Privacy Policy
Last updated: 13 October 2026 · Versión en español
Samán is a procurement platform operated by Samantech (Colombia). Companies use it to request quotes from their suppliers, read them, compare them and keep a record of who approved what.
This policy explains what data we collect, what we use it for, who we share it with and how long we keep it. It is written against what the product actually does today, not against what it might do later.
Who is responsible for the data. The customer company that contracts Samán is the data controller for the data it uploads and for its suppliers' data. Samantech acts as a data processor: we process that data solely to provide the service to that company, and on its instructions. If you are a supplier of a company that uses Samán and you want to exercise your rights over your data, you can write to us and we will route the request to that company.
1. What data we collect
From the customer company's users
Name, email address, role within the organization and who they report to. Authentication is handled by Clerk; Samán stores the email address and a user identifier.
From suppliers
Company or trade name, tax ID (NIT), phone number, email address, city, address and contact person. This data is uploaded by the customer company, not by the supplier.
Conversation content
The messages exchanged with suppliers over WhatsApp and email, including attachments (quotes as PDF, Excel or photo) and the text we extract from them.
Commercial data
Purchase requests, line items, quantities, quoted prices, approvals and purchase orders.
2. What we use it for
To run the customer company's procurement process: requesting quotes from suppliers, reading them, comparing them, and keeping a record of the approvals and of the resulting purchase orders.
We do not use this data for advertising and we do not sell it to anyone.
3. Processing by third-party language models
The content of the messages and attachments we exchange with suppliers is sent to third-party language model providers (Anthropic and Groq, both in the United States) in order to classify incoming messages and to extract line items, quantities and prices from quotes.
This is a core part of how the product works. We do it through their commercial APIs, not for model training.
4. Who we share data with
Samán relies on the following sub-processors. Each one receives only the data it needs for its function:
| Service | Purpose | Location |
|---|---|---|
| Meta / WhatsApp Business Platform | Sending and receiving supplier messages | United States |
| Anthropic (Claude) | Reading quotes and responding in the agent chat | United States |
| Groq | Incoming message classification and document data extraction | United States |
| Resend | Outbound email to suppliers | United States |
| Postmark | Inbound email from suppliers | United States |
| Clerk | User authentication | United States |
| Railway | Servers and database | United States (US West) |
| Cloudflare R2 | Attachment storage (planned, not yet in use) | United States |
Because these services are located outside Colombia, using Samán involves an international transfer of the data described above. Outside this list, we do not share data with third parties, unless the law or a competent authority requires us to.
Requests from public authorities
If a public authority asks us for data, we first review whether the request is legally valid, and we refuse or challenge it where it is not. We disclose only what is specifically requested, never the whole account, and we keep a record of every request and of what was disclosed. Where the data belongs to a customer company, we notify them so they can respond or object themselves, unless the law expressly prohibits us from telling them.
About the WhatsApp integration
Samán integrates with Meta's WhatsApp Business Platform
(Cloud API) in order to message suppliers on behalf of the customer company.
The whatsapp_business_messaging permission is used to send and
receive messages; whatsapp_business_management is used to register
and read the message templates and the phone number status of that company's
WhatsApp Business Account. The data that passes through it is the data
described in section 1: the supplier's phone number, the text of the messages
and their attachments. Every send is confirmed beforehand by a person
at the customer company; Samán does not send messages without that
approval.
5. Separation between customers
Each customer company's data is isolated from every other customer's at the database level. No user of one company can see another company's purchase requests, suppliers or conversations.
6. How long we keep it, and how to request deletion
We keep data for as long as the customer company's account is active, and for up to 90 days after it is closed. After that period we delete it from our production systems.
A customer company may request deletion of its data, or a copy of it, earlier by writing to the contact address. We respond to such requests within 15 business days.
How to request that we delete your data. Any individual — a user at a customer company, or a supplier contacted through Samán — may request deletion of their personal data by writing to esteban@samantech.com.co with the subject "Data deletion". We do not charge for this. We respond within 15 business days and confirm in writing once the deletion is complete.
7. Your rights
Under Colombia's Law 1581 of 2012 and its implementing decrees, you may access, update and correct your personal data, request proof of the consent given, be informed about how your data has been used, withdraw your consent, and request deletion of your data where applicable.
To exercise any of these rights, write to the address in section 9. If your data was uploaded by a customer company, we forward the request to that company, which is the controller.
8. Security
Access to Samán requires authentication. Communications with the platform and with the services listed above are encrypted in transit (HTTPS/TLS). Database access is restricted to the Samantech team and to the application's own services.
9. Contact
Samán is a service of AGMO S.A.S., a Colombian company trading under the name Samantech, tax ID (NIT) 900.474.780-5.
For personal data requests, questions about this policy, or to report a privacy concern:
- Email: esteban@samantech.com.co
- Website: samantech.com.co
- Location: Colombia
10. 2026 study on credit and receivables
This section applies only to the study we run over WhatsApp with finance professionals at companies in Latin America (the samantech.com.co/encuesta2026 page). It stands apart from the rest of this policy: no customer company is involved.
Who is responsible for the data. For the study, the controller is AGMO S.A.S. (Samantech), NIT 900.474.780-5. Contact: esteban@samantech.com.co.
What we collect
Your WhatsApp number; the name, company and job title you give us; and your answers, as text or voice notes. Voice notes are transcribed to text.
If you reach the study page from LinkedIn, the page uses LinkedIn's Insight Tag to measure how many people tap the button to take part.
What we use it for
- To produce a benchmark report with aggregated, anonymous results.
- To send you your copy of the report.
- If you allow it at the end of the conversation, to contact you for a follow-up conversation.
Who we share it with
| Service | Purpose | Location |
|---|---|---|
| Meta / WhatsApp Business Platform | Sending and receiving the study's messages | USA |
| Anthropic (Claude) | Processing the chat with the assistant | USA |
| VOICE_TRANSCRIPTION_VENDOR | Transcribing voice notes | USA |
Because these services are outside Colombia, taking part involves an international transfer of your data. Your individual answers are not shared with anyone; we only publish aggregated results, from which no person or company can be identified.
How long we keep it
We keep individual answers for up to 12 months after the study closes and then delete them. Aggregated results are kept indefinitely.
Your rights
You can access, correct and delete your data, and withdraw the consent you gave us, by writing to esteban@samantech.com.co with the subject “Estudio 2026”. This is free, and we reply within 15 business days.
Participants outside Colombia
If you take part from Mexico, Chile, Peru, Argentina or Central America, you can exercise the same rights in the same way, in addition to any your own country's law grants you.
11. Changes to this policy
If we change this policy, we update the date in the header and publish the new version at this same address. Substantive changes — adding a new sub-processor, for example — are also communicated to customer companies.
This is an English translation of the Spanish original, provided for convenience. In case of discrepancy, the Spanish version prevails.