Privacy Policy

1. Who is responsible

ARCHAI is responsible for the processing of the data described in this notice. For any question, request, or exercise of rights, write to us at quantmcc@gmail.com.

2. What data we collect

When you fill out the diagnostic form at /diagnostico or the onboarding questionnaire, we collect the contact and business data you share with us directly: name, email, WhatsApp number, company name, and industry.

During onboarding we also collect the operational information needed to configure your assistant: business hours, service or product catalog, prices, cancellation or warranty policies, and any other business data you choose to share so the assistant can respond on your behalf.

If you become an ARCHAI client, we also process the WhatsApp conversations between your assistant and your end customers, in order to respond, qualify, and book appointments on your behalf.

3. What we use your data for

We use this data to evaluate whether your business is a fit for ARCHAI during the diagnostic, to configure and operate your WhatsApp assistant, to book appointments on your calendar, to generate relevant replies to your customers, and to provide support or billing where applicable.

We do not use your data for purposes other than those described in this notice, and we do not sell personal data to third parties.

4. Google user data we access

Only if you connect your Google account from the onboarding questionnaire does ARCHAI ask you for exactly two permissions:

• calendar.calendarlist.readonly — to see the list of your calendars, solely so you can choose which one to book into.
• calendar.events.owned — to view and create events on calendars you own: we read the start and end times of the queried day's events to know which slots are busy, and we create the event for each appointment your assistant books.

We do not request access to other people's calendars, to sharing or deleting calendars, or to Gmail, Drive, or your contacts. We never modify or delete events that were not created by the assistant.

For each existing event we only ask Google for its start time, end time, and status — never the title, description, location, or guests.

We also store the email of the Google account you connected, so we can show you which one it is.

Alternatively, you can share your calendar manually with ARCHAI's service account from your Google Calendar settings; in that case it is used the same way: only to read availability and create appointments.

Authorization is granted through Google OAuth: you sign in directly with Google, and ARCHAI never sees or stores your password.

5. How we use Google user data

Solely for the appointment-booking feature you see: computing the free slots on your calendar and creating the event for each appointment.

We do not use Google data for advertising, we do not sell it, we do not build profiles, we do not use it for credit decisions, and no human reviews it except to provide support you request, for security, or to comply with the law.

ARCHAI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

6. AI and Google user data

The WhatsApp assistant's replies are generated with the OpenAI API.

The only thing derived from your Google Calendar that reaches the model is the list of free time slots we compute on our servers (for example, "10:00, 10:30"). Event titles, descriptions, guests, or any other event content are never sent to any AI provider.

Under its terms, OpenAI does not use data sent through its API to train or improve its models, and retains it for up to 30 days solely for abuse monitoring.

DeepSeek is used only for this website's chat and never receives Google data.

ARCHAI does not use, transfer, or sell Google user data — raw, aggregated, anonymized, or derived — to create, train, or improve artificial intelligence or machine learning models, ours or anyone else's.

7. How we protect your data

• All traffic between your browser, our servers, and Google travels encrypted over HTTPS/TLS.
• The Google refresh token is stored encrypted with AES-256-GCM; the encryption key lives separately from the database, as a server secret.
• Google access tokens last one hour and are never stored in our database; the internal service that hands them to the appointment automation requires a secret key.
• The event data we read to compute availability is processed in memory and never stored.
• Restricted access: only the ARCHAI team operating your assistant can sign in, with authentication, and the admin panel is password-protected.
• Least privilege: we only request the two permissions described in section 4.
• If a security incident affecting your data ever occurs, we will notify you without delay.

8. Who we share data with

To operate ARCHAI, some data flows through these providers:

• Google (Google Calendar): to read availability and create the appointments your assistant books.
• Meta / WhatsApp Business: the channel your assistant uses to send and receive messages from your customers.
• OpenAI: generates the WhatsApp assistant's replies (see section 6).
• DeepSeek: generates the replies of this website's chat; it receives no Google data.
• Our hosting and database provider: securely stores your account information and conversations.

None of these providers receives more data than what is necessary to provide their part of the service.

9. Retention and deletion

Diagnostic and onboarding data is kept for as long as your commercial relationship with ARCHAI lasts.

The Google token is kept until you disconnect your account; when you disconnect, we immediately revoke it with Google and delete it from our database.

You can revoke this access at any time, using the Disconnect button in the ARCHAI form itself, or directly from myaccount.google.com/permissions.

You can request deletion of all your data by writing to quantmcc@gmail.com; we handle requests within 30 days at most.

10. Your rights

As the owner of your personal data, you have the right to access it, correct it if outdated, cancel it, or object to its use for specific purposes.

To exercise any of these rights, write to quantmcc@gmail.com describing your request; we will respond within a reasonable time.

11. Cookies

This site only uses the cookies strictly necessary for it to work: a state cookie during the Google OAuth authorization flow, and the admin panel session cookie. We do not use analytics or advertising cookies.

12. Changes to this notice

If we update this notice, we will change the last-updated date shown above. We recommend reviewing it periodically.