Privacy policy
Last updated: 28 October 2026
This policy explains which personal data Atendia processes, why, and what rights you have. There are two situations: when you are an Atendia customer (a business using the service) and when you are a customer of one of those businesses writing to it on WhatsApp or through its website chat.
Controller
InScius S.L., tax ID B21773460, Calle Clara del Rey 33, 28002 Madrid, España. Contact: hello@inscius.es.
1. Data of our customers and dashboard users
| What data | Why | Legal basis |
|---|---|---|
| Name, email and password (managed by Amazon Cognito) of the people using the dashboard | Give access to the account and its team | Performance of the contract |
| Company name, tax ID, address and billing email | Charge the subscription and issue invoices | Performance of the contract and legal obligation (tax law) |
| Service usage data (AI conversations, consumption, technical logs) | Provide the service, apply plan limits, security and support | Performance of the contract and legitimate interest |
| Emails you send us | Reply to you | Legitimate interest |
Billing data is kept for as long as the law requires (generally 6 years). Everything else while the account is active and up to 90 days after it is closed.
2. Data of end customers (people writing to a business)
When you write to a business that uses Atendia, that business is the controller of your data and InScius S.L. acts as processor, following its instructions and the data processing agreement (Article 28 GDPR) included in our Terms of service.
- We process your name or alias, your WhatsApp number or an anonymous website chat identifier, and the content of your messages.
- An artificial intelligence system reads your messages to suggest or send replies using the information the business has provided. You can ask to speak to a person at any time.
- Messages are kept for as long as the business sets (365 days by default).
- To exercise your rights, contact the business. If you write to us, we will pass your request on.
Providers that process data on our behalf
| Provider | Service | Location |
|---|---|---|
| Amazon Web Services EMEA SARL | Servers, database, sign-in (Cognito) and AI models (Amazon Bedrock) | Ireland (EU). For AI, EU regions |
| Meta Platforms Ireland Ltd. | WhatsApp Business API, when the business connects its number | EU, with possible transfers to the US under the EU-US Data Privacy Framework |
| Revolut Bank UAB | Subscription payments | EU (Lithuania) |
AI models are used through Amazon Bedrock: AWS does not share messages with the model provider or use them to train models. We do not sell personal data.
Your rights
You can request access, rectification, erasure, objection, restriction and portability by writing to hello@inscius.es. We reply within one month. If you are not satisfied, you can complain to the Spanish Data Protection Agency (aepd.es) or the authority in your country.
How to ask us to delete your data: data deletion.
Security
Encryption in transit (HTTPS) and at rest, strict separation of each customer's data in the database, encrypted WhatsApp access tokens and staff access limited to what support requires.
This English version is a translation; if there is any discrepancy, the Spanish version prevails.