Legal
Privacy Policy
Last updated: January 1, 2026
1. Who we are
WithCoffeeAI is a software platform operated by ATENCIA CANOLES MIGUEL ALBERTO, located at Cl. 71 #58-102, Itagüí, Antioquia 055410, Colombia. Contact: founder@withcoffeeai.com · +57 311 363 0732.
WithCoffeeAI provides a multi-tenant SaaS platform that integrates with the WhatsApp Business API (Meta) to help businesses manage sales conversations, orders, and payments.
2. Applicable law
This policy is governed by Colombian Law 1581 of 2012 (Personal Data Protection) and its regulatory decrees. We also follow the principles of the GDPR for users in the European Union and apply the requirements of Meta's WhatsApp Business API.
3. Data we collect
From merchants (platform users):
- Name, business email, phone number, and company data during registration
- Business NIT/tax ID and billing information
- WhatsApp Business API credentials (stored encrypted)
- Product catalog, orders, and transactional data
- Platform usage and analytics data
From end customers (contacts of merchants):
- WhatsApp phone number and display name
- Conversation messages processed through WhatsApp Business API
- Order and payment data entered during sales conversations
4. How we use your data
- Provide and operate the WhatsApp Sales OS platform
- Process orders, payments, and sales transactions
- Send transactional emails and platform notifications
- Provide customer support
- Improve the platform based on usage patterns
- Comply with legal obligations
5. Multi-tenant data isolation
WithCoffeeAI is a multi-tenant platform. Each merchant's data is logically isolated and not accessible to other merchants. We do not share merchant data or their customers' data between tenants under any circumstances.
6. Third-party processors
We work with the following third-party data processors:
- Meta (WhatsApp Business API): Message routing and WhatsApp API services
- Amazon Web Services (AWS): Cloud infrastructure and email delivery (SES)
- Railway: Application hosting
- Anthropic: AI language model for the AI Sales Agent feature
- Wompi: Payment processing (Colombia)
7. Data retention
We retain account and transactional data for as long as the merchant account is active and for 5 years after account closure, as required by Colombian commercial law. Conversation data is retained for 2 years. Anonymized analytics data may be retained indefinitely.
8. Your rights
Under Colombian Law 1581/2012, you have the right to:
- Know, update, and correct your personal data
- Request deletion of your data (subject to legal retention obligations)
- Revoke consent for data processing
- File a complaint with the Superintendencia de Industria y Comercio (SIC)
To exercise these rights: founder@withcoffeeai.com
9. Security
We implement industry-standard security measures including encryption at rest and in transit, access controls, and regular security audits. API credentials are stored encrypted. We do not store WhatsApp message content longer than necessary for operation.
10. Changes to this policy
We may update this policy. Changes will be communicated via email to registered merchants at least 30 days before taking effect. Continued use of the platform constitutes acceptance of the updated policy.