Privacy Policy
Last updated: September 3, 2026
This notice explains what personal data ARCHAI collects, what we use it for, and what control you have over it. It applies to the archai.ch website, the diagnostic form, the onboarding questionnaire, and the WhatsApp assistant we operate on behalf of our clients.
1. Who is responsible
ARCHAI is responsible for the processing of the data described in this notice. For any question, request, or exercise of rights, write to us at quantmcc@gmail.com.
2. What data we collect
When you fill out the diagnostic form at /diagnostico or the onboarding questionnaire, we collect the contact and business data you share with us directly: name, email, WhatsApp number, company name, and industry.
During onboarding we also collect the operational information needed to configure your assistant: business hours, service or product catalog, prices, cancellation or warranty policies, and any other business data you choose to share so the assistant can respond on your behalf.
If you become an ARCHAI client, we also process the WhatsApp conversations between your assistant and your end customers, in order to respond, qualify, and book appointments on your behalf.
3. What we use your data for
We use this data to evaluate whether your business is a fit for ARCHAI during the diagnostic, to configure and operate your WhatsApp assistant, to book appointments on your calendar, to generate relevant replies to your customers, and to provide support or billing where applicable.
We do not use your data for purposes other than those described in this notice, and we do not sell personal data to third parties.
4. Google Calendar access
If you connect your Google account from the onboarding form, ARCHAI requests permission for exactly two things: reading your calendar events, to know which time slots are busy, and creating or modifying events, to book your customers' appointments. We do not request or use any other data from your Google account.
Authorization is granted through Google OAuth: you sign in directly with Google, and ARCHAI never sees or stores your password.
Once authorized, we store an encrypted refresh token (AES-256-GCM) in our database. That token is what lets us check your calendar whenever the assistant needs to, without asking you to sign in again.
You can revoke this access at any time, using the Disconnect button in the ARCHAI form itself, or directly from myaccount.google.com/permissions.
Data obtained from Google APIs is not used to show you ads, is not sold, is not shared with third parties for commercial purposes, and is not used to train artificial intelligence models, ours or anyone else's.
ARCHAI's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
If you disconnect your account, we immediately revoke the token with Google and delete it from our database.
5. Who we share data with
To operate ARCHAI, some data flows through these providers:
- Google (Google Calendar): to read availability and create the appointments your assistant books.
- Meta / WhatsApp Business: the channel your assistant uses to send and receive messages from your customers.
- OpenAI and DeepSeek: generate the assistant's text replies based on the conversation.
- Our hosting and database provider: securely stores your account information and conversations.
None of these providers receives more data than what is necessary to provide their part of the service.
6. How long we keep your data
We keep your data for as long as your commercial relationship with ARCHAI lasts. You can request deletion of your data at any time by writing to quantmcc@gmail.com.
7. Your rights
As the owner of your personal data, you have the right to access it, correct it if outdated, cancel it, or object to its use for specific purposes.
To exercise any of these rights, write to quantmcc@gmail.com describing your request; we will respond within a reasonable time.
8. Cookies
This site only uses the cookies strictly necessary for it to work: a state cookie during the Google OAuth authorization flow, and the admin panel session cookie. We do not use analytics or advertising cookies.
9. Changes to this notice
If we update this notice, we will change the last-updated date shown above. We recommend reviewing it periodically.