Eva by Solulith Privacy Policy

Contact and account information, such as your name, business name, email address, phone number, WhatsApp number, and role.

Business and configuration information you choose to provide so Eva can understand your operation, such as opening hours, services, products, prices, availability, policies, FAQs, workflows, and integration preferences.

Messages and interaction content, including WhatsApp messages, website form submissions, support requests, files, images, audio, and other content you send to Eva or ask Eva to process.

Technical and usage information, such as device/browser data, IP address, timestamps, logs, message delivery status, automation events, and diagnostics used to operate and secure the service.

Integration data, when you authorize it, from tools such as calendars, spreadsheets, CRMs, payment links, scheduling systems, websites, or other business systems connected to Eva.

To provide, configure, personalize, and improve Eva and related Solulith services.

To send and receive WhatsApp, email, web, or integration-based communications at your direction or with appropriate consent.

To answer questions, route requests, schedule appointments, create records, trigger workflows, and perform other business tasks requested by you or your customers.

To monitor reliability, debug issues, prevent abuse, protect accounts, audit actions, and maintain service security.

To comply with legal obligations, platform rules, developer policies, and enforceable requests from competent authorities.

Eva may use WhatsApp Business Platform and related Meta services to exchange messages between a business and its customers. WhatsApp and Meta process information under their own terms and privacy policies.

Businesses using Eva are responsible for having the notices, permissions, opt-ins, and consents required by applicable law before sending messages to people on WhatsApp or any other channel.

If a person asks to stop receiving WhatsApp messages, the business must honor that request. Users can also block or report a business directly in WhatsApp.

We do not use WhatsApp user data obtained through Eva for unrelated advertising or for purposes beyond operating, supporting, securing, and improving the requested messaging experience.

Depending on the context, we process personal information with your consent, to perform a contract, to pursue legitimate interests such as service security and improvement, or to comply with legal obligations.

Where a customer communicates with a business using Eva, that business is responsible for determining and documenting the appropriate legal basis for its own communications and data processing.

With service providers that help us host, secure, monitor, message, automate, analyze, or support the service, subject to appropriate confidentiality and security obligations.

With messaging platforms, AI infrastructure providers, cloud providers, integration providers, and business tools only as needed to deliver the requested service.

With the business or workspace that authorized Eva when information relates to that business's account, customers, workflows, or support requests.

When required to comply with law, protect rights and safety, prevent fraud or abuse, or enforce our agreements.

We do not sell personal information.

Eva uses automated systems and AI models to understand messages, draft responses, classify requests, summarize context, and execute approved workflows.

AI outputs can be imperfect. Businesses should configure approval rules, escalation paths, and safeguards appropriate to their industry and risk level.

We apply access controls and operational safeguards to reduce unauthorized access, cross-customer data exposure, and inappropriate use of business or customer data.

Do not send full payment card numbers, financial account numbers, government ID numbers, passwords, medical records, or other highly sensitive information to Eva unless a specific written agreement and approved workflow covers that use case.

Eva is not intended to provide medical, legal, financial, or other regulated professional advice unless a separate agreement, compliance review, and human oversight process has been established.

We retain information for as long as reasonably necessary to provide the service, maintain records, resolve disputes, secure systems, comply with law, and support the business purposes described in this policy.

Retention periods vary by data type, customer configuration, legal requirements, and operational needs. We delete or anonymize information when it is no longer needed, unless retention is required or permitted by law.

You may request deletion of personal information associated with Eva by emailing gon@solulith.com with the subject line “Data deletion request”. Include the phone number, email address, business name, or workspace associated with your request so we can locate the relevant records.

If you are a customer of a business that uses Eva, you may also contact that business directly to request access, correction, deletion, or opt-out. We may need to coordinate with that business because it may control the relevant customer relationship and records.

We may verify your identity before completing a request. We will delete or de-identify applicable information unless we need to retain it for security, legal compliance, dispute resolution, fraud prevention, or another lawful purpose.

For Meta app settings, this section may be used as the user data deletion instructions for Eva.

We use administrative, technical, and organizational measures designed to protect information against unauthorized access, loss, misuse, alteration, and disclosure.

No system is perfectly secure. If you believe information has been compromised, contact us promptly at gon@solulith.com.

Solulith operates from Argentina and may use infrastructure and service providers in other countries. Your information may be processed in countries with data protection laws different from those where you live.

Where required, we use appropriate safeguards for international transfers of personal information.

Eva is intended for business use and is not directed to children. We do not knowingly collect personal information from children under the age required by applicable law without appropriate authorization.

We may update this Privacy Policy from time to time. The updated version will be posted on this page with a new effective date. Material changes may be communicated through additional channels when appropriate.