Privacy

Who we are#

nondro is a platform made and operated by COMCOM S.A.S., a company registered in Colombia ("COMCOM", "we").

This page explains what happens to personal data when you use nondro: this website, an organization's nondro workspace, and the nondro connector that links AI apps such as ChatGPT, Claude and Microsoft 365 Copilot to a workspace.

Your organization's data is your organization's#

Each organization that uses nondro has its own workspace. The organization decides what goes into it, who may use it and how long it is kept: it is the controller of that data (responsable del tratamiento, under Colombia's Ley 1581 of 2012). COMCOM processes it only on the organization's behalf and under its contract (encargado del tratamiento).

nondro is built to read an organization's systems where they are, when a person asks, rather than to copy them. The workspace keeps what it needs to work: the people who may sign in and their roles, the organization's definitions and knowledge, conversations with its AI, and a record of the changes made and by whom.

If you use nondro through your organization, ask your organization about your data first; we help it answer you.

Who did what, and when#

A workspace records the changes made in it, with who made them, when, and through which route (the website, an AI app or the API). That record belongs to the organization, like the rest of its workspace, and is kept for as long as the organization's contract says.

COMCOM opens it only to investigate misuse of nondro under that contract, or when a competent authority requires it by law. Opening it takes two people, and the opening is itself recorded.

Signing in#

You sign in to a workspace with your organization's own account provider, such as Google or Microsoft, or with a password the workspace gives you. nondro receives your name and email address from that provider; it never receives your password for that provider.

The connector for AI apps#

When you add nondro to an AI app, you give the connector your work email. It is used only to find which organization's workspace to send you to, and as a hint on that workspace's sign-in page.

The connector stores nothing: what it must remember, such as the connection the AI app holds, travels encrypted inside that connection. It does not record what the AI app asks or what nondro answers.

What AI apps receive#

When you use nondro from an AI app, nondro gives that app only what you yourself may see in the workspace, and only what it asks for to answer you. What the app then does with it is governed by its provider's terms: ChatGPT's are OpenAI's, Claude's are Anthropic's, Microsoft 365 Copilot's are Microsoft's.

nondro's own AI assistant sends the conversation, and the context it needs, to the AI model provider the organization's workspace is set up to use.

This website#

nondro.com sets no cookies and uses no analytics or advertising trackers. If you write to us, we use your message and your address only to answer you.

Improving nondro#

To improve nondro, COMCOM may collect anonymous usage and error information: counts, timings and kinds of error, with no names, email addresses or content, built so that it cannot be linked back to a person. It is kept apart from every organization's workspace and from the record of who did what.

Where it runs#

nondro runs on cloud infrastructure COMCOM contracts (Microsoft Azure) and, when an organization chooses, in the organization's own infrastructure. The providers that host or carry data for nondro are bound by contract to protect it and to use it only to provide their service.

What is kept, and for how long#

In an organization's workspace: your name, email address and roles, for as long as the organization gives you access; your conversations with its AI, what you write or change, and the record of who did what, for as long as the organization's contract says. When that contract ends, they are returned or deleted as it says.

In the connector: nothing. A connection you make from an AI app lasts for the period you choose when you approve it, 90 days at most, unless you end it sooner.

Messages you send us: for as long as we need to answer you and to keep a record of the request. Anonymous usage information: only in aggregate, with nothing that identifies you.

Your choices#

When you connect an AI app you see what it asks to do, and you choose what to allow and for how long. You can end a connection at any time, in the AI app or on your workspace's Connections page. Your organization's administrator decides who may use its workspace and can remove access.

Your rights#

Under Ley 1581 of 2012 you may know, update and correct your personal data; ask for proof of the authorization you gave; be told how your data has been used; revoke that authorization or ask for deletion where the law allows; and complain to the Superintendencia de Industria y Comercio.

For data in an organization's workspace, the organization answers those requests, and we help it. For anything else, or if you do not know whom to ask, write to us at the address below.

Changes to this page#

If this page changes in a way that matters, we say so here, with the date, before the change applies.

Contact

Questions, or a request about your personal data: support@comcom.com.co