Privacy Policy

The controller of the personal data collected through Sabant Law (the "Platform" or the "Service") is Sebastian Diaz, a Dominican natural person, holder of national identity and electoral card / RNC No. 40213090869, domiciled in Pontezuela, Santiago de los Caballeros, Dominican Republic ("Sabant Law", "we"). This Privacy Policy describes how we collect, use, retain and protect your personal data in accordance with Law No. 172-13 on the Protection of Personal Data of the Dominican Republic.

This Policy applies to the personal data of the account holders and users of the Service (the "Client" or "Broker" and the users of its Group), with respect to which Sabant Law acts as data controller.

It does not apply to the personal data of insured persons and third parties that the Client uploads to the Platform (the "Client Content"). With respect to such data, the Client acts as the controller and Sabant Law solely as the data processor, in accordance with the Data Processing Agreement (DPA) available at sabantlaw.com.

• Account data:name, email address, password (stored in encrypted form) and organization (Group) data that you provide upon registration.
• Usage and technical data:information about how you use the Service, including activity logs, IP address, device type and browser, generated automatically when accessing the Platform.
• Payment data:payments are processed by Paddle as Merchant of Record. Sabant Law does not collect or store the full details of your card or payment method; it only receives from Paddle the information necessary to manage your subscription.

We process your personal data for the following purposes:

• to provide, operate and maintain the Service;
• to authenticate your access and protect the security of your Account and your Group;
• to manage the subscription, invoicing and collection through Paddle;
• to provide support and communicate with you about the Service;
• to improve and develop the Service by means of aggregated and anonymized statistical data;
• to comply with legal obligations and respond to requests from a competent authority.

The processing is based, as applicable, on the performance of the contract that you enter into by accepting the Terms and Conditions, on your consent, on the legitimate interest in operating and securing the Service, and on compliance with legal obligations in accordance with Law No. 172-13.

In order to provide the Service we share data with providers that act as processors or sub-processors, subject to equivalent confidentiality and data protection obligations:

• Paddle.com Market Limited —payment processing and invoicing (Merchant of Record).
• Cloud infrastructure provider —hosting and storage of the Service.

We do not sell your personal data nor transfer it to third parties for advertising purposes.

We retain your personal data for as long as your Account remains active. After the termination of the subscription, we will make your data available for export for a period of 30 days, after which it may be permanently deleted, unless a legal obligation requires its retention for a longer period.

We apply technical and organizational measures that are reasonable and appropriate to the risk, which may include the encryption of data in transit and at rest, role-based access control, the logical isolation of Groups, activity logging and the performance of backups. No security measure is infallible; you are responsible for maintaining the confidentiality of your credentials.

You may exercise your rights of access, rectification, updating, deletion and objection with respect to your personal data, as well as revoke the consent granted, by writing to law@sabant.com. We will respond to your request within the periods provided for by Law No. 172-13.

The Service uses local and session storage in your browser to keep your session signed in and to remember your preferences (for example, language and theme). We do not use advertising cookies or third-party tracking cookies for commercial purposes.

Your personal data may be processed or stored outside the Dominican Republic by us or by our sub-processors (for example, in cloud infrastructure located abroad), always adopting adequate safeguards in accordance with the applicable regulations.

The Service is aimed at insurance brokerage professionals and not at minors. We do not intentionally collect the personal data of minors.

We may update this Privacy Policy. Substantial modifications will be notified by reasonable means (email or notice within the Platform) with at least 15 days' notice. Continued use of the Service after they take effect implies acceptance of the updated Policy.

For any inquiry regarding this Privacy Policy or the processing of your personal data:

• Sabant Law
• Email:law@sabant.com
• Site:sabantlaw.com