Privacy Policy

Last updated: October 7, 2026

Who we are

INTEG MIAMI LLC ("we") is the controller of the data described in this policy. InTeg IA is an internal corporate tool: you sign in with an account created for you by an administrator at your organization. There is no public sign-up or self-service registration.

This policy covers the InTeg IA mobile app and the web platform at ia.integca.com.

What data we handle

Account data

Your name, email address, password (stored only as a hash, never in the clear), preferred language, and the organizational assignment that determines what you can reach: company, department and role. All of it is entered by an administrator when your account is created.

Content you create

The messages you write in chat, the files you attach (original name, verified file type, size and contents) and the voice notes you record.

This is a corporate platform and that content is a company record, not a private space. That applies to your own space as well — the one with your name on it, where the general agent assists you: the space is yours in the sense that nobody else writes in it, not in the sense that nobody else can read it. If you need to handle personal matters, use a personal tool.

Security and audit data

IP address, browser or device identifier (user agent), access timestamps, and an audit trail of sensitive actions: sign-ins and sign-outs, password changes, permission changes, and the creation or deletion of resources. This trail is a security requirement, not usage analytics.

For two-factor authentication we send a one-time code to your email address. We do not use SMS and we do not collect a phone number.

Permissions the mobile app requests

  • Microphone. Only to record a voice note when you press the record button. The app does not listen or record in the background, and does not access the microphone at any other time.
  • Files. To attach a document to a conversation, and only the file you pick in the system chooser. The app does not scan your storage.
  • Internet. To communicate with your organization's server.

The app does not access your location, camera, contacts, calendar, or the list of apps installed on your device.

What we use the data for

  • Running the service: signing you in, showing your conversations, and processing your queries.
  • Routing each query to the AI assistant that belongs to your department.
  • Protecting the platform: detecting unauthorized access, throttling brute-force attempts, and maintaining the audit trail.
  • Meeting legal obligations where a valid request exists.

We do not use your data for advertising, build commercial profiles, sell it or share it with third parties for commercial purposes, or track you across other apps and websites.

Who else sees this data

Your messages and files are processed by AI assistants hosted on infrastructure controlled by your organization. They are not sent to third-party AI services and are not used to train third-party models.

Within your organization, access to content is limited by space: other people at your company do not see your conversations, and neither do those who administer accounts and departments. We may disclose information where the law requires it through a valid legal request.

The platform administrator can read your conversations

There is one exception, and it is worth knowing precisely, because it is the only one: the platform administrator can open any conversation and can search for text inside everyone's conversations. This follows from the content being a company record, and it exists so that work information can be recovered and internal audits or investigations can be carried out.

How it works, concretely:

  • Only the platform administrator. Those who administer a company inside the platform cannot read their people's conversations.
  • Before opening a conversation or running a search, they must write a reason. It is not an optional step: without a reason the system shows nothing.
  • Every open and every search is recorded with who entered, when, which conversation, whose it is, and the reason given. Searches are additionally recorded with the terms used.
  • It is read-only. They cannot write in your conversation or continue it, so a message you did not write will never appear under your name.
  • There is no bulk download: one conversation is opened at a time.
  • You are not notified when this happens. The record exists and can be reviewed, but no notification is sent to you.

We are telling you this because we would rather you know beforehand than on the day it happens.

How long we keep it

  • Account and content: for as long as the account is active. When an account is closed, the data is deleted or anonymized at the request of your organization's administrator.
  • When you delete a conversation: it leaves your list and goes to your trash, where you can restore it. It is not destroyed: the content is a company record, and permanently removing it is reserved for the platform administrator and is also recorded. There is no automatic deletion by age; if a retention policy is ever defined, it will be announced.
  • When your account is deactivated: your conversations are not deleted. They pass into the custody of the platform administrator, automatically and on the record, because they are a company record and cannot be left with nobody answering for them. What does not change is who wrote what: the history still shows it.
  • Sessions and access tokens: expired tokens are purged automatically after 30 days.
  • Audit trail: retained longer than content, because its purpose is to make a later security investigation possible.

How we protect it

  • All traffic is encrypted with TLS. The platform does not accept unencrypted connections.
  • The mobile app validates the server certificate against an authority pinned inside the app itself, so an intermediary cannot intercept the connection.
  • Passwords are stored using a resistant hashing algorithm, never in readable form.
  • Two-factor authentication is mandatory for administrative accounts.
  • Access control is enforced in the database, not only in the interface.
  • Uploaded files are verified by their actual contents, not by their name or declared type.

No system is invulnerable. If a breach affects you, we will notify you and your organization.

Your rights

You may request access to the data we hold about you, its correction, its deletion, or a copy in a machine-readable format. Because your account is administered by your organization, the fastest route is usually your administrator; you can also write to us directly at the address below. We respond within 30 days at most.

Children

InTeg IA is a workplace tool intended for an organization's staff. It is not directed at anyone under 18, and we do not knowingly collect data from minors.

International transfers

INTEG MIAMI LLC is based in the United States. Data may be processed there or on the infrastructure your organization designates, under the same safeguards described in this policy.

Changes to this policy

If we change this policy we will update the date at the top. When a change materially affects how we handle your data, we will tell you in the app or by email before it takes effect.

Contact

For any question about this policy, or to exercise your rights: it@integca.com

← Back to the app