Privacy Policy

Who we are

antonIA SpA (registered name ANTONIA SPA), Chilean tax ID (RUT) 78.244.701-7, based in Santiago, Chile, provides the services described in this policy. We refer to it here as "antonIA".

For any privacy matter, you can write to g@heyantonia.com.

What this policy covers

It covers three situations:

• The messaging service. antonIA builds AI-powered conversational assistants that reply to messages on behalf of client companies (the "businesses") on Instagram, Facebook Messenger, WhatsApp and web chat.
• The dashboard. This is the platform businesses and their teams use to manage their assistant and review its conversations.
• This website, including contact by email and meeting scheduling.

Some specific services or programs have their own privacy notice. Where that is the case, that notice takes precedence.

Our role: controller and processor

When you chat with a business's assistant, that business is the controller of your data: it decides what the data is used for and is answerable to you. antonIA acts as a processor, meaning it handles the data on the business's behalf and under its instructions.

The assistant's replies are generated with artificial intelligence.

For dashboard account data, business contacts and visits to this site, antonIA is the controller.

What data we handle

Depending on the situation, we handle the following data:

• Conversation identifier: the user ID provided by the platform (Instagram or Messenger) or your phone number (WhatsApp).
• Profile name, only if the platform provides it.
• The content of your messages and their attachments, such as images, voice notes or documents you send.
• The date and time of each message.
• Information you choose to share in the conversation, such as your name, your email address or the details of your request.
• Data about client businesses and their dashboard users: name and email address.
• On this site: the details you enter when you book a meeting or write to us (typically name, email, organization and the reason for your enquiry), and technical server logs, which may include your IP address, browser type and the date and time of your visit.

We recommend not sharing more personal information over chat than your request needs.

What we use the data for

Conversation data is used to:

• Answer the questions you ask the business.
• Hand the conversation over to a person at the business when appropriate.
• Improve the replies of that same business's assistant.
• Give the business reports on its conversations and on how its assistant is performing.

Dashboard account data is used to provide access to the service and to run it. Data from this site is used to answer your enquiry, arrange the meeting you requested, and keep the site running and secure.

What we do not do

We consider this list as important as the ones above, so we state it explicitly:

• We do not sell personal data.
• We do not use conversation data for third-party advertising.
• We do not use one business's conversation data to provide services to another business.
• On this site we do not use web analytics, heatmaps, session recording or advertising pixels.
• On this site we only use technical cookies and storage, needed to remember your language and display preferences or to keep you signed in to the areas that require a login. We do not use them for tracking.

Data received from Meta platforms

When a business connects its Instagram account, its Facebook Page or its WhatsApp number to antonIA, we receive through Meta's APIs the messages people send to that business, along with the related data described above.

We use that data only to provide the messaging service to the business that connected its account. We do not share it with third parties, other than the providers listed in this policy, and we delete it on request.

How Meta uses your data within its own platforms is governed by Meta's policies.

Legal basis for processing

For conversations, the business you are talking to, as controller, determines the legal basis for processing. This is generally your consent, which you give by starting the conversation or by agreeing to receive messages, or the handling of a request you made.

In the dashboard, we process data to perform our contract with the client business. On this site, processing is based on your consent, which you give by writing to us or booking a meeting, and on our legitimate interest in running the site securely in the case of technical logs.

You may withdraw your consent at any time, without affecting the lawfulness of processing carried out beforehand.

Providers and international transfers

To provide the service we rely on the following providers, which act as sub-processors when they handle data on our behalf:

• Amazon Web Services: cloud infrastructure and AI models.
• Meta: Instagram, Facebook Messenger and WhatsApp, as messaging channels.
• Twilio: WhatsApp and SMS messages.
• A connector provider for the messaging channels, for as long as it is in use.
• Clerk: sign-in for the dashboard.
• Vercel: hosting for this site. It processes the technical access logs.
• Calendly: meeting scheduling on this site. When the widget loads on the contact page, Calendly may set its own cookies and handles data under its own privacy policy.

Data is processed in the United States, which involves an international transfer of data.

Security

We encrypt data in transit and at rest, give each person who operates the service individual access, and keep each client's data isolated.

No system is infallible. Should we detect a breach affecting your personal data, we would report it in accordance with applicable law.

How long we keep data

Conversation data is kept for as long as our relationship with the client business lasts and up to a maximum period that will be communicated to the business. It is deleted sooner if you or the business ask for it.

Contact information you give us on this site is kept for as long as it is needed to handle your request and for the duration of any commercial relationship. Technical server logs are kept according to our hosting provider's retention periods.

Your rights

Under Chilean Law No. 19,628 on the Protection of Private Life, as amended by Law No. 21,719, you have the following rights over your personal data:

• Access: to know what data about you is being processed.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to ask for your data to be deleted.
• Objection: to object to a specific processing activity.
• Portability: to receive your data in a structured, commonly used format.
• Blocking: to ask for the processing of your data to be temporarily suspended.

To exercise them, write to g@heyantonia.com stating which right you wish to exercise. If you chatted with an assistant, also tell us the account or number you wrote from and the business you were talking to. We may ask you to verify your identity before acting on the request.

We respond within the timeframes set by law and, in any case, within 30 calendar days of receiving your request.

You can also go directly to the business you chatted with, which is the controller of that data.

Minors

Our services and this site are not directed at people under 18, and we do not knowingly collect data from minors. If you believe a minor has given us data, write to us so we can delete it.

Changes to this policy

We may update this policy. When we do, we will publish the new version on this page and update the effective date. We recommend reviewing it from time to time.

This version is effective as of October 11, 2026.