Privacy Policy

DatSOR Privacy Policy

Effective Date: January 14th, 2026

Welcome to DatSOR! We are a Canadian company providing an AI-powered sales automation platform designed to help businesses automate their inbound sales conversations on WhatsApp Business, Instagram Business, and Website Chat. Protecting the privacy of our clients and the individuals whose data we process is a core commitment of our operations.

This Privacy Policy explains how DatSOR (a brand of 17466382 CANADA INC.), a company incorporated under the laws of Canada, collects, uses, discloses, and protects information when you visit our website (https://datsor.com/) or use our Service.

We are committed to processing personal data in accordance with the principles of robust data protection frameworks, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and the applicable data protection laws in Latin America where our clients and their customers are located, including but not limited to:

  • Brazil’s Lei Geral de Proteção de Dados (LGPD)
  • Mexico’s Ley Federal de Protección de Datos Personales en Posesión de Particulares (LFPDPPP)
  • Colombia’s Ley 1581 de 2012
  • Argentina’s Ley N° 25.326
  • Peru’s Ley N° 29733

Scope of This Policy & Data Roles

This policy applies to all personal data collected and processed by DatSOR. It is important to understand the different roles we play:

Data Processor: When we process the chat data of your End-Customers on your behalf through our Service, you (our Client) are the Data Controller, and DatSOR is the Data Processor. Our obligations in this role are detailed in Section 9.

Data Controller: When we collect personal data from you (as a website visitor, waiting list registrant, or direct business client) for our own purposes, DatSOR is the Data Controller.

1. What This Policy Covers

This policy applies to information collected:
a) Through our website, https://datsor.com/.
b) Through our use of our AI-powered sales automation platform (“Service”) regarding interactions via WhatsApp Business, Instagram Business, and Website Chat widgets.

2. Information We Collect

We collect information in the following ways:

a) Information You Provide Directly (Website Visitors & Clients):

  • Website: If you use our contact form or join our waiting list, we collect your name, email address, phone number, company name, and any message content you provide.
  • Service Registration & Order Forms: When you become a Client, we collect information to set up and manage your account, such as your company’s legal name, business address, contact details, and billing information. Note that financial transactions may be processed by Third-Party Payment Processors or Merchants of Record (such as Paddle or Stripe), and your payment details may be collected directly by them according to their own privacy policies.
  • AI Training Data (Provided by Clients): To train our AI agents, we collect information about your business, details of your products and services, and content for Frequently Asked Questions (Q&A) that you provide to us.

b) Information Collected When You Use Our Service (Customer Data from Chats):

  • When individuals (“End-Customers”) interact with our AI agents via your WhatsApp Business account, Instagram Business account, or Website Chat, we collect the full content of these chat conversations, including text, images, audio, video, and any other media exchanged. We also collect technical data related to these conversations (e.g., timestamps, participant identifiers provided via the Meta APIs or web sessions).
  • Important Distinction: This Customer Data is collected and processed by us on your behalf as our Client, for the sole purpose of providing the AI sales automation Service to you.

c) Information Collected Automatically (Website Visitors):

  • When you visit our Website, we automatically collect certain information, such as your IP address, browser type, operating system, referring URLs, pages viewed, and dates/times of visits. This is collected using cookies and similar technologies (see our Cookie Policy).

3. How We Use Information

We use the information we collect for the following purposes:

a) To Provide, Maintain, and Improve the Service:

  • To operate our AI-powered sales automation platform and provide you with access to your account and interface.
  • To process and manage the chat conversations between our AI agents and your End-Customers via WhatsApp, Instagram, and Web Chat, as instructed by you.
  • To use the User Content you provide to configure and train the specific AI agents for your business.
  • To analyze anonymized and aggregated Customer Data to improve the overall performance and capabilities of our AI models and the Service (data that does not identify you or individual End-Customers).

b) To Communicate with You (Clients & Website Visitors):

  • To respond to your inquiries submitted via the Website contact form or regarding the waiting list.
  • To provide customer support, send you technical notices, updates, security alerts, and administrative messages related to your account and Service use.
  • To communicate with you about billing, invoices, and payments.

c) To Manage and Operate Our Website:

  • To analyze Website usage and visitor behaviour to improve the Website’s functionality and user experience.
  • To ensure the security and stability of our Website and systems.

d) For Legal and Compliance Purposes:

  • To comply with applicable Canadian laws and regulations.
  • To respond to lawful requests from public authorities.
  • To enforce our Terms and Conditions and other agreements.

4. How We Share Information

We do not sell personal information or Customer Data. We may share information in the following circumstances:

a) With You (Our Client): Customer Data from chat conversations processed by our AI agents is made available to you via your dedicated DatSOR platform interface, as you are the Controller of this data.

b) With Third-Party Service Providers: We share information with vendors and service providers who perform services on our behalf, such as hosting and data storage, analytics, and customer support tools. These providers are contractually bound to protect the information and use it only for the purposes for which we provide it to them.

c) With Third-Party Services (Directly): The Service integrates with Third-Party Services like Meta Platforms (WhatsApp Business API, Instagram Graph API) and Google Gemini to function. Information (like chat content) is transmitted to these services as necessary for the AI to process and respond. We may also share data with Merchant of Record services (e.g., Paddle) for tax and billing compliance. These Third-Party Services have their own privacy policies and terms, and we are not responsible for their practices.

d) Legal and Compliance: We may disclose information if required by Canadian law or legal process, or if we have a good faith belief that disclosure is necessary to protect our rights, investigate fraud, or ensure the safety of any person.

e) Business Transfers: If DatSOR is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to confidentiality obligations.

5. Data Storage and Transfers

  • Information collected through the Service, including Customer Data, is stored on secure servers provided by Amazon Web Services (AWS). These servers may be located in various geographic regions, potentially including locations outside of Canada and Latin America.
  • By using the Service, you, as the Client, instruct DatSOR to process and store Customer Data in these locations and acknowledge that data may be transferred across international borders.
  • When transferring data from your jurisdiction to Canada or other locations (via AWS/Google Gemini), we rely on legal mechanisms designed to protect your data, such as contractual clauses, but you acknowledge the inherent risks in international data transfers.

6. Data Security

We implement reasonable physical, technical, and organizational security measures designed to protect information against unauthorized access, use, alteration, or disclosure. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

7. Data Retention

We retain information for as long as necessary to provide the Service to you, comply with our legal obligations under Canadian law, resolve disputes, and enforce our agreements.

Specific Retention for Customer Data:

  • Meta Platforms (WhatsApp/Instagram): Retention of chat history on these platforms is governed by Meta’s policies and your own account settings. DatSOR does not control the data stored directly on your Meta accounts.
  • Website Chat: Conversations originating from the Website Chat widget are stored on our servers (via AWS). Upon termination of your Service Agreement, access to this history via the DatSOR interface will cease, and data may be deleted or anonymized in accordance with our standard data lifecycle procedures, unless you request a specific export prior to termination as outlined in our Terms and Conditions.

8. Your Rights (As a Client of DatSOR)

Under applicable data protection laws, you may have the following rights regarding your personal information:

  • Right to Access: Request a copy of the personal information we hold about you.
  • Right to Rectification: Request correction of inaccurate information.
  • Right to Erasure (‘Right to be Forgotten’): Request deletion of your information under certain conditions.
  • Right to Restrict Processing: Request limitation of how we use your information.
  • Right to Data Portability: Request your data in a structured, machine-readable format.
  • Right to Object: Object to our processing of your information, particularly for direct marketing.
  • Right to Withdraw Consent: Withdraw your consent at any time where processing is based on consent.

To exercise these rights, please contact our Privacy Officer using the details in Section 13. We will respond in accordance with applicable law.

9. Handling of Information from Your Customers (DatSOR as Data Processor)

This is a critical section for clarity and legal compliance, especially regarding LATAM End-Customers:

  • When DatSOR processes Customer Data (the chat conversations between your End-Customers and our AI agents), we act as a Data Processor on your behalf. You, our Client, are the Data Controller.
  • Your Responsibilities as Data Controller:
    • You are solely responsible for complying with the data protection laws applicable to your business and your End-Customers (e.g., LGPD, LFPDPPP, etc.).
    • You must have a valid legal basis (such as obtaining necessary consent from End-Customers or relying on legitimate interests) to collect their data via WhatsApp/Instagram/Web Chat and to share it with DatSOR for processing by AI agents.
    • You are responsible for providing your End-Customers with appropriate privacy notices (e.g., within your welcome message or linking to your own privacy policy) informing them about the use of AI agents, how their data is collected and processed, and by whom (mentioning DatSOR as a processor).
    • You are responsible for handling requests from your End-Customers regarding their data rights (e.g., requests for access, deletion, objection).
  • DatSOR’s Responsibilities as Data Processor: We will process Customer Data only according to your documented instructions, as outlined in these Terms, our Privacy Policy, and your Service Agreement (which may include a Data Processing Addendum – DPA). We will assist you, to the extent required by applicable data protection laws and our agreement, in fulfilling your obligations, such as responding to End-Customer data rights requests or cooperating with supervisory authorities.

10. Third-Party Websites

Our Website may contain links to websites not operated by DatSOR. This Privacy Policy applies only to information collected by DatSOR. We are not responsible for the privacy practices of third-party websites.

11. Children’s Privacy

Our Service and Website are not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our Website or through other appropriate communication channels.

13. Contact Us

If you have any questions about this Privacy Policy, our data practices, or wish to exercise your rights regarding your personal information, please contact us:DatSOR
Email:info@datsor.com