Privacy policy

Last updated: 4 November 2026

1. Data controller

2. What data we process and why

Website visitors. This website does not use tracking cookies or third-party analytics. Vercel, our hosting provider, logs technical connection data (IP address, browser, pages served) to provide the service and protect it against attacks, for a short period.

People who request a demo or get in touch. Name, company, email, phone and whatever you tell us. Purpose: to handle your request and, if you ask, to send you commercial information about MultiChats. Legal basis: your consent and pre-contractual steps. Retention: until we have dealt with your request and, at most, one year if you do not become a customer.

Customers. Identification, contact and billing data, and service login data. Purpose: to provide and invoice the service and to meet our legal obligations. Legal basis: performance of the contract and legal obligation. Retention: for the duration of the relationship and the legal periods afterwards (up to 6 years for accounting records). Payments are processed by Stripe Payments Europe, Ltd.; we do not store your full card details.

WhatsApp conversations handled with MultiChats. When a customer connects their WhatsApp numbers to the service, MultiChats processes the messages in those conversations (text, attachments, and the other party's phone number and name) to display them in the dashboard, sort them and suggest or send replies. For that processing, the customer is the controller and the owner of MultiChats acts as processor, in accordance with Article 28 of the GDPR and the data processing agreement included in the terms of service. The customer must have a legal basis to contact the people they talk to and must inform them about the processing.

3. Artificial intelligence

To sort conversations and draft replies, MultiChats sends the text of the conversation to a language model from Anthropic, PBC (USA), covered by the EU-US Data Privacy Framework and standard contractual clauses. Anthropic does not use that data to train its models. Replies the AI sends on its own are subject to limits and rules set by the customer, and any conversation can be handed to a person at any time.

4. Recipients

We do not sell or share your data. The providers needed for the service access it as processors: Vercel (hosting), Stripe (payments), Resend (email delivery), Anthropic (language model) and Google (Google Workspace, for email and internal documents). Some are outside the European Economic Area; in those cases the processing relies on adequacy decisions or the European Commission's standard contractual clauses.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to hola@agendra.es and stating which right you are exercising. We reply within one month. If you believe we have not handled your request properly, you can lodge a complaint with the Spanish Data Protection Agency (AEPD, aepd.es). If you are in the United Kingdom, you can also complain to the Information Commissioner's Office (ICO, ico.org.uk).

6. Security

We apply technical and organisational measures appropriate to the risk: encryption in transit, password-protected access control, backups and access logs. Each customer's WhatsApp sessions are stored encrypted and are only used to provide the service to that customer.

7. Changes

If this policy changes, we will publish the new version at this same address with the date it was updated. If the change affects how we process your data, we will let you know.

Fonts

The fonts on this website are loaded from Google Fonts (Google Ireland Ltd.). When you visit it, your browser requests those files from Google, which receives your IP address. We do not use Google or advertising cookies.

Language

This English version is provided for convenience; in case of discrepancy the Spanish version (privacidad) prevails.