Privacy Policy

1. Introduction

Atiendia ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI assistant services (collectively, the "Services"). This policy complies with the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.

By using our Services, you consent to the data practices described in this policy. If you do not agree with this policy, please do not access or use our Services.

2. Information We Collect

2.1 Personal Data

We may collect the following types of personal information:

• Contact Information: Name, email address, phone number, company name
• Account Information: Username, password (encrypted), billing information
• Communication Data: Messages, chat conversations, call recordings (with explicit consent)
• Business Information: Product catalogs, pricing, business data you provide for AI training
• Payment Information: Processed securely through our payment processor (Stripe) - we do not store complete credit card numbers

2.2 Automatically Collected Information

• Usage Data: IP address, browser type, device information, operating system, referring URLs
• Cookies and Tracking: We use cookies, web beacons, and similar technologies to enhance user experience and analyze site usage
• Analytics Data: We use Google Analytics and similar tools to understand how visitors interact with our Services

3. How We Use Your Information

We use collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our AI assistant services
• AI Training: To train and customize AI models specifically for your business (your data is not used to train models for other customers)
• Communication: To respond to inquiries, send updates, and provide customer support
• Billing: To process payments and manage subscriptions
• Analytics: To analyze usage patterns and improve our Services
• Security: To detect, prevent, and address technical issues and fraudulent activity
• Legal Compliance: To comply with legal obligations and enforce our terms
• Marketing: To send promotional communications (you can opt-out at any time)

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data based on:

• Consent: You have given explicit consent for specific purposes (e.g., recording conversations)
• Contract: Processing is necessary to fulfill our contractual obligations to you
• Legal Obligation: Processing is required by law
• Legitimate Interests: Processing is necessary for our legitimate business interests (e.g., fraud prevention, analytics) that do not override your rights

5. Data Sharing and Disclosure

We do not sell your personal data. We may share information in the following circumstances:

5.1 Service Providers

We share data with trusted third-party service providers who assist us in:

• Payment processing (Stripe)
• Cloud hosting and data storage
• Analytics (Google Analytics)
• Email delivery and marketing automation
• Customer support tools

These providers are contractually obligated to protect your data and use it only for the purposes we specify.

5.2 Business Transfers

If we undergo a merger, acquisition, or sale of assets, your information may be transferred to the acquiring entity.

5.3 Legal Requirements

We may disclose information when required by law, court order, or government regulation, or to protect our rights, property, or safety.

5.4 With Your Consent

We may share information with other parties when you provide explicit consent.

6. Data Security

We implement industry-standard security measures to protect your data:

• Encryption: Data is encrypted in transit (TLS/SSL) and at rest
• Access Controls: Limited access to personal data on a need-to-know basis
• Secure Infrastructure: Regular security audits and updates
• Data Backup: Regular backups with secure storage

However, no method of transmission or storage is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. When data is no longer needed, we securely delete or anonymize it.

• Account Data: Retained while your account is active and for a reasonable period afterward
• Conversation Data: Retained according to your subscription plan and settings
• Analytics Data: Typically retained for 26 months (Google Analytics default)
• Billing Records: Retained as required by tax and accounting regulations

8. Your Privacy Rights

8.1 GDPR Rights (EEA Users)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Limit how we process your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests or for direct marketing
• Right to Withdraw Consent: Withdraw consent at any time (does not affect prior processing)

8.2 CCPA Rights (California Users)

• Right to Know: Request disclosure of data collection and sharing practices
• Right to Delete: Request deletion of personal information
• Right to Opt-Out: Opt-out of the sale of personal data (we do not sell data)
• Right to Non-Discrimination: Exercise rights without discriminatory treatment

8.3 How to Exercise Your Rights

To exercise any of these rights, please contact us at privacy@atiendia.com. We will respond to your request within 30 days.

9. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember user preferences and settings
• Authenticate users and prevent fraud
• Analyze site traffic and usage patterns
• Deliver targeted advertising (if applicable)

Types of Cookies We Use:

• Essential Cookies: Required for site functionality
• Analytics Cookies: Help us understand how visitors use our site (Google Analytics)
• Functional Cookies: Remember your preferences
• Marketing Cookies: Used to deliver relevant ads (if applicable)

You can control cookies through your browser settings. Note that disabling cookies may affect site functionality.

10. Third-Party Services

Our Services may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies.

Key Third-Party Services:

• Google Analytics: Privacy Policy
• Stripe (Payment Processing): Privacy Policy
• Cloudflare Turnstile: Privacy Policy

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws. We ensure adequate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Adequacy decisions by relevant authorities
• Compliance with applicable data transfer regulations

12. Children's Privacy

Our Services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If we become aware that a child has provided personal data, we will take steps to delete it. If you believe a child has provided information, please contact us immediately.

13. Voice and Call Recording

When using our voice-enabled AI assistants, we may record calls and conversations. Recording only occurs with explicit consent from participants. Recordings are used to:

• Improve AI accuracy and performance
• Provide quality assurance
• Train and customize AI models for your business
• Comply with legal and regulatory requirements

You can request access to or deletion of recordings by contacting us.

14. AI and Automated Decision-Making

Our AI assistants may make automated decisions (e.g., responding to customer inquiries, routing conversations). You have the right to:

• Request human review of automated decisions
• Express your point of view regarding automated decisions
• Contest decisions made solely by automated processing

15. Data Protection Officer

For questions about data protection and privacy, you can contact our Data Protection Officer at:

Email: dpo@atiendia.com
Address: Atiendia, Data Protection Officer, [Your Company Address]

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by:

• Posting the updated policy on this page with a new "Last Updated" date
• Sending email notifications to registered users
• Displaying a prominent notice on our website

Your continued use of our Services after changes become effective constitutes acceptance of the updated policy.

17. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: