Privacy notice
DarroneSoft (hereinafter, "No Missed Chat", "we" or "us"), with its address at Calle Plasma 843, Colonia Real Ankara, Sector Ágata, Saltillo, Coahuila de Zaragoza, México, CP 25117, is the data controller responsible for the processing of the personal data described in this notice, in compliance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), the European Union's General Data Protection Regulation (GDPR) where applicable, and the data protection laws of the countries where our customers operate (for example, Colombian Law 1581 of 2012).
No Missed Chat is a platform that enables businesses ("Customers") to serve their own customers ("End Users") over WhatsApp through an artificial intelligence assistant and a customer service panel. This notice covers both cases: the data of the people who use the panel and the data of the people who write to businesses over WhatsApp.
1. Data we process
1.1 Panel users (Customers and their staff)
- Account data: name, email address, password (stored encrypted by means of a hash), role, and the organization to which the user belongs.
- Business data: trade name, country, currency, time zone, logo, business description, knowledge base, product catalog, and assistant configuration.
- Credentials for third-party services that the Customer chooses to connect (Meta's WhatsApp Business Platform, PayPal, MercadoPago, Google Gemini). They are stored encrypted with AES-256-GCM.
- Subscription billing data: plan, period, and the payment reference at the payment gateway. We do not store card numbers.
- Technical logs: actions performed in the panel (audit), IP address, and browser data for security purposes.
1.2 End Users (people who write to a Customer's WhatsApp)
- WhatsApp phone number and profile name that WhatsApp sends us with each message.
- Content of the messages exchanged with the business (text; multimedia files are recorded by reference only).
- Data that the End User voluntarily provides during the conversation (for example, an address for a technical visit, email, notes).
- Orders and payments: products requested, amount, status, and the payment reference returned by the payment gateway. Card or account data is captured exclusively by PayPal or MercadoPago; it never passes through No Missed Chat.
With respect to End Users, the Customer (the business that uses No Missed Chat) acts as the data controller and No Missed Chat as the data processor, processing the data solely in accordance with the Customer's instructions and this notice.
2. Purposes
- Providing the service: receiving and replying to WhatsApp messages, generating artificial intelligence responses based on the Customer's knowledge base, transferring conversations to human agents, and displaying the history in the panel.
- Managing sales when the Customer enables it: creating orders, generating payment links, and confirming payments received.
- Managing the platform's accounts, roles, subscriptions, and billing.
- Security, fraud and abuse prevention, auditing, and compliance with legal obligations.
- Aggregated usage metrics (number of conversations, response times, estimated AI cost) for the Customer itself and to operate the platform.
We do not use the data for advertising, we do not sell it, and we do not train artificial intelligence models with the conversations.
3. Legal basis
The processing is based on the performance of the contract with the Customer (provision of the service), on the legitimate interest in operating the platform securely, on compliance with legal obligations and, where applicable, on the consent of the End User, which is expressed by starting a conversation with the business over WhatsApp. The Customer is responsible for informing its End Users about the use of an automated assistant when required by its legislation.
4. With whom we share data (processors and third parties)
| Provider | Purpose | Data |
|---|---|---|
| Meta Platforms (WhatsApp Business Platform / Cloud API) | Sending and receiving WhatsApp messages | Phone number, message content |
| Google (Gemini API) | Generation of assistant responses and knowledge base search vectors | Text of the recent conversation, knowledge base excerpts, and catalog. Google does not use this data to train its models under the paid API terms. |
| PayPal and MercadoPago | Payment processing | Amount, order description, reference; payment data is captured by the payment gateway |
| Server hosting provider | Infrastructure on which the platform and its database run | All data, encrypted in transit (TLS) and with secrets encrypted at rest |
The use of information received from Meta's APIs is additionally governed by the Meta Platform Terms and the WhatsApp Business Policies. We request only the strictly necessary permissions (whatsapp_business_management and whatsapp_business_messaging) to manage our Customers' WhatsApp Business accounts and to send messages on their behalf.
We may disclose data when required by a competent authority in accordance with the law.
5. International transfers
The servers of No Missed Chat and those of our providers may be located outside the country of the Customer or the End User (for example, in the United States or the European Union). In such cases, we apply appropriate safeguards, such as standard contractual clauses and providers with recognized security certifications.
6. Retention
- Conversations, contacts, and orders: for as long as the Customer's account remains active. The Customer may delete them from the panel at any time.
- When an account is canceled, the data is deleted or anonymized within a maximum period of 30 days, except for data we must retain due to tax or legal obligations (for example, payment records, for up to 5 years).
- Backups: overwritten in cycles of up to 30 days.
7. Security
We apply TLS encryption to all communications, AES-256-GCM encryption for stored credentials and tokens, bcrypt-hashed passwords, signature validation on Meta, PayPal, and MercadoPago webhooks, role-based access control, data isolation by organization, and audit logs. No measure is infallible; if we detect a breach affecting your data, we will notify it in accordance with applicable law.
8. Your rights
You may exercise your rights of access, rectification, cancellation, and opposition (ARCO rights), as well as the rights to portability, restriction of processing, and withdrawal of consent, by writing to contacto@darronesoft.com with your name, the associated WhatsApp number or email address, and a description of your request. We will respond within a maximum of 20 business days. If you are an End User of a business, you may also direct your request to that business directly; we will help it address your request.
To request the deletion of your data, follow the instructions at https://nomissedchat.com/eliminacion-de-datos.
If you believe that we have not properly addressed your request, you may contact the data protection authority of your country (in Mexico, the Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno), which assumed the functions of the former INAI; in the United States, the Federal Trade Commission (FTC); in Colombia, the Superintendence of Industry and Commerce).
9. Cookies
The panel uses only strictly necessary cookies to keep your session signed in and to store local preferences (such as the light or dark theme). We do not use advertising cookies or third-party tracking cookies.
10. Minors
The service is intended for businesses and for persons of legal age. If we detect data of minors processed without the corresponding authorization, we will delete it.
11. Changes to this notice
We will publish any change on this same page, indicating the date of the update. Material changes will be notified to Customers by email.
12. Contact
DARRONESoft, S.A.S. de C.V.
Calle Plasma 843, Colonia Real Ankara, Sector Ágata, Saltillo, Coahuila de Zaragoza, México, CP 25117
Email: contacto@darronesoft.com
Website: https://nomissedchat.com