Privacy Policy

Labia Bot respects your privacy and that of your contacts. This Privacy Policy explains how we collect, use, store and protect information when you use our service.

1. Data Controller

Controller: Labia Bot
Contact email: [email protected]
Users’ personal data is processed in accordance with Venezuelan data protection law and, where applicable, the GDPR for European users.

2. Data We Collect

2.1 User account data

• Full name and email address
• Password (stored encrypted, never in plain text)
• Role and permissions within the organization
• Billing data (processed by Stripe, not stored directly)

2.2 Contact/lead data (provided by the user)

• Contacts’ name, phone number and email
• Notes and tags assigned by the user
• WhatsApp conversation history
• Voice message transcription data
• Status in the Kanban pipeline and estimated value

2.3 Brand and creative content data (provided by the user)

• Business profile: description, what you sell, value proposition, hours, contact details, website
• Brand voice: tone, niche, colors and your business logo
• Reference images you upload to generate assets (product photos, logos)
• Text/instructions (prompts) you write in the image generator
• Generated images and your feedback on them (👍/👎 and notes)

2.4 Technical and usage data

• IP address
• Browser type and operating system
• Pages visited and time spent
• Sessions and activity on the platform
• Errors and technical logs for diagnostics

2.5 Analytics data (optional)

• A product analytics tool to identify usage trends
• An error monitoring tool to detect and fix problems
• Both may collect anonymized technical data

3. Purpose of Processing

• Providing the service: lead management, message sending, automations, AI
• Improving the product: usage analysis, A/B testing, error identification
• Security: fraud prevention, access auditing, activity monitoring
• Billing: payment processing through our payment platform
• Communication: service notifications, security alerts, changes to terms

4. Use of Artificial Intelligence

Labia Bot uses AI models from third-party providers (such as OpenAI, Google, Anthropic or OpenRouter, depending on your account configuration) for several functions. What is sent to those providers, by function:

4.1 Conversational agents and assistant

• Your contacts’ messages and the business context you configured are sent to the selected AI provider to generate replies
• Data is processed in real time; we do not use your data to train third-party models
• You can turn the AI off at any time from your admin panel

4.2 Image generation (Picasso)

• Sent to the AI provider: your text (prompt), the internal template, your brand context (name, niche, tone, colors, description), the reference images you uploaded and your logo (if you configured one)
• A language model may internally optimize the prompt before generating, using that same information
• Generated images and your references are stored in Cloudflare R2 (object storage) associated with your account
• Your feedback (👍/👎 and notes) is used solely to improve YOUR future generations, not those of other users
• You can delete your images and references, or request deletion at [email protected]

4.3 Lead scoring and campaigns

• Conversation content may be analyzed with AI to score the lead’s interest, depending on your configuration
• Campaign strategy data (objective, audience, platform) is used to generate the creative assets

5. WhatsApp and Meta

When you connect your WhatsApp Business number through Meta’s Cloud API:

• Messages are processed through Meta’s servers
• Meta may process data in accordance with its own privacy policies
• We recommend reviewing WhatsApp’s privacy policy
• Labia Bot only receives the data Meta provides through the API

6. Storage and Security

We implement multiple layers of security:

• Encryption in transit: end-to-end encryption on all connections
• Encryption at rest: passwords stored with secure hashing, sensitive data encrypted
• Multi-tenant isolation: logical separation of data between organizations via Row-Level Security
• Access control: granular roles and permissions per user and organization
• Auditing: logging of accesses and sensitive actions
• Infrastructure: deployment on secure servers with perimeter protection and continuous monitoring

7. Sharing Data with Third Parties

We share data only with the providers necessary for the service to work:

• Messaging platform: to send and receive WhatsApp messages
• AI provider: to process intelligent replies
• Payment platform: to process transactions
• Analytics tool: to analyze usage trends and improve the product
• Monitoring tool: to detect and fix errors quickly

We do not sell, rent or share your data for advertising or marketing purposes.

8. Data Retention

• Account data: kept while the account is active and for up to 30 days after cancellation
• Contact data: deleted at the user’s request or when the account is cancelled
• Conversations: retained according to the tenant’s configuration, deletable by the user
• Technical logs: retained for 90 days for diagnostics, then deleted automatically
• Generated images and references: kept in your account while it is active; you can delete them or request it at [email protected]

9. User Rights

You have the right to:

• Access: request a copy of your personal data
• Rectification: correct inaccurate data
• Erasure: request deletion of your data (subject to legal obligations)
• Portability: export your data in a readable format
• Objection: object to processing for specific purposes
• AI opt-out: turn off AI processing of messages at any time

To exercise these rights, contact [email protected].

10. Cookies

We use technical cookies necessary for the service to work (session, authentication, theme preferences). See our Cookie Policy for more details.

11. Changes to this Policy

We may update this Privacy Policy from time to time. We will notify significant changes by email or through the platform. The date of the last update appears at the top of this page.

12. Contact

For enquiries about privacy and data protection:
Email: [email protected]