Privacy policy

This policy describes how conext (conext.lat) handles data when you use the site, sign up, or connect your WhatsApp Business to the CRM. If you do not agree, do not use the service.

The controller is conext. For any question:contact@conext.lat.

Who this covers

There are three distinct situations, and the data is not mixed:

• CRM customers: the business that signs up and connects its WhatsApp Business number.
• Whoever connects WhatsApp with Facebook Login: the person who authorizes conext to access the business WhatsApp Business account, in Meta’s flow.
• The business’s contacts: people who write to a customer’s WhatsApp. Those messages are processed by the business; we host them to provide the CRM.

What data we process

Depending on how you use conext, we may process:

• Business account: name, internal identifiers, a contact email if you give us one, and the access key (stored hashed, not in plaintext).
• WhatsApp Business: account and number identifiers (WABA ID, phone number ID), verified name, display number, and the access token. The token is encrypted before it is stored.
• Conversations: the contact’s phone number, the name WhatsApp reports, message text, delivery status, internal notes, tags, assignment to a team member, and reply drafts.
• Files you send: images, audio, video, or documents you send from the CRM. They stay on our servers so the thread can be viewed later; Meta deletes its copy after 30 days.
• Catalog and operations: products, prices, stock, hours, welcome and after-hours messages, and agent instructions.
• Dashboard use: in the browser we store local preferences (for example light or dark theme and recent emojis). The public site does not use advertising cookies or tracking pixels.

Today the WhatsApp webhook processes text messages. If a contact sends a file, that event is recorded as received and the content is not downloaded.

What we use it for

• Providing the CRM: receiving, displaying, classifying, and sending messages through the official WhatsApp API.
• Drafting replies with AI (classifying the message, choosing an agent, and writing a draft or an auto-send, according to your settings).
• Showing you day metrics, stock, and conversation status.
• Keeping the service running, debugging errors, and complying with the law.

We do not sell data. We do not use it for third-party ads.

Who it is shared with

Only what is needed for the product to work:

• Meta (WhatsApp Cloud API): sending and receiving messages goes through Meta. So does the flow to connect the number (Facebook Login for Business / Embedded Signup). Meta processes that data underits policyand the WhatsApp Business terms.
• Google (Gemini): the message text and the context the agent needs (catalog, instructions, recent history) are sent to the Gemini API to classify and draft. Google processes them as a processor of that work, underits policy.
• Infrastructure: hosting, database, and backups. Those providers may only process the data to provide us the service.

One customer cannot see another’s data: each business has its own space. WhatsApp credentials are encrypted at rest.

Retention

We keep the data while the account is active. If you ask us to delete it, or if you close the service, we delete it as described inData deletion. Backups may take one extra cycle to rotate.

Your rights

You can request access, correction, or deletion of the business data, and object to processing that is not necessary for the contract. Write tocontact@conext.lat. If you are in Argentina, you can also go to the Agency for Access to Public Information under Law 25.326.

If you are a person who wrote to the WhatsApp of a business that uses conext, ask that business first to delete or correct your data. If you get no reply, write us and we will help identify the account.

Minors

conext is meant for businesses, not for anyone under 18. We do not knowingly collect data from minors.

Changes

If this policy changes in a material way, we update the date above and, when the change warrants it, we notify by email or inside the dashboard. Continued use after that date means you accept the new version.