Last updated: January 1, 2026 — Version 1.0

1. Introduction

Informática Integral (Inforint S.R.L.) ("Inforint", "we") is an Argentine company dedicated to the development of systems, software, websites and mobile applications, and to providing technology consulting services to organizations in different sectors (healthcare, hospitality, food service, entertainment, security and public administration, among others).

This Privacy Policy (the "Policy") describes in general terms how Inforint collects, uses, stores, protects and, where applicable, shares the personal information processed through its websites, mobile applications, systems and services (collectively, the "Services").

Custom developments and consulting services provided to specific clients may also be subject to specific contractual agreements that supplement this Policy.

This Policy is issued in compliance with Argentine Personal Data Protection Act No. 25,326, its implementing Regulation No. 1558/2001, the supplementary provisions issued by the Agency for Access to Public Information, and other regulations applicable to each activity sector.

Use of the Services implies reading and accepting this Policy. If you do not agree, please do not use them.

---

2. Data controller

• Company name: Inforint S.R.L. (Informática Integral)
• Email: contacto@informaticaintegral.com.ar
• Phone: +54 11 3024-1036
• Legal address: Buenos Aires, Argentina

For specific inquiries on personal data protection, write to contacto@informaticaintegral.com.ar with the subject "Data Protection".

---

3. Definitions

For the purposes of this Policy:

• "Personal data" or "Personal information": any information relating to an identified or identifiable natural person.
• "Sensitive data": personal data revealing racial or ethnic origin, political opinions, religious beliefs, trade union membership, sexual life or health information.
• "Data subject": the natural person to whom the personal data relates.
• "Data controller": the party determining the purposes and means of data processing.
• "Data processor": the party processing data on behalf of the controller.
• "Organization": company, institution or public agency that contracts Inforint's products or services.
• "User": natural person who uses the Services, whether as a direct customer, as personnel authorized by an Organization, or as a visitor of Inforint's websites.

---

4. Scope

This Policy applies to:

• Inforint's websites (including, among others, inforint.net).
• Inforint's mobile applications distributed through App Store (iOS) and Google Play (Android).
• Software products and web platforms provided to Organizations.
• Consulting, custom development and technical support services.
• Communications through email, phone and Inforint's official channels.

Each product or service may have specific particularities regarding which data is collected and for what purpose; those particularities are communicated at sign-up or first use, and integrate with this Policy.

---

5. Inforint's role: controller and processor

Inforint plays different roles depending on the type of data and the processing context:

5.1. As data controller

Inforint is the data controller regarding:

• Data of Users registered directly in its Services (direct customers, website visitors who fill out forms, subscribers).
• Contact data of client Organizations and their representatives.
• Technical data collected to operate its Services.

5.2. As data processor

Regarding the data that Organizations upload into the products provided by Inforint (for example: data of clients, patients, guests, reservations, operational records), Inforint acts as data processor on behalf of the contracting Organization, under article 25 of Act No. 25,326. The Organization is the data controller for that data and determines its purposes, scope and retention period. Inforint processes it solely in accordance with the Organization's instructions and the terms of the service agreement signed with it.

---

6. Data we collect

6.1. User data

• First and last name.
• Type and number of identity document, when necessary.
• Email address.
• Contact phone number.
• Username and password (passwords are stored hashed, never in clear text).
• Role or profile within the Organization, when applicable.
• Digital or graphic signature, when uploaded by the User.

6.2. Data uploaded by Organizations

In products provided to Organizations, the Services store operational data determined by each Organization's activity. Such data may include, depending on the case:

• Identification and contact details of clients, patients, guests or end-users of the Organization.
• Sensitive data (for example, health data) in products intended for the healthcare sector, processed with the enhanced protections required by applicable regulations.
• Commercial, booking, billing and operational management information.
• Attached documents and images.

This data is the responsibility of the contracting Organization; Inforint acts as data processor as described in section 5.2.

6.3. Technical and usage data

• Unique device identifier (generated by the app).
• Device model and operating system.
• Application version.
• Device language and time zone.
• IP address used to access.
• Date and time of each access.
• Activity logs within the Platform (audit).
• Information about failures or technical errors (crash logs), anonymized where possible.

6.4. Data we do NOT collect

Unless with explicit consent and for a specific feature:

• We do not collect GPS location data for tracking purposes.
• We do not access the device's contacts.
• We do not access the microphone.
• We do not track the User's activity outside the Services (we do not perform tracking in the sense of Apple's App Tracking Transparency Framework).
• We do not use advertising or advertising-tracking or profiling SDKs.
• We do not link data with data collected by third parties for advertising purposes.
• We do not share device identifiers with data brokers.

---

7. Purposes of processing

We use the data collected for the following purposes:

1. Providing the Services: enabling the use of features in our products and platforms.
2. Authentication and authorization: verifying the User's identity and applying the corresponding permissions.
3. Security: detecting unauthorized access, preventing fraud and protecting the system's integrity.
4. Audit and traceability: logging relevant actions as required by applicable regulations.
5. Providing technical support: resolving reported inquiries and incidents.
6. Communicating updates: notifying about changes in the Services, new versions or security alerts.
7. Managing the business relationship: issuing invoices, handling commercial inquiries, following up on contracts.
8. Complying with legal obligations: responding to requirements from competent authorities.
9. Improving the Services: analyzing aggregate usage to optimize features, using aggregated or anonymized data whenever possible.

Operational data uploaded by Organizations is processed exclusively for the purposes determined by each Organization under the service agreement.

---

8. Legal basis for processing

Data processing is based on:

• Informed consent of the User upon registration and acceptance of this Policy.
• Contractual relationship between Inforint and the customer (User or Organization).
• Compliance with applicable legal obligations.
• Legitimate interest of Inforint and its customers in maintaining the security, continuity and improvement of the Services.
• Exclusions and special cases provided by Act No. 25,326, in particular for health data processed by healthcare establishments.

---

9. Permissions requested by mobile applications

Our mobile applications request only the operating system permissions needed for specific features. Granting each permission is optional and can be revoked at any time from the device settings.

Common permission examples:

Permission	Use
Notifications	Sending alerts and operational messages.
Camera	Capturing photos or scanning codes, when required by the application.
Gallery / photos	Selecting existing files to attach.
Face ID / Touch ID / fingerprint	Biometric sign-in as an alternative to password. Biometric data never leaves the device and is managed by iOS/Android.
Storage	Saving downloaded files (for example, PDF reports).

If the User denies a permission, the associated feature will be unavailable; the rest of the application will continue to work normally.

---

10. Cookies and similar technologies

Inforint's websites and web portals use cookies and similar technologies for the following purposes:

• Strictly necessary or technical cookies: maintaining the session, remembering preferences, ensuring the site functions.
• Analytics cookies (when enabled): obtaining aggregated and anonymous usage statistics to improve the Services.

We do not use advertising cookies or share cookies with advertising networks. Users can configure their browser to reject cookies; this may affect some functionalities.

---

11. Third-party services

To operate the Services, we use third-party providers selected on the basis of security and regulatory compliance criteria. These may include:

• Hosting and cloud infrastructure providers.
• Transactional email providers.
• Push notification providers (Apple Push Notification Service for iOS, Firebase Cloud Messaging for Android).
• Application stores (Apple App Store and Google Play) for app distribution.
• Monitoring and support tools for error detection and user support.

These providers process data under confidentiality and data protection agreements, and are limited to the purposes indicated by Inforint.

---

12. Sharing data with third parties

Inforint does not sell or commercialize personal data. We share information only in the following cases:

1. With the contracting Organization, for products provided to Organizations.
2. With technology infrastructure providers (hosting, email, push notifications), under formal data processing agreements.
3. With funders, providers or third parties when the Organization so provides under the contracted service (for example, billing to healthcare insurers in healthcare products, payment gateways in commerce products).
4. With public authorities when required by law, court order or substantiated request from a competent authority.
5. In the context of corporate operations (mergers, acquisitions, reorganizations), subject to preservation of the obligations assumed in this Policy.

Under no circumstances do we share data with third parties for advertising purposes or commercial purposes unrelated to the service.

---

13. International data transfers

If we use providers with infrastructure outside Argentina, transfers will be carried out in compliance with applicable regulations, prioritizing countries with an adequate level of data protection or under contractual clauses guaranteeing an equivalent level. Users may request information about specific transfers by writing to contacto@informaticaintegral.com.ar.

---

14. Data retention

Data is retained while:

• A contractual relationship with the customer exists.
• It is necessary for the purposes described in this Policy.
• Required by regulations applicable to the customer's sector.

Indicative periods (may vary by product and applicable law):

Data type	Retention period
Operational data uploaded by Organizations	As determined by the Organization and the regulations of its sector.
User data	Duration of the relationship plus applicable legal periods.
Audit logs	Up to 5 years.
Technical logs (errors, performance)	Up to 12 months.
Backups	Rotation per backup policy (up to 12 months).

Once the periods have elapsed, data is deleted, anonymized or handed over to the customer as appropriate.

---

15. Security measures

Inforint implements reasonable technical and organizational measures to protect information, including:

• In-transit encryption: HTTPS/TLS on all communications.
• At-rest encryption of sensitive information where infrastructure allows.
• Role-based access control (least-privilege principle).
• Audit logging of access and relevant actions.
• Strong password policies and lock-out after failed attempts.
• Environment segregation for development, testing and production.
• Regular backups with rotation and restore testing.
• Security updates for software and infrastructure.
• Confidentiality agreements with personnel and providers.
• Security monitoring and incident response procedures.

No system is absolutely secure. Inforint commits to applying industry best practices and continuously improving its controls.

---

16. Notification of security incidents

In the event of a security incident that may affect personal data, Inforint will notify the affected customer without undue delay and, where applicable, the supervisory authority and the data subjects, in accordance with applicable regulations.

---

17. Rights of the data subject and account deletion

Under Act No. 25,326 and its supplementary regulations, every data subject has the right to:

• Access: know which data is being processed and obtain a copy.
• Rectification: correct inaccurate or incomplete data.
• Update: keep data current.
• Deletion: request the deletion of data when appropriate.
• Confidentiality regarding the recorded information.
• Objection to the processing, in cases provided by law.
• Not to be subject to automated decisions with significant legal effects without human review.

How to exercise these rights

Write to contacto@informaticaintegral.com.ar with the subject "ARCO Rights Request", attaching a copy of your identity document and the specific request. We will respond within 10 calendar days in accordance with applicable regulations.

When the request concerns data uploaded by an Organization (where Inforint is the data processor), we will forward it to the responsible Organization for resolution.

Account deletion

In accordance with the guidelines of application stores (App Store and Google Play), every User may request the deletion of their account and associated personal data. The procedure is detailed on the Support — Account deletion page and, in summary:

1. Send a request to contacto@informaticaintegral.com.ar with the subject "Account deletion", or from within the application itself when that option is available.
2. Prove identity by providing a copy of the identity document.
3. Inforint confirms receipt within 5 business days and deletes the account within 30 calendar days following identity verification, unless there is a legal retention duty.

Operational data uploaded by Organizations is not deleted through this channel; its deletion is handled through the responsible Organization.

Complaint to the supervisory authority

If you believe your rights have not been duly attended to, you may file a complaint with the Agency for Access to Public Information (AAIP), the supervisory body for Act No. 25,326: https://www.argentina.gob.ar/aaip.

---

18. Minors

Our Services are not directed to direct use by minors, nor do they deliberately collect information from minors as registered Users. Data of minors uploaded by Organizations in the course of their activity (for example, minor patients, students, recipients of social programs) is processed in accordance with applicable regulations and under the Organization's responsibility.

---

19. Confidentiality and professional secrecy

Certain information processed through our Services may be protected by enhanced confidentiality duties or professional secrecy (for example, medical secrecy). Inforint, its personnel and its providers are bound to respect such duties and not to disclose information to which they have access in connection with support, maintenance or development tasks. Technical personnel access to confidential information is logged in audit records and occurs only when necessary to resolve an incident.

---

20. Changes to this policy

We may update this Policy from time to time to reflect changes in the Services, technology or applicable regulations. The current version will always be available at https://inforint.net/Privacy/, with the date of the last update indicated. When changes are substantial, we will communicate them by email or via notices within the Services.

Continued use after the publication of the changes will imply acceptance; if the User does not agree, they may stop using the Services and request the deletion of their data.

---

21. Contact and complaints

For any inquiry, request or complaint related to this Privacy Policy:

• Email: contacto@informaticaintegral.com.ar
• Suggested subject: "Data Protection" or "ARCO Rights Request".
• Phone: +54 11 3024-1036
• Address: Buenos Aires, Argentina.

Supervisory authority: Agency for Access to Public Information (AAIP) — https://www.argentina.gob.ar/aaip.