You have written on WhatsApp, Instagram or Telegram to a business that uses AIRON to handle its messages. This page explains, briefly, what happens to your data.
1. Who processes your data
The business you wrote to is the controller: it decides why it replies to you and what it does with the conversation. AIRON TEAM SL («AIRON») is the tool it uses and acts as processor on its behalf, on instructions and without using the conversation for its own purposes.
If you want to know exactly which company is the controller, ask in the same conversation: it is required to identify itself. If you get no answer, write to privacidad@airon.team or info@airon.team and we will point you to it.
2. What data, and for what purpose
- The content of your messages and any files you send.
- Your phone number or profile identifier and the public name you display.
- Conversation metadata: date, time and read status.
Purpose: to answer what you ask, follow up on your request and leave a record in the business’s systems (its CRM, for example). We do not use the conversation for third-party advertising, we do not sell it, and we do not use it to train artificial intelligence models.
3. Artificial intelligence and human review
- The reply may be drafted with the assistance of artificial intelligence. By default, a person reviews and approves it before it reaches you.
- If the business has enabled an automatic reply without review, the message says so explicitly in its footer. The footer never claims a review that did not happen.
- You can always ask to speak to a person. Say so in the conversation and the request is passed on.
- An AI can be wrong: always check important details with the business.
4. How long data is kept
Messages are kept for 24 months from the last message in the conversation, unless the business sets a shorter period or deletes them earlier. The internal Telegram channel with the operator keeps its inbox for 7 days. Once the period expires, the data stops being reachable and disappears from the encrypted backups within a maximum of 30 further days.
5. Who else is involved
The channel itself belongs to Meta Platforms Ireland Ltd. (WhatsApp and Instagram) or to Telegram, which process the message in order to deliver it and apply their own policies. The platform runs on a server in Frankfurt (Germany, EU). To draft the reply we use a language-model provider located in the United States, with the safeguards of Chapter V GDPR. The detail is in the sub-processor list.
6. Your rights
You may request access, rectification, erasure, restriction, objection and portability of your data. Because the controller is the business you wrote to, address the request to it. If you raise it with us, we will not answer on the merits and will forward it to the controller within a maximum of 3 working days. You may also lodge a complaint with the Spanish Data Protection Agency, www.aepd.es.
If you are in Colombia, see the Personal Data Processing Policy (Colombia) and its PQRS channel.
7. Minors
These channels are not intended for children under 14. We neither request nor knowingly process their data.
More on how the platform works: AIRON platform privacy policy.