Privacy Policy

Última actualización:

Privacy Policy

Holder: Edilberto Severiche Socore
ID: 9056184 SC
NIT: 9056184011
Business Name: OS2 Soluciones Digitales
Address: Grover Arancibia #5, 3ro de Anillo Interior, Santa Cruz de la Sierra, Bolivia
Email: contacto@os2.com.bo
Phone: +591 63318934

1. Information We Collect

We collect only the information necessary to provide our services:

  • Full name and contact data (email, telephone, WhatsApp)
  • Information about the contracting company or business
  • WhatsApp conversations processed by our AI agents
  • Usage data of implemented systems

2. How We Use Your Information

We use your information exclusively for:

  • Implementing and maintaining contracted systems
  • Contacting you about your active service
  • Training your team in tool usage
  • Improving the quality of our services

We never use your information for advertising purposes or share it with third parties without your explicit consent.

3. Storage and Security

All data is stored on dedicated servers located in the European Union (Hetzner, Helsinki) with:

  • AES-256 encryption at rest (FIPS 140-2 compliant)
  • TLS 1.2+ encryption in transit
  • Cryptographic key protection in HSM (Hardware Security Module)
  • Quarterly cryptographic key rotation
  • Automatic daily encrypted backups
  • Access restricted by unique credentials
  • 24/7 monitoring

4. Data Processed via WhatsApp Business API

Messages processed by our AI agents through Meta/WhatsApp’s official API are used exclusively to generate automatic responses on behalf of the contracting business.

OS2 Soluciones Digitales acts as a Technology Provider (“Business Solution Provider”) and complies with WhatsApp Business API usage policies of Meta Platforms, Inc.

We do not store conversation content beyond the period necessary for contracted service functionality.

5. Open Source Software

Systems implemented by OS2 Soluciones Digitales use open source software, including but not limited to: Chatwoot, Flowise, n8n, and others. The use of these tools is governed by their respective open source licenses.

Edilberto Severiche Socore guarantees that the use of these tools complies with their corresponding licenses and that client data remains under the exclusive control of the contracting party.

6. Your Rights

In accordance with Bolivian regulations and international data protection standards, you have the right to:

  • Access your stored personal data
  • Correct incorrect or outdated information
  • Request complete deletion of your data
  • Data portability in standard format

To exercise any of these rights, contact directly: contacto@os2.com.bo

7. Data Retention

Data is retained during the contract term and up to 90 days after termination, unless legal requirement dictates otherwise.

8. Changes to This Policy

We will notify any significant changes via email with at least 30 days’ notice before they come into effect.

6. Data Processing Agreement (DPA) - GDPR

OS2 Soluciones Digitales acts as a Data Processor under the terms of GDPR and Data Processing Agreement with Meta Platforms Ireland Limited.

6.1 Processing Roles

  • OS2 Soluciones Digitales = Data Processor: Processes data under direct instructions from the Client
  • Client = Data Controller: Responsible to data subjects and to Meta for compliance
  • Meta Platforms Inc. = Sub-processor: Authorized to access data to guarantee WhatsApp Business API security

6.2 Confidentiality Guarantees - NO MESSAGE STORAGE

OS2 Soluciones Digitales EXPLICITLY GUARANTEES:

  • WE DO NOT STORE any WhatsApp message content. Messages are processed in real-time exclusively to generate automatic responses on behalf of your business.
  • THERE IS NO message database. Once a message is processed to generate a response, no copy remains on OS2 servers.
  • WE DO NOT use messages to train AI models. Under no circumstances whatsoever.
  • WE DO NOT SELL or SHARE messages with third parties under any circumstance, except when required by law.

6.3 Meta’s Audit Rights

Meta Platforms Inc. has irrevocable right to:

  • Audit OS2 infrastructure at any time without prior notice
  • Access complete transaction and event logs
  • Verify compliance with WhatsApp commercial policies
  • Request security reports

OS2 guarantees complete access to logs and systems within maximum 48 hours of any official Meta request.

6.4 Data Retention Policy

  • Message content: 0 days - NOT stored
  • Session metadata (timestamps, IDs): 30 days maximum
  • Billing and client data: 1 year (tax requirement)

All data is automatically deleted upon completion of retention period.

6.5 Authorized Sub-Processors

OS2 uses the following sub-processors:

Sub-ProcessorFunctionLocationCompliance
Hetzner CloudInfrastructure and hostingHelsinki, Finland (EU)GDPR
CloudflareDNS, CDN, DDoS protectionGlobal (EU servers)GDPR / SOC2
Brevo (Sendinblue)Transactional email sendingStrasbourg, France (EU)GDPR

6.6 Regulatory Compliance

OS2 Soluciones Digitales complies with:

  • GDPR (General Data Protection Regulation) - EU Regulation
  • Standard Contractual Clauses (Schrems II) - For international data transfers
  • Bolivian Personal Data Protection Legislation
  • Meta’s Commercial Terms & Conditions for WhatsApp Business API

6.7 Contact for DPA Requests

For requests, clarifications, or reports related to Data Processing Agreement:

Email: dpa@os2.com.bo
Phone: +591 63318934
Response guaranteed: Within 24 business hours

Last updated: March 30, 2026

Hablar con Valeria