuador's Organic Law on Personal Data Protection (LOPDP) and its General Regulation.

Who is responsible

The data controller is Medikorp, an Ecuadorian company domiciled in Ecuador. For any privacy matter, write to us through the data rights form or on WhatsApp at +593 98 431 9594.

What data we process

We only process data you give us or that is generated when you use the site:

• Contact data: name, email, phone, organization, role and the message you send.
• Conversations with Medikorp AI: what you type and the assistant's replies.
• Newsletter subscription: email, optional name, language and the date of your consent.
• Technical data: a pseudonymous connection identifier (a hash of the IP address that cannot be reversed), your browser, pages visited and your cookie preferences.

We do not ask for health data. Under the LOPDP, health data is a special category, so Medikorp AI warns you not to share it and the triage demo on the site stores nothing.

Why we use it and on what legal basis

• To answer your requests, prepare proposals and schedule demos. Legal basis: your consent and the performance of pre-contractual measures you request.
• To send you the newsletter. Legal basis: your express consent, which you can withdraw at any time.
• To count, in aggregate, visits, clicks on site buttons and how fast each page loads, without cookies or identifiers. Legal basis: our legitimate interest in keeping the site useful and fast.
• To measure site usage with analytics, only if you accept those cookies. Legal basis: your consent.
• To protect the site from abuse and automated submissions. Legal basis: legitimate interest.

We do not sell your data or use it for purposes other than those listed.

Automated decisions

Medikorp AI is an automated assistant that answers questions about our services. Our system gives each request a sales priority to organize it, and a person on our team reviews every case before any decision is made. You have the right not to be subject to decisions based solely on automated assessments and to request human intervention.

Who we share data with

We use providers that process data on our behalf, under contracts and security measures: web hosting (Vercel), database (Supabase), language models for Medikorp AI and content generation (OpenRouter and the models it routes to), image generation (Fal) and email delivery (Resend). Some of them operate outside Ecuador, so international transfers may occur, which we carry out with the safeguards the LOPDP requires.

How long we keep it

• Sales requests and conversations: up to 24 months after the last contact, unless a contract is in place.
• Newsletter: while you remain subscribed. When you unsubscribe we stop emailing you and keep only the record of your consent and its withdrawal.
• Consent records: as long as needed to show they were obtained lawfully.

Your rights

You can exercise the rights of information, access, rectification and update, deletion, objection, portability, suspension of processing, and the right not to be subject to decisions based solely on automated assessments. You can do so free of charge through the data rights form. We answer within a maximum of fifteen days, as the LOPDP requires. If you believe we did not address your request, you can contact Ecuador's Superintendency of Personal Data Protection.

Security

We use encryption in transit, role-based access control in our back office, row-level security policies in the database and audit logs. No measure is perfect. If a breach affecting your data occurs, we will notify you and the authority as the law requires.

Minors

This site is aimed at organizations and professionals. We do not knowingly collect data from people under 18.

Changes

If we change this policy, we will publish the new version here with its update date. If a change affects a consent you gave us, we will ask for it again.