Privacy Policy

    Last updated: 26 March 2026

    1. Identification of the Data Controller

    This Privacy Policy applies to the services provided by KNOWLEDGE ADDICT LDA (Azon IA), headquartered at Praceta D. Lourenço de Almada, Nº2, R/C A, 2660-338, Santo António dos Cavaleiros, Portugal.

    For questions related to privacy and data protection, you can contact us by email at: [email protected]

    2. Personal Data Collected

    In the course of using our platform, we may collect and process the following types of personal data:

    • Identification data: name, email, phone number
    • Authentication data: platform access credentials
    • Usage data: information about how you use the platform and its AI agents
    • Communication data: conversations and messages exchanged through the AI agents, including messages received and sent via WhatsApp, Instagram and Messenger
    • Customer data: information about your customers required for the AI agents to operate
    • Data obtained through third-party platforms: when you authorize integrations with services such as Meta (WhatsApp Business API, Instagram Messaging API, Messenger API), we collect data made available by those platforms, including user identifiers, profile names, phone numbers, message content and conversation metadata

    3. Purpose of Data Processing

    The personal data collected is processed for the following purposes:

    • Provision and management of the AI agent platform services
    • Authentication and management of user accounts
    • Processing of conversations and automation of support across multiple channels (website, WhatsApp, Instagram, Messenger)
    • Integration with external services authorized by the user
    • Analysis and improvement of the services provided
    • Communication of updates and relevant information about the service
    • Compliance with legal and regulatory obligations

    Important note: Data obtained through Meta's APIs (WhatsApp, Instagram, Messenger) is used exclusively to provide the automated support services configured by the user. This data is not sold, licensed or used for advertising, marketing purposes, or to build user profiles.

    4. Legal Basis for Processing

    The processing of your personal data is based on:

    • Performance of a contract: to provide the requested services
    • Consent: where applicable, such as for integrations with external services (Meta, WhatsApp, etc.)
    • Legitimate interests: for the improvement of the services and platform security
    • Compliance with legal obligations: when required by law

    5. Data Obtained through the Meta Platform

    Our platform integrates with Meta, Inc. products (Facebook, Instagram, WhatsApp) through their official APIs. By using these integrations, the following data may be collected and processed:

    • WhatsApp Business API: phone numbers, message content, timestamps, delivery status, contact profile information
    • Instagram Messaging API: Instagram user identifiers, direct message content, timestamps
    • Messenger API: Facebook user identifiers, message content, timestamps
    • Business account data: information from the connected WhatsApp Business Account (WABA), Facebook pages and Instagram professional accounts

    Use of Meta data: Data obtained through Meta's APIs is used strictly to:

    • Receive and respond to messages from our users' customers
    • Automate customer support through AI agents
    • Provide analysis and reports on conversations to the account holder

    Restrictions: In accordance with the Meta Platform Terms, we commit to:

    • Not sell, license or acquire data obtained from Meta
    • Not use Meta data for advertising or targeting purposes without express consent
    • Not transfer Meta data to data brokers or data enrichment services
    • Not use Meta data for surveillance, discrimination or any unlawful purpose
    • Promptly delete data when requested by the user or required by Meta

    6. Data Sharing

    Your personal data may be shared with third parties in the following circumstances:

    • Service providers: that assist us in providing the services (cloud services, AI processing, communication infrastructure)
    • Meta, Inc.: in the context of integrations with WhatsApp, Instagram and Messenger, as necessary for the APIs to function
    • Authorized integrations: other external services that you expressly authorize
    • Legal obligations: when required by competent authorities or to comply with the law

    We ensure that all third parties with whom we share data are subject to appropriate confidentiality and data protection obligations.

    7. International Data Transfers

    Some of our service providers, including Meta, Inc. and cloud infrastructure providers, may be located outside the European Union. In these cases, we ensure that appropriate safeguards are in place to protect your data, in compliance with the GDPR, including standard contractual clauses approved by the European Commission or adequacy decisions.

    8. Data Retention Period

    Personal data is retained only for as long as necessary for the purposes for which it was collected:

    • Account data: for the period of active use of the platform and up to 30 days after cancellation
    • Conversation data: as configured in the agent settings or as required by legal obligation
    • Data obtained via Meta APIs: retained for as long as necessary to provide the service or until the user requests its deletion
    • Billing data: for the legally required period (currently 10 years in Portugal)

    9. Rights of Data Subjects

    In accordance with the GDPR, you have the following rights regarding your personal data:

    • Right of access: obtain confirmation of whether your data is being processed and access a copy of it
    • Right to rectification: correct inaccurate or incomplete data
    • Right to erasure: request the deletion of your data (the "right to be forgotten")
    • Right to restriction of processing: restrict processing in certain circumstances
    • Right to data portability: receive your data in a structured, machine-readable format
    • Right to object: object to the processing of your data
    • Right to withdraw consent: where processing is based on consent

    10. How to Request Deletion of Your Data

    To request the deletion of your personal data, including data obtained through integrations with the Meta Platform, you can:

    • Send an email to [email protected] with the subject "Data Deletion Request"
    • Use the platform settings to delete your account and associated data
    • Contact us in writing at the address indicated in the Contacts section

    After receiving your request, we will delete the data within a maximum of 30 days, unless retention is required by law. We will confirm the deletion by email. Deletion includes data stored on our platform and, where applicable, we will request removal of data from sub-processors.

    11. Data Security

    We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure or destruction, including:

    • Encryption of data in transit (TLS/SSL) and at rest
    • Role-based access control and robust authentication
    • Continuous monitoring and regular security audits
    • Isolation of data between different user accounts
    • Staff training on data protection matters

    12. Cookies and Similar Technologies

    We use cookies and similar technologies to:

    • Keep your session and preferences active
    • Improve the platform's user experience
    • Analyze usage and performance

    You can manage your cookie preferences through your browser settings.

    13. Changes to the Privacy Policy

    We reserve the right to update this Privacy Policy periodically. Any changes will be communicated through the platform and/or by email, and the date of the last update will always be indicated at the top of this document.

    14. Right to Lodge a Complaint

    If you consider that your personal data is not being processed in compliance with applicable legislation, you have the right to lodge a complaint with the competent supervisory authority:

    Comissão Nacional de Proteção de Dados (CNPD)
    Av. D. Carlos I, 134 - 1.º
    1200-651 Lisboa
    Tel: (+351) 213 928 400
    Email: [email protected]
    Website: www.cnpd.pt

    15. Contact

    For any question related to this Privacy Policy, the processing of your personal data, or to exercise your rights, you can contact us at:

    KNOWLEDGE ADDICT LDA (Azon IA)
    Praceta D. Lourenço de Almada, Nº2, R/C A
    2660-338 Santo António dos Cavaleiros
    Portugal
    Email: [email protected]
    Phone: +351 210 602 754