Indigenous Enterprises Foundation
Legal

Privacy Policy

Last updated: June 2026

Fundación Empresas Indígenas ("FEI", "we") respects your privacy and is committed to protecting the personal data you entrust to us. This policy describes what data we collect, why, how we use it, and your rights, in compliance with Chilean Law 19.628 on Privacy Protection, Law 21.719 (fully in effect from December 1, 2026), ILO Convention 169, and the UN Declaration on the Rights of Indigenous Peoples.

1. Data Controller

The data controller for your personal data is Fundación Empresas Indígenas, a private-law legal entity domiciled in Chile. For any query related to this policy, please contact us at:

  • Email: proyectos.ia@empresasindigenas.org
  • Website: empresasi.org

2. Data We Collect

We collect only the data strictly necessary to provide our services. Depending on the interaction channel, this may include:

  • Contact / lead form: name, contact method (email or phone), indigenous people (optional), origin flow.
  • Business registration: name, RUT (tax ID), business type, region, email, phone, website or social media, service photos, indigenous people of the business or its owner.
  • AI chat: the content of messages you send during the conversation.
  • Technical data: partially anonymised IP address (last octets are removed before storage), browser type, date and time of request.

3. Sensitive Data: Indigenous People

Data about belonging to an indigenous people is sensitive data under Article 2 of Law 19.628 and Article 16 of Law 21.719, as it relates to ethnic origin. Its processing is governed by the principles of the UN Declaration on the Rights of Indigenous Peoples and ILO Convention 169.

This data is always voluntary. We use it exclusively to: (a) personalise the assistance provided by our AI; (b) produce aggregated and anonymised statistics to measure the impact of our programmes on the indigenous business ecosystem; and (c) list your business in the Indigenous Directory, if you have expressly opted in to publishing it.

We will never share this data with third parties for commercial, advertising, or discriminatory purposes.

4. Purpose of Processing

We process your data for the following purposes:

  • Provide the AI-assisted advisory service (consultancy chat).
  • Handle your request for information, formalisation, or certification.
  • List your business in the Indigenous Directory (only if you explicitly authorised it).
  • Send communications about programmes, events, or resources relevant to your business (only if you authorised it).
  • Produce impact statistics for the indigenous business ecosystem (anonymised data).
  • Comply with legal obligations and prevent abusive use of the service.

5. Legal Basis for Processing

The processing of your data is based on the following legal grounds:

  • Consent: for sending communications, directory publication, and processing of sensitive ethnic-origin data.
  • Performance of a contract or pre-contractual steps: to manage your registration and provide the requested services.
  • Legitimate interest: for service security, abuse prevention, and production of anonymised impact statistics.
  • Legal obligation: to retain records required by applicable regulations.

6. Retention Periods

We retain your data for as long as necessary to fulfil the purposes described, not exceeding the following indicative periods:

  • Contact and business registration data: while the registration is active and up to 3 years after deactivation.
  • AI chat conversations: 90 days from the session, unless you request earlier deletion.
  • Technical data (anonymised IP, logs): 30 days.
  • Accounting or legally required records: according to applicable tax and civil regulations (generally 6 years).

7. Processors and Third Parties

To provide the service we work with the following data processors, who act under our instructions and under appropriate contractual safeguards:

  • Microsoft Azure (infrastructure): application and database hosting in the Chile/Latin America region.
  • Anthropic (AI API): processing of chat messages to generate responses. Anthropic does not use your data to train models without explicit consent under its API terms.
  • Azure OpenAI (embeddings): generation of semantic vectors for the information retrieval system (RAG). Conversations are not stored in this service.

We do not sell or transfer your personal data to third parties for commercial or advertising purposes.

8. Artificial Intelligence

The platform's advisory chat uses Anthropic's language model (Claude) to generate responses. AI responses are for guidance only and do not constitute professional legal, tax, or financial advice. FEI is not liable for decisions made solely on the basis of chat responses.

To improve service quality, we may review conversations in anonymised form. We will never associate a conversation with your identity without your consent.

9. International Transfers

Some of our processors (Anthropic, Microsoft) operate on servers located outside Chile, primarily in the United States. These transfers are carried out under standard contractual clauses and with the safeguards required by Law 19.628 and the forthcoming Law 21.719.

10. Your Rights

In accordance with Laws 19.628 and 21.719, you have the following rights over your personal data:

  • Access: to know what data we hold about you and how we process it.
  • Rectification: to correct inaccurate or incomplete data.
  • Erasure: to request deletion of your data when it is no longer necessary.
  • Objection: to object to processing based on legitimate interest.
  • Portability: to receive your data in a structured, readable format (Law 21.719).
  • Withdrawal of consent: to withdraw your consent at any time without affecting the lawfulness of prior processing.

To exercise your rights, write to us at proyectos.ia@empresasindigenas.org stating your name, the action requested, and, if possible, the email you registered with. We will respond within a maximum of 30 days.

11. Cookies

We use only strictly necessary cookies for platform operation (authenticated session management). We do not use tracking cookies, behavioural advertising, or third-party analytics tools. See our Cookie Policy for details.

12. Amendments

We may update this policy to reflect changes in our practice or applicable law. When changes are significant, we will notify you via a prominent notice on the site or by email. The date of the last update will always be indicated at the top of this document.

13. Contact

If you have questions, concerns, or wish to exercise your rights, contact us at proyectos.ia@empresasindigenas.org. You may also lodge a complaint with the Council for Transparency or the competent data protection authority in Chile.