Privacy Policy

Last updated: December 2024

CIMIENTO ("we," "our," or "us"), operating as Estela, is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our conversational intelligence platform and related services (the "Services").

1. Information We Collect

Information You Provide

  • Account Information: Name, email address, company name, phone number, and job title when you register for an account.
  • Payment Information: Billing address and payment details processed securely through our third-party payment providers (Stripe). We do not store your full credit card information.
  • Communication Data: Information you provide when contacting our support team or sales representatives.
  • Conversation Data: Audio recordings, transcripts, and metadata from sales calls you choose to analyze through our platform.

Information Collected Automatically

  • Usage Data: Information about how you interact with our platform, including features used, pages visited, and actions taken.
  • Device Information: Browser type, operating system, device identifiers, and IP address.
  • Cookies and Tracking: We use cookies and similar technologies to enhance your experience and analyze platform usage. See Section 8 for more details.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our conversational intelligence Services
  • Process and analyze sales conversations to generate insights, scoring, and coaching recommendations
  • Send you technical notices, updates, security alerts, and administrative messages
  • Respond to your comments, questions, and customer service requests
  • Monitor and analyze trends, usage, and activities to improve user experience
  • Detect, investigate, and prevent fraudulent transactions and abuse
  • Comply with legal obligations

3. Data Processing and AI

Our platform uses artificial intelligence and machine learning to analyze conversation data. This processing includes:

  • Automatic transcription of audio recordings
  • Speaker identification and diarization
  • Sentiment and tone analysis
  • Performance scoring across sales competencies
  • Pattern recognition and trend analysis across conversations
  • AI-generated coaching recommendations

Important: Your conversation data is processed securely and is not used to train general AI models shared with other customers. Each customer's data remains isolated and confidential within their account.

4. Information Sharing

We do not sell your personal information. We may share information in the following circumstances:

  • Service Providers: With third-party vendors who perform services on our behalf, including cloud hosting (AWS/GCP), analytics, payment processing (Stripe), and customer support tools. These providers are contractually bound to protect your data.
  • CRM Integrations: When you enable integrations, we share relevant data with your connected CRM systems (e.g., HubSpot, Salesforce) as directed by you.
  • Business Transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as a business asset.
  • Legal Requirements: When required by law, court order, or governmental authority, or to protect our rights, safety, or property.
  • With Your Consent: When you have given us explicit permission to share information.

5. Data Security

We implement industry-standard security measures to protect your information, including:

  • Encryption in transit (TLS 1.2+) and at rest (AES-256)
  • Access controls and authentication requirements
  • Regular security assessments and monitoring
  • Secure data centers with physical security controls

However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide the Services. Conversation data is retained according to your subscription plan settings and can be deleted upon request. Upon account termination, we will delete or anonymize your data within 90 days, unless retention is required by law.

7. Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete information
  • Erasure: Request deletion of your personal data
  • Restriction: Object to or restrict certain processing activities
  • Portability: Receive your data in a portable format
  • Withdrawal: Withdraw consent at any time where processing is based on consent

For Mexican Residents (LFPDPPP)

Under Mexico's Federal Law on Protection of Personal Data Held by Private Parties, you have ARCO rights (Access, Rectification, Cancellation, Opposition). To exercise these rights, contact us at legal@heyestela.io.

For European Residents (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation, including the rights listed above. Our legal basis for processing is typically contract performance or legitimate interests.

For California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act, including the right to know what personal information we collect and the right to opt-out of the sale of personal information. We do not sell personal information.

8. Cookies and Tracking

We use the following types of cookies:

  • Essential Cookies: Required for the platform to function properly
  • Analytics Cookies: Help us understand how you use our Services
  • Preference Cookies: Remember your settings and preferences

You can control cookies through your browser settings. Disabling certain cookies may affect platform functionality.

9. International Data Transfers

Your information may be transferred to and processed in countries other than your own, including the United States, where our service providers operate. We ensure appropriate safeguards are in place, including standard contractual clauses, to protect your information in accordance with applicable data protection laws.

10. Children's Privacy

Our Services are intended for business use and are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by email and/or by posting a notice on our platform prior to the change becoming effective. Your continued use of the Services after such modifications constitutes acceptance of the updated policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

CIMIENTO (operating as Estela)

Email: legal@heyestela.io