Personal Data Privacy Policy

Legal Name: LOPEZSOFT SAS
Tax ID (NIT): 901.091.403-2
Headquarters: Dosquebradas, Risaralda - Colombia
Contact Email: soporte@matias.com.co
Customer Support: (57) 300 104 0493 / WhatsApp: (57) 310 843 5431
Websites: maticerts.com / app.maticerts.com

For biometric issuance requests, and to meet the DIAN and ONAC standards applicable to that issuance type, MATICERTS processes facial biometric data (dynamic liveness detection) and national ID scans powered by MetaMap. No biometric data is collected for document-based issuance.

Data Subject Guarantees: The data subject is not required to authorize the processing of sensitive data. Such authorization is a technical and legal prerequisite only for biometric issuance; a data subject who does not grant it may obtain their certificate through document-based issuance, which requires no biometric data, provided the account filing the request has that issuance type enabled. Biometric data is encrypted in transit and at rest on high-security AWS servers and is never sold, shared with unauthorized third parties, or used for purposes other than those described herein.

Data subjects hold the rights established in Article 8 of Law 1581 of 2012, including:

• Access: Access personal data free of charge.
• Rectification: Request correction of inaccurate or incomplete records.
• Erasure: Request data deletion when statutory principles are breached (subject to digital certificate audit retention laws).
• Revocation: Revoke consent for future processing.

To submit inquiries, claims, or requests for updating or deletion, the data subject may send a formal communication to:

Inquiries will be answered within a maximum of ten (10) business days and claims within fifteen (15) business days, pursuant to Articles 14 and 15 of Law 1581 of 2012.

The MATICERTS mobile app lets you request, track and download digital signature certificates from your phone. It is intended for businesses and for people aged 18 or over, and it is governed by this same policy, with the following particulars:

• Data the app processes: your user account data (name, email and an optional profile photo), your company data, the certificate requests and supporting documents you attach, and your purchase order history. This is the same data processed on the web platform, for the purposes in sections 2 and 3.
• Camera and photos: the app uses the camera or the gallery only when you choose to take or pick a photo of a document to attach to a request, or your profile photo. It does not access your photos in the background.
• Fingerprint or face unlock: it is optional and is verified only by your phone's operating system. The app does not receive, send or store your biometric data.
• Session: the session token is stored encrypted in the device's secure storage.
• No tracking or advertising: the app uses no advertising identifiers, does not access your location, contains no ads and shares no data with advertising networks.
• Payments: orders are paid on the Wompi payment gateway page that the app opens. MATICERTS does not receive or store card numbers, security codes or bank credentials; it only keeps the transaction reference, status, amount and date.
• Certificate download: the certificate file (.p12) and its PIN are shown on a screen protected against screenshots, and a copied PIN is cleared from the clipboard after one minute. The certificate is used outside the app, in the user's invoicing or signing software.
• Document-based issuance: for this issuance type you attach the supporting documents from the app (identity document and, for legal entities, the RUT and the certificate of existence and legal representation), which MATICERTS transmits to the certification authority so it can verify the holder's identity. No biometric data is collected and no verification link is generated (see section 2).
• Identity verification in biometric issuance: when the issuance type requires it, biometric verification takes place on the certification authority's and its verification partner's page (Viafirma and MetaMap), which opens in the phone's browser, outside the app (see section 3).

You can delete your user account at any time, without needing a formal request:

• From the mobile app: Profile → Delete account, confirming with your current password. Deletion is immediate and cannot be undone.
• By email: if you do not have the app, cannot sign in, or your account is an administrator account, write to soporte@matias.com.co from the email you registered with. The request is handled within fifteen (15) business days at most.

Deleting the account closes all your sessions, anonymizes your name and email, removes your profile photo and deactivates the account. To meet legal obligations, the following are retained with restricted access: orders, payments and electronic invoices (up to ten years), certificate requests with their documents and verification results while the certificate is valid and for the applicable legal periods, and security and audit logs without your name or email. Once those periods end, the information is permanently deleted or anonymized.

The full steps, and the detail of what is deleted and what is kept, are on the Delete your MATICERTS account page.