Privacy policy.

1. Who the controller is

Advantz Innovations LLC (EIN 32-0801558), a limited liability company incorporated in New Mexico, United States, operating from Colombia, is the controller of the personal data collected through advantz.cloud, the app.advantz.cloud application (hereinafter, the Service or Advantz Agent) and the support channels.

For any matter related to this policy or your data, write to info@advantz.cloud.

2. What data we process

We process three groups of data, each with different purposes and responsibilities:

• Your account data: name, email, phone or WhatsApp number, business name and country, billing details (payments are processed by Stripe or dLocal; we never store your full card number).
• Service usage data: your agents' configuration, activity logs, dashboard metrics, IP address, browser and device, cookies (see the cookie policy).
• Data of your business's customers: the WhatsApp numbers, names and content of the conversations your customers have with your agent, together with the information the agent records in your CRM (stage, appointments, sales).

With respect to the data of your business's customers, you are the controller and Advantz acts as a processor: we process it only to provide the Service to you and following your instructions. It is your obligation to inform your customers and to have a legal basis for processing their data (see section 9).

3. What we use it for

• Providing the Service: operating your agents, sending and receiving WhatsApp messages, scheduling, recording in the CRM and displaying analytics.
• Managing your account, the free trial, payments and invoicing.
• Providing support and onboarding, via WhatsApp, email or video call.
• Improving the Service: measuring usage, fixing errors, training your own agents' configurations with your conversations (never to train third-party models).
• Sending you communications about the Service (changes, incidents, invoices) and, if you agree, the newsletter and commercial updates. You can unsubscribe at any time.
• Complying with legal obligations and responding to requests from authorities.

4. Legal basis

Advantz complies with Law 1581 of 2012 and Decree 1377 of 2013 of Colombia (personal data protection and Habeas Data regime). When the customer or its users are in the European Union, we also apply the General Data Protection Regulation (GDPR), and when they are in the United States, the applicable state laws.

We process your account and usage data because it is necessary for the contract you accept when you sign up, for our legitimate interest in operating and improving the Service, or with your consent where the law requires it (for example, for commercial communications). We process the data of your business's customers on your behalf.

5. Use of artificial intelligence

Advantz agents use language models from third-party providers to understand and write messages. Each message the agent processes is sent to the model provider together with the necessary conversation context and your agent's configuration. Those providers are contractually bound not to use your data to train their models.

The agent's responses are automated. You define its instructions and when it hands off to a person; Advantz recommends that you periodically review the conversations from the dashboard.

6. Who we share data with (subprocessors)

We do not sell personal data. We share data only with the providers needed to deliver the Service, each under contract and limited to its function:

If we change or add a subprocessor that processes the data of your business's customers, we update this list and, when the change is material, notify you by email in advance.

We may also disclose data when required by law or a competent authority, or to protect the rights, safety or property of Advantz, its customers or third parties.

7. International transfers

Our providers operate in the United States and other countries. When data leaves Colombia or the European Economic Area, it does so with the safeguards required by applicable law: countries with an adequate level of protection, standard contractual clauses or equivalent mechanisms, and always with encryption in transit.

8. How long we keep it

• Your account data: while the account is active and, afterwards, for as long as needed to meet legal obligations (accounting and tax).
• Conversations and data of your business's customers: while your account is active. When you cancel, they are kept for 30 days so you can export them and are then permanently deleted, unless the law requires keeping them longer.
• Technical and security logs: up to 12 months.
• Newsletter data: until you unsubscribe.

9. Your obligations regarding your customers' data

When you use the Service to talk to your customers, you are the controller of their data. You agree to:

• Have the consent or legal basis needed for your customers to receive messages from your business via WhatsApp, in accordance with the law of your country and WhatsApp Business policies.
• Inform them that they are talking to an automated agent when the law requires it, and how to reach a person.
• Send broadcasts only to contacts who have agreed to receive them, with the option to unsubscribe.
• Not use the Service to process sensitive data (health, sexual orientation, beliefs, biometric data) without the additional safeguards required by law, nor data of minors without authorization from their legal representatives.

Advantz makes available to you a data processing agreement that details these responsibilities; request it by email.

10. Security

Data is encrypted in transit (TLS) and stored encrypted at rest with our providers. Access to production data is limited to the team members who need it, with two-factor authentication. WhatsApp messages are encrypted between your customers and Meta's platform; once they reach the Service so the agent can process them, they are no longer end-to-end encrypted, as with any solution based on the official WhatsApp API.

If we detect a security incident affecting your data or your customers' data, we will notify you without undue delay and, where the law requires it, also the data protection authority.

11. Your rights

As the data subject, you can access, update, correct and delete your data, request proof of consent, withdraw it, object to certain processing, request the portability of your data and file a complaint with Colombia's Superintendence of Industry and Commerce (Superintendencia de Industria y Comercio) or with the authority in your country.

To exercise them, write to info@advantz.cloud from your account email, stating which right you are exercising. We respond to inquiries within a maximum of 10 business days and to complaints within 15 business days, as set by Law 1581; if we need more time, we will tell you and give you the new date.

If you are a customer of a business that uses Advantz and want to exercise your rights over a conversation, contact that business first, as it is the controller; if you do not receive a response, write to us and we will forward your request to it.

12. Minors

The Service is intended for businesses and for people aged 18 or older. We do not knowingly collect data from minors; if you believe a minor has provided us with data, write to us and we will delete it.

13. Changes to this policy

We may update this policy when the Service or the law changes. We will publish the new version on this page with its date and, if the change materially affects how we process your data, notify you by email before it takes effect.

14. Contact

• Advantz Innovations LLC · EIN 32-0801558 · a limited liability company incorporated in New Mexico, United States
• Address: 407 Lincoln Road #708, Miami Beach, FL 33139, United States
• Email: info@advantz.cloud
• Billing and administrative email: advantzllc@gmail.com
• WhatsApp: +1 786 796 1312
• Website: advantz.cloud

This English version is a translation; if it conflicts with the Spanish version, the Spanish version prevails.