Privacy
Policy
01 — Scope
This Privacy Policy describes how IAssistance collects, processes, and protects personal data in connection with the operation of its conversational infrastructure platform.
This policy applies to platform users — businesses, agencies, and technical operators who access IAssistance through authenticated accounts. It does not directly govern the processing of end-user data by clients operating the platform for their own customers. Clients are independently responsible for their own data protection obligations toward their end users.
02 — Data we collect
Account data. Information provided at registration, including name, email address, and authentication credentials. This data is used to manage access to the platform.
Operational data. Data generated during platform use, including conversation threads, execution logs, system events, timestamps, and configuration parameters. This data is necessary for the operation and monitoring of the service.
Messaging data. Content processed through the conversational runtime, including messages exchanged between end users and client-operated systems via supported messaging channels. This data is processed on behalf of clients and is not used for any purpose other than service delivery.
Technical data. IP addresses, device identifiers, browser information, and access logs collected automatically during platform interaction.
03 — Legal basis for processing
Processing is carried out under Argentine Law 25.326 on Personal Data Protection. The legal bases for processing include:
- —Contractual necessity — processing required to provide the service under agreement with the client.
- —Legitimate interest — processing necessary for platform security, fraud prevention, and service improvement.
- —Legal obligation — processing required to comply with applicable regulations.
04 — Data sharing and third parties
IAssistance does not sell personal data. Data may be shared with third parties only in the following circumstances:
- —Infrastructure providers — hosting, database, and cloud service providers necessary for platform operation, including Supabase and Railway.
- —Messaging platform providers — Meta Platforms, Inc. and its services (WhatsApp, Instagram, Messenger), through which message delivery occurs.
- —AI service providers — OpenAI, for processing conversational inputs as part of the runtime execution layer.
- —Legal requirements — when disclosure is required by law or regulatory authority.
05 — Messaging platform data
The platform integrates with Meta messaging services. Data obtained through these integrations is processed solely for the purpose of delivering the conversational infrastructure service. It is not used for advertising, profiling, or any purpose beyond service operation.
Use of Meta platform data is subject to Meta's Platform Terms and applicable data use policies. IAssistance processes this data as a technical service provider acting on behalf of clients who have obtained the necessary authorizations from their end users.
06 — Data retention
Account data is retained for the duration of the client relationship and for a reasonable period thereafter as required by applicable law.
Operational and messaging data is retained for as long as necessary to provide the service and for audit or legal compliance purposes. Clients may request deletion of their data subject to applicable legal retention obligations.
07 — Security
IAssistance implements technical and organizational measures to protect personal data against unauthorized access, loss, or disclosure. These include access controls, encrypted communications, and isolated per-client data structures.
No system is entirely secure. In the event of a data breach affecting personal data, affected parties will be notified in accordance with applicable law.
08 — Your rights
Under Argentine Law 25.326, data subjects have the right to access, rectify, and delete their personal data. To exercise these rights, contact us at the address below.
Requests will be processed within the timeframes established by applicable law.
09 — Governing law
This policy is governed by the laws of the Argentine Republic, in particular Law 25.326 on Personal Data Protection and its regulatory decrees. The competent authority for data protection matters in Argentina is the Agencia de Acceso a la Información Pública (AAIP).
10 — Contact
For questions, data access requests, or privacy concerns, contact us at [email protected]