Privacy Policy

Last updated: November 6, 2026

This policy explains how ARROW GROUP, S. R. L., through its HIMASYN brand, processes personal data on the himasyn.com website and on the HIMASYN platform: the ERP and all its modules, including Conecta for WhatsApp, Messenger and Instagram.

1. Who is responsible

• Company: ARROW GROUP, S. R. L., owner of the HIMASYN brand.
• Tax ID (RNC): 133688362
• Address: Calle Paseo de los Locutores #23, Plaza Las Américas, Piantini, Distrito Nacional, Dominican Republic
• Privacy email: privacidad@himasyn.com

2. Our role depending on the data

• Website visitors and people who request a demo: ARROW GROUP is the controller of that data.
• Data each client company stores in HIMASYN (its customers, sales, employees and messages): the client company is the controller and ARROW GROUP is the processor that processes it on the client's behalf, following its instructions and the service agreement.

3. Data we process

3.1 Website and demo requests

• Name, company, country, WhatsApp or phone number, email and the message you send us.
• Technical data the server logs for security: IP address, browser, date and time of the visit.

3.2 Client company account

• Users, roles and permissions.
• Activity log: who did what, and when, inside the system.

3.3 ERP, on behalf of the client company

• Customers: name, phone, email, birthday, purchase history and coupons.
• Sales, inventory and products.
• Tax data for electronic invoicing (e-CF): tax ID or national ID number, receipts and amounts.
• Accounting and suppliers.
• Human resources: employee data, payroll, attendance (including the photo and location when clocking in and out, if the company enables it), schedules and vacations.

3.4 Conecta, through Meta's platforms and on behalf of the client company

• Name and profile picture.
• WhatsApp number or Messenger and Instagram identifier.
• Message content: text, photos, voice notes and files.
• Comments on the company's posts.
• Data about the ad the person came from, when Meta provides it.

4. Why we use the data

• To provide the ERP service: invoicing, inventory control, customer and employee management, and reports.
• To issue and receive electronic tax receipts with the Dominican tax authority (DGII).
• To show and answer conversations in the Conecta inbox, and to let the AI Agent reply on behalf of the client company.
• To send the messages and campaigns the client company decides on, only to people who gave their consent, honoring opt-outs.
• To answer demo requests and contact whoever sent them.
• To provide support, keep the service secure and improve it.

5. What we do not do

• We do not sell personal data.
• We do not use client companies' data, or their customers' data, for our own advertising.
• We do not use one client company's data for another.

6. Service providers that process data for us

We work with these processors, each only for the stated purpose:

• Hostinger (United States): servers that host the platform and this website.
• Anthropic (United States): artificial intelligence model behind the AI Agent.
• Meta Platforms (United States and other countries where it operates): WhatsApp, Messenger and Instagram.
• DGII (Dominican Republic): receipt of electronic tax receipts. HIMASYN signs and submits e-CF directly; if a client company uses an e-CF signing or submission provider, that provider is also a processor.
• n8n, installed on our own servers: automations.

If we add another provider, we will list it here. Some providers process data outside the Dominican Republic, mainly in the United States; in those cases we require protections equivalent to those in this policy.

7. How long we keep data

• Client company data, for as long as its account is active.
• Tax and accounting data, for as long as Dominican law requires.
• When the service ends, we delete the data within 30 days, except data the law requires us to keep.
• Demo requests, up to 12 months after the last contact.

8. Security

All communication is encrypted over HTTPS. Each user has role-based permissions, the system keeps an activity log, and backups are made regularly.

9. Your rights

You can request access to, correction or deletion of your data, or object to its processing, under Dominican Law 172-13, by writing to privacidad@himasyn.com. If you are a customer or employee of a company that uses HIMASYN, you can also ask that company directly. To delete your data, follow the steps in Data deletion.

10. Minors

HIMASYN is a business service. This website is not directed at people under 18.

11. Changes to this policy

If we change this policy, we will publish the new version on this page with its update date.

12. Contact

ARROW GROUP, S. R. L. · Calle Paseo de los Locutores #23, Plaza Las Américas, Piantini, Distrito Nacional, Dominican Republic · +1 809-567-0540 · privacidad@himasyn.com

This document was reviewed by the in-house legal counsel of ARROW GROUP, S. R. L.