Privacy Policy

Last updated: October 28, 2026

1. 1. Who is responsible

   PtyFactory.tech is the controller of dashboard user account data. For the messages that each business's customers send via WhatsApp or Instagram, the business is the controller and PtyFactory.tech acts as a processor on its behalf.

2. 2. Data we process

   • Dashboard account: name, email, password (stored only as an Argon2id hash), two-factor settings and session data (IP address and browser).
   • Meta Platform data the business connects: identifiers of its WhatsApp Business account and Instagram professional account, profile name, and the access tokens Meta issues when the connection is authorized (stored encrypted).
   • Messages: content, date and status of messages exchanged with the business's customers, along with the customer's profile name and WhatsApp number or Instagram-scoped ID.
   • The knowledge base and settings the business writes for its assistant.
   • An audit log of security and administrative actions.

3. 3. How we use it

   • To show messages in the business's inbox and send the replies the business writes.
   • To generate automatic AI replies only when the business enables it, and only from its own knowledge base.
   • To protect accounts, prevent abuse and provide support when the business requests it.

   We do not sell data. We do not use data obtained from Meta Platforms for advertising, profiling or training AI models, and we do not share it with third parties other than the service providers listed below, solely to operate the service.

4. 4. Service providers (processors)

   • Meta Platforms (WhatsApp Business Platform and Instagram): to receive and send the business's messages.
   • Anthropic (Claude): processes conversation text to generate the automatic reply when AI is enabled. Under its commercial terms, Anthropic does not train its models on data sent through its API.
   • Hostinger: hosting of the server where data is stored.
   • Email provider: to send verification and access emails.

5. 5. Retention

   • We keep data while the business keeps its account active.
   • Each business can enable automatic deletion of messages older than 30, 90, 180 or 365 days.
   • When a channel is disconnected, its access tokens are deleted immediately.
   • When a workspace is deleted, its channels, conversations, contacts, knowledge base and settings are deleted. Encrypted backups are removed within 30 days.

6. 6. Security

   All traffic uses HTTPS. Access tokens are encrypted with AES-256-GCM. Two-factor authentication is mandatory to access the dashboard. Each business's data is isolated at the database level, and sensitive actions are recorded in an audit log the business can review.

7. 7. Your rights

   Under Panama's Law 81 of 2019 on Personal Data Protection, you can request access, rectification, deletion, objection and portability by writing to ventas@ptyfactory.tech. If you are a customer of a business that uses Conecta2s, you can also contact that business directly. We respond within 10 business days.

8. 8. Data deletion

   See how to request deletion of your data at conecta2s.dev/data-deletion.

9. 9. International transfers

   Our servers and providers may be located outside Panama. In that case the same security measures described here apply.

10. 10. Children

    Conecta2s is a service for businesses and is not directed to anyone under 18.

11. 11. Changes

    If we change this policy we will publish the new version on this page with its update date, and notify businesses by email of significant changes.