What we do with your data

Our role

On this website, Agedrex decides what to do with the data sent through the contact form: we are the controller.

In the CRM and the WhatsApp agents, we process data on behalf of the business that hires us. That business is the controller towards its own customers, and Agedrex is the processor, acting on its instructions (Brazilian General Data Protection Law, LGPD).

What data we receive

• Website form: name, email, company, number of employees and the message you write.
• CRM users: name, email and role of each person at the client business who uses the system.
• WhatsApp, through Meta's WhatsApp Business Platform, when a business connects its number: the phone number and profile name of whoever writes, the content of messages and files (text, audio, image, document), date and time, and delivery status.
• The client business's WhatsApp Business account data: account and phone number IDs, display name and message templates.
• Orders and purchase data the client business records in the CRM.

How we use it

To reply to people who contact us through the website; to show WhatsApp conversations to the client business inside the CRM; to reply automatically with an AI agent, when the business turns it on; to send the messages the business requests, using templates approved by Meta; and to give the business metrics about its own service and sales.

We do not sell data, we do not use it for advertising, we do not use it to train AI models, and we do not use it for anything other than providing the service to the client business.

Who we share it with

Only with the providers we need to deliver the service, and only what is necessary:

• Meta Platforms, through the WhatsApp Business Platform, to send and receive messages.
• Railway, which runs our servers and database.
• Google (Gemini) and Anthropic (Claude), which generate the AI agent's replies and transcribe audio.
• Voyage AI, to search products in the client business's catalog.
• Vercel, which hosts this website.

International transfers

Some of these providers store or process data outside Brazil and Argentina, mainly in the United States. We choose providers with security and confidentiality commitments and only pass them what each task requires.

How long we keep it

Data from a client business and its conversations, for as long as our contract with it lasts. When the contract ends, we delete it within 90 days, except what the law requires us to keep.

Website form data, for as long as needed to handle the request and any work that follows from it.

Security

Everything travels encrypted (HTTPS). Access to the CRM requires a username and password, and each person sees only what their role allows. Meta credentials stay on the server and are never shown to users.

Your rights

You can ask us to confirm whether we process your data, access it, correct it, port it to another provider, tell you who we share it with, withdraw your consent and delete it (Brazilian Law 13,709/2018, LGPD, art. 18; in Argentina, Law 25,326).

If you wrote on WhatsApp to a business that uses Agedrex, you can ask that business or us directly: we coordinate with them and resolve it.

Contact

Any request or question about your data: contato@agedrex.ai. Data protection officer: João Marcello Meira.

If we change this policy, we update this page and the date above.