Privacy Policy

Controller: NOK SpA, a stock company incorporated under the laws of the Republic of Chile, whose business purpose is the development, commercialization and implementation of software and artificial intelligence based technological solutions for customer experience management, legally represented by Mr. Tomás Cruzat Undurraga

RUT: 78.392.696-2

Domicile: Santiago de Chile

Website: https://www.getnok.ai

Contact and channel for exercising rights: contacto@getnok.ai

2.1 Data provided voluntarily

We may collect the following personal data when the user provides it:

• First and last name
• Email address
• Phone number
• Company, position or other professional information
• Organization's tax ID (RUT), legal name and billing email, when a plan is contracted

2.2 Data collected automatically

When using the Service, the following is collected automatically:

• IP address
• Browser and device type
• Date and time of access
• Browsing and interaction information with the Service
• Technical data from QR code scans (date/time and a technical session identifier), for security and usage metrics

We may use cookies and similar technologies for these purposes. The user can disable them from their browser, which may affect some features of the Service.

2.3 Data of end users who leave comments

When a person scans a QR code or writes via WhatsApp to leave a comment, complaint or compliment for a company that uses NOK, we process:

• The free text of the comment the person writes
• The WhatsApp phone number, if the comment arrives through that channel
• Name and email, only if the person decides to provide them (they are optional and never required)

The feedback channel is open to the public. We ask people not to include sensitive data or third-party data in their comments; if they are included anyway, we apply data minimization and do not use them for purposes other than handling that comment.

NOK is a B2B platform: our clients are companies that use NOK to listen to their own customers. That is why NOK acts in two distinct roles:

• Data controller with respect to the data of its clients, contact persons and leads (sections 2.1 and 2.2)
• Data processor with respect to the data of end users who leave comments (section 2.3), which is processed on behalf of and under the instructions of the client company, which is the controller of that data. The conditions of this processing arrangement are detailed in the Terms and Conditions

Personal data is processed for the following purposes:

• Providing, operating and maintaining the Service
• Managing registrations, accounts and business relationships
• Responding to inquiries and contact requests
• Sending operational or contractual communications
• Receiving, storing and classifying end user comments, including their automatic categorization through artificial intelligence (see section 6)
• Sending the client company alerts about critical comments, via WhatsApp or other channels
• Improving security and preventing fraud
• Complying with legal and contractual obligations

The data will not be used for purposes other than those informed, except with the express authorization of the data subject or by legal mandate.

Processing is carried out on the basis of the contractual relationship with the user, compliance with legal obligations, and the legitimate interest of NOK SpA in providing the service. For purposes requiring specific consent, it will be requested expressly and in an informed manner.

The data subject may revoke their consent at any time, without retroactive effect, through a mechanism as simple as the one used to grant it.

The data subject may object to processing based on legitimate interest and, unconditionally, to direct marketing communications.

NOK uses language models to read each comment and classify it automatically: it assigns it a category (for example, "service", "product", "cleanliness"), estimates whether it is critical and generates a summary for the client's dashboard. This allows the company to prioritize and respond in time. In plain language:

• It is an automatic organization and prioritization of comments; it does not by itself decide sanctions, prices or legal consequences for any person
• The client company can always review the original comment and correct the classification
• If you are an end user and want a person (not a system) to review how your comment was classified, or you object to this automatic classification, write to us at contacto@getnok.ai or contact the company you left the comment for

getnok.ai does not sell or commercialize personal data.

Data may only be disclosed to:

• Providers that render services necessary for the operation of the Service, acting on behalf of getnok.ai
• Public authorities or courts, when there is a legal obligation

In all cases, reasonable measures are taken to ensure the confidentiality and security of the data. The external providers with which NOK SpA shares data, all under processing agreements and confidentiality obligations, are:

We will publish any relevant change to this list of providers at least 15 days in advance.

Personal data may be stored or processed on servers located outside Chile. In such cases, getnok.ai adopts measures to guarantee adequate levels of protection, in accordance with international standards and good security practices, relying on the Standard Contractual Clauses approved by the Ministry of Economy, on data processing agreements signed with each provider, and on technical security measures.

We implement technical and organizational measures to protect personal data against unauthorized access, loss, alteration or improper disclosure, including access control, encryption in transit and at rest where applicable, activity logs and data minimization.

Notwithstanding the foregoing, the user acknowledges that no security system is infallible.

Personal data will be retained for the duration of the contractual relationship and for an additional period of up to 6 years with respect to billing and tax data, due to legal obligation. Contact data of leads or inquiries without a contract will be retained for a maximum of 24 months from the last contact. After these periods, the data will be deleted or anonymized.

Additionally:

• End user comments: they are retained while the client company maintains the service; if the client requests it or terminates the contract, they are deleted or anonymized within 90 days, except for a legal obligation to retain them. Upon termination of the contract, the client has a period of 30 days to export their data, in accordance with the Terms and Conditions
• Technical and security records (logs, scans): up to 12 months

In accordance with Law N° 19.628 and its reform through Law N° 21.719, the data subject has the right to:

• Access their personal data
• Request its rectification
• Request its cancellation or deletion
• Object to the processing of their data where applicable
• Portability of their personal data
• Objection to automated decisions that affect them

To exercise any of these rights, the data subject may write to contacto@getnok.ai indicating their name, request and contact details. Exercising these rights is free of charge. NOK SpA will respond within a maximum of 30 calendar days, extendable once by an additional 30 calendar days when the complexity of the request justifies it, notifying the data subject of the extension.

If the request refers to a comment left for a company that uses NOK, the data subject may also address it to that company (controller of that data); NOK will support it in its role as processor. If the data subject is not satisfied with the response, they may file a claim with the Personal Data Protection Agency.

In the event of a security breach affecting personal data, NOK SpA will notify the affected users and, where applicable, the Personal Data Protection Agency (APDP), within the timeframes established by Law N° 21.719. In the case of end user data processed on behalf of a client company, NOK will additionally notify that company by email within a maximum of 72 hours from detection, with the available information about the incident.

The Service is not aimed at people under 18 years of age. getnok.ai does not intentionally collect personal data from minors. The feedback channel is open to the public, so we apply data minimization and ask people not to provide unnecessary data. When processing involves minors under 14 years of age, the consent of their parents or legal representatives will be required; in the case of sensitive data of minors under 16 years of age, the same requirement applies.

We do not request sensitive data (for example, health, ethnic origin, political or religious opinions). We expressly ask that sensitive data or third-party data not be included in comments. If they are included spontaneously, we process them with data minimization and only to handle the comment.

We use strictly necessary cookies for the operation of the site (session and security) and, if activated in the future, analytics cookies subject to the user's prior consent. Preferences can be managed from the browser or the cookie banner, and changed at any time.

We reserve the right to modify this Privacy Policy at any time. The modifications will be published on the website with their date and version number. When the changes are relevant, notice will be given through a prominent medium at least 15 days before they take effect.

For inquiries related to this Privacy Policy or the processing of personal data:

Email: contacto@getnok.ai

Website: https://www.getnok.ai

NOK SpA · Santiago de Chile