ES | EN | PT

Privacy Policy

Last updated: February 13, 2026

1. Introduction

Okostec SpA ("Okostec", "we", "our"), based in Santiago, Chile, operates a business technology platform that includes messaging services through the WhatsApp Business API, artificial intelligence, and workflow automation ("the Platform"). This Privacy Policy describes how we collect, use, store, and protect your personal information when you use our services.

By using the Platform, you agree to the practices described in this policy. If you do not agree, please do not use our services.

2. Data We Collect

2.1 Information you provide

  • Registration data: name, email, phone number, company name
  • Account credentials and service configuration
  • Billing information and payment data
  • Communications with our support team

2.2 Information collected automatically

  • IP address, browser type, operating system
  • Pages visited, time spent, browsing patterns
  • Device information and unique identifiers
  • Platform usage logs

2.3 Messaging data (WhatsApp Business API)

  • Messages sent and received through the Platform
  • Phone numbers of conversation participants
  • Message delivery status (sent, delivered, read)
  • Media content shared in conversations

3. How We Use Your Data

  • Service delivery: Operate the Platform, process messages, execute automated workflows
  • AI processing: Generate automated responses, classify inquiries, extract relevant information from conversations
  • Service improvement: Analyze usage patterns to improve functionality and performance
  • Communications: Send service notifications, updates, and technical support
  • Legal compliance: Comply with applicable legal and regulatory obligations
  • Security: Detect, prevent, and respond to fraudulent or unauthorized activities

4. WhatsApp Business API

Our Platform uses the WhatsApp Business API provided by Meta Platforms, Inc. When using WhatsApp messaging features:

  • Meta acts as a data sub-processor for message delivery
  • Messages sent through the Cloud API are temporarily stored by Meta and automatically deleted after 30 days
  • Meta does not use message content for advertising purposes
  • The WhatsApp Business Terms of Service and WhatsApp Privacy Policy apply

5. Third-Party Services

We use the following service providers that may process your data:

  • Meta Platforms (WhatsApp): Message delivery and communication API
  • Cloud hosting providers: Data storage and processing
  • Artificial intelligence providers: Natural language processing and response generation
  • Payment processors: Secure financial transaction management
  • Analytics services: Platform performance and usage measurement

All our providers are contractually required to protect your data and to process it only according to our instructions.

6. Data Security

We implement technical and organizational measures to protect your information, including:

  • Data encryption in transit (TLS/SSL) and at rest
  • Secure authentication and role-based access control
  • Per-tenant data isolation (multi-tenant architecture)
  • Continuous security monitoring and threat detection
  • Regular backups and disaster recovery plans

7. Your Rights

In accordance with Chilean law (Law 19,628 on the Protection of Private Life) and applicable international regulations (including GDPR for EU users), you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate or incomplete data
  • Deletion: Request the deletion of your personal data
  • Portability: Receive your data in a structured, transferable format
  • Objection: Object to the processing of your data in certain circumstances
  • Withdraw consent: Withdraw your consent at any time

To exercise these rights, contact us at [email protected].

8. Data Retention

  • Account data is retained while your account is active
  • Messaging records are retained for the period necessary for service delivery, unless you request deletion
  • Billing data is retained according to applicable legal and tax requirements
  • Upon account termination, all customer data is permanently deleted unless otherwise required by law

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Keep your user session active
  • Remember your preferences
  • Analyze Platform usage

You can configure your browser to reject cookies, although some Platform features may not function properly.

10. Children's Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal information from minors. If we discover that we have collected data from a minor, we will delete it immediately.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any significant changes through the Platform or by email. The last updated date will be indicated at the beginning of this document.

12. Contact

If you have questions or requests related to this Privacy Policy, contact us: