Privacy Policy

ZapiA is a service operated by Christian Fuentes Valenzuela (a natural person registered for software services), domiciled in Santiago, Chile. Contact: hola@zapia.cl.

This policy explains which personal data we process when you use the ZapiA platform (the “Service”), whether you are a contracting customer or an end customer who talks to an AI agent of one of our customers via WhatsApp.

• Account data of the contracting customer (email, business name, settings): ZapiA acts as the data controller.
• Data of end customers who write to a WhatsApp number connected to ZapiA (message content, phone number, contact name, profiling): ZapiA acts as data processor on behalf of the contracting business, which is the controller.

From the contracting customer: email, hashed password (or Google OAuth identifier), business name, category, description, agent settings (tone, messages, hours), usage history, billing data where applicable.

From end customers who talk to the agent:

• WhatsApp identifier (JID, which includes the phone number).
• The contact name the end customer has published.
• The literal content of messages sent and received (text), for a limited time.
• AI-derived metadata: language, tags, recent topics and conversation summaries, generated automatically so the agent has memory and replies better.
• Timestamps of each message.

From the simulator: we store the test turns the contracting customer runs to try their agent, together with the estimated cost of the simulation. The content is generated by the customer or by the AI model: we do not take real third-party data to feed it.

Technical data: IP address, user agent, application logs, records of calls to AI models (with tokens and associated cost, without dumping additional sensitive content).

We do not seek to process sensitive data (health, ideology, sexual life, data of children and adolescents). If an end customer sends it spontaneously it will remain in the message body; the contracting customer is responsible for not actively requesting it and, if received, for handling it in accordance with the law.

• Providing the Service: receiving, classifying and replying to messages.
• Giving the agent memory for future conversations (light profiling of the end customer).
• Letting the contracting customer review the history.
• Measuring usage, costs and quality of the Service.
• Abuse detection, security and incident resolution.
• Complying with legal and accounting obligations.

We do not sell personal data or use it for third-party advertising.

We process data under Chilean Law No. 19.628 on the protection of private life, and we are preparing for Law No. 21.719, which enters into force on December 1, 2026. The applicable legal bases are:

• Performance of a contract between ZapiA and the contracting customer (operation of the Service).
• Performance of the commercial relationship between the contracting customer and their end customer (answering inquiries, booking, selling).
• Legitimate interest in improving the Service, preventing fraud and keeping it secure, without overriding the rights of the data subject.
• Compliance with legal obligations.

To provide the Service we share strictly necessary data with the following providers, which act as sub-processors:

• Supabase (self-hosted by us on our own VPS): authentication and database.
• Coolify / VPS infrastructure: application hosting.
• OpenRouter: gateway that routes calls to language models.
• AI model providers that OpenRouter routes to (Google, Anthropic, DeepSeek or equivalents).
• WhatsApp (Meta Platforms): messaging; messages in transit pass through its infrastructure.

Some of these providers may be located outside Chile (for example, the United States or the European Union). We select providers with reasonable security standards and data processing clauses.

We keep data only for as long as necessary to fulfill the purposes described:

• Account data: while the account is active and up to 12 months after it is closed.
• WhatsApp messages and summaries: by default up to 24 months from receipt. We are implementing progressive automatic deletion; before Law 21.719 enters into force this will run automatically.
• Technical and AI usage logs: up to 12 months.
• Simulator sessions: until the contracting customer deletes them or closes their account.
• Accounting data: the periods required by Chilean law (receipts, invoices, etc.).

As a data subject you may at any time exercise your rights of access, rectification, cancellation (erasure), objection, and — once Law 21.719 enters into force — portability and the right not to be subject to automated decisions with significant effects.

To exercise them, write to hola@zapia.cl describing your request. We will respond within the legal deadlines. If you are an end customer, you may also address your request directly to the business operating the WhatsApp number you contacted; we will support them as appropriate.

We apply reasonable technical and organizational measures: encryption in transit (HTTPS/TLS) and at rest provided by the infrastructure, role-based access control, logical separation between customers by workspace, strong authentication and internal audit logs. No system is 100% inviolable; in case of an incident with significant risk we will notify those affected and the authority where applicable.

ZapiA connects to WhatsApp through a technical library to integrate the contracting customer’s account with our Service. WhatsApp is a trademark of Meta Platforms, Inc., which is not affiliated with and does not endorse this Service. The contracting customer is responsible for the use of their own WhatsApp account and for complying with WhatsApp’s terms.

We use cookies and local storage that are strictly necessary to keep you signed in. We do not use advertising or third-party cookies for cross-site tracking. If this changes, we will announce it and ask for consent.

We may update this policy. The current version is the one published at this URL, with the “last updated” date above. Material changes will be communicated by email to active contracting customers.

Questions, complaints or exercise of rights: hola@zapia.cl.