The controller responsible for processing your data is David Sáenz, an independent developer (natural person), reachable at:

• Email: contact@davidsaenz.dev
• Website: https://www.davidsaenz.dev

When you interact with the WhatsApp assistant, the following personal data is processed:

• Your WhatsApp phone number.
• Your WhatsApp profile name.
• The content of the messages you send to the assistant.

When you browse the website, a local language preference is stored in your browser (functional local storage). The site does not use tracking cookies or advertising analytics tools.

We do not deliberately request or process sensitive data (health, beliefs, etc.), payment data, or identity documents. Please do not share such information through the chat.

We process your data for the following purposes:

• To operate the WhatsApp assistant and answer your questions about the services offered.
• To keep conversation context for a limited time so responses are coherent.
• To handle your contact interest when you express a wish to hire a service.

Legal bases (under the EU General Data Protection Regulation — GDPR): (a) your consent, given when you voluntarily start a conversation with the assistant; and (b) the legitimate interest of responding to business contact requests. In Colombia, processing is carried out with your prior authorization as the data subject (Law 1581 of 2012).

You may withdraw your consent at any time (see “Your rights”); this does not affect the lawfulness of prior processing.

Conversation history is stored temporarily to give context to responses and is automatically deleted after 24 hours (via a time-to-live —TTL— configured in the database). After that period, the history is erased automatically.

We do not keep a permanent record of conversations. Message delivery through WhatsApp is also governed by Meta Platforms' policies.

To operate the Service we rely on technology providers acting as data processors. Each one accesses only the data needed for its function:

• Meta Platforms, Inc. (WhatsApp Business Platform): delivery and processing of WhatsApp messages.
• An artificial intelligence provider (language model): processes message content to generate the assistant's responses.
• Upstash, Inc.: temporary storage of conversation history.
• Vercel Inc.: hosting of the website and the assistant's logic.

We do not sell, rent, or transfer your personal data to third parties for commercial or advertising purposes.

Some of our providers process data on servers located outside your country of residence, including the United States and other jurisdictions. By using the Service, you understand that your data may be transferred to and processed in those countries.

We aim to work with providers that offer adequate data-protection safeguards under applicable law (for example, standard contractual clauses or other recognized mechanisms).

If you are in the EU/EEA, you have the right to:

• Access: know what data we process about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure (“right to be forgotten”): request that we delete your data.
• Portability: receive your data in a structured, commonly used format.
• Objection: object to processing based on legitimate interest.
• Restriction: request that we restrict processing in certain cases.
• Withdraw consent at any time.

You also have the right to lodge a complaint with the data-protection supervisory authority in your country.

If you reside in California, you have the right to:

• Know what categories of personal data we collect and why.
• Request deletion of your personal data.
• Request correction of inaccurate data.
• Opt out of the “sale” or “sharing” of personal data.
• Not be discriminated against for exercising your rights.

We do not sell or share your personal data for valuable consideration, as those terms are defined under the CCPA/CPRA.

As the data subject, Colombian law grants you the right to:

• Know, update, and rectify your personal data.
• Request proof of the authorization granted for processing.
• Be informed about how your data is used.
• File complaints with the Superintendency of Industry and Commerce (SIC) for violations of the law.
• Revoke the authorization and/or request deletion of the data where applicable.
• Access your personal data free of charge.

Your data is processed with prior authorization, for the purpose stated in this policy. The supervisory authority in Colombia is the Superintendency of Industry and Commerce (SIC).

To exercise any of the rights above, write to contact@davidsaenz.dev stating your request and a way to verify your identity (for example, the WhatsApp number you messaged from). We will handle your request within the timeframes required by applicable law.

We apply reasonable technical and organizational measures to protect your data, such as webhook signature validation (HMAC), encryption in transit (HTTPS/TLS), and restricted system access. No transmission over the Internet or storage method is 100% secure, so we cannot guarantee absolute security.

This site does not use tracking, profiling, or advertising analytics cookies. We only use the browser's local storage (localStorage) to remember your language preference; this is a technical function that does not identify the person and is not shared with third parties.

The WhatsApp application is governed by Meta Platforms' own privacy policy, which is outside our control.

The Service is intended for adults. We do not knowingly collect data from minors. If you believe a minor has provided us with personal data, write to contact@davidsaenz.dev and we will delete it.

We may update this Privacy Policy to reflect changes to the Service or to the law. We will publish the current version on this page, with its last-updated date. We recommend reviewing it periodically.

If you have questions about this policy or about how your data is processed, contact us at contact@davidsaenz.dev.