Legal · Sintonai
Version of 28 October 2026 (replaces the version of 23 July 2025)
This Privacy Policy explains how SIA "Sintonai" ("Sintonai") collects, uses, retains and protects personal data on its website (https://sintonai.com) and in its customer-service services for businesses, including the WhatsApp AI Receptionist, in accordance with Regulation (EU) 2016/679 (GDPR) and Latvian data protection law.
SIA "Sintonai"
Registration no.: 40203665755
VAT no.: LV40203665755
Registered office: Ganību dambis 26A, Rīga, LV-1005, Latvia
Email: manuel@sintonai.com
We apply lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability.
Technical and organisational measures: encryption in transit, per-company access restriction, secrets (such as WhatsApp access tokens) encrypted at rest, access control for staff bound by confidentiality, and backups by the database provider.
When you visit the website, contact us or subscribe as a Customer, Sintonai is the controller of this data:
Purposes: answering enquiries, providing and invoicing the service, support, service notifications, improving the website and, with consent or legitimate interest, marketing communications you can opt out of at any time.
When a Customer connects its WhatsApp Business number to Sintonai (through Meta's Embedded Signup, or with a token from its own account), Sintonai receives the following data from Meta's WhatsApp Business Platform:
Why: only to provide the service the Customer subscribes to: receiving its End customers' messages, preparing and sending replies using the Customer's business information, handing the conversation over to its staff when needed, showing the conversations in its dashboard, and managing its templates and phone number. The agent only handles matters related to the Customer's business; it is not a general-purpose assistant.
What we do not do: we do not sell or rent this data, we do not use it for advertising or to build commercial profiles, we do not share it with third parties other than the sub-processors in section 9, and we do not use it to train AI models. AI providers process it under their business API terms, which exclude using it to train their models.
How long: conversations are kept for 12 months and then deleted. The WhatsApp token and identifiers are kept while the number is connected and deleted within 30 days after the Customer disconnects it or the contract ends. When the contract ends we delete all Customer data within 30 days, except what the law requires us to keep (for example, invoices).
Who we share it with: Meta (which carries the WhatsApp messages) and the sub-processors in section 9, only as needed to provide the service; and authorities where required by law.
Use of WhatsApp is also subject to WhatsApp's and Meta's terms and privacy policies, which the Customer accepts when creating its WhatsApp Business account.
For the personal data of End customers (the people who message the Customer), the Customer is the controller and Sintonai acts as processor under Article 28 GDPR. Sintonai processes that data only on the Customer's documented instructions (its agent configuration and the contract), under confidentiality, with the security measures in section 5, helping the Customer respond to data subject requests and notifying it of any breach without undue delay.
The full terms are in our data processing agreement, part of the self-service terms. Customers with a custom contract have their own data processing agreement, which prevails.
If you are an End customer and want to exercise your rights, you can contact the business you spoke to or Sintonai directly: we will pass your request on to the business and help it respond.
We use the following providers to deliver the service, each under a data processing agreement:
The voice providers (Twilio and ElevenLabs) are only involved if the Customer uses the phone channel. Where a provider is outside the European Economic Area, transfers rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. We will notify Customers 30 days in advance of any change to this list.
Sintonai's services are intended for businesses and professionals over 18. We do not knowingly process data of children under 14 without parental or guardian consent (Art. 8 GDPR).
You have the right to access, rectify and erase your data, to restrict or object to its processing, to data portability and to withdraw consent at any time. You may also lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv).
To exercise them, write to manuel@sintonai.com. Instructions for requesting deletion of your data, including WhatsApp data, and for disconnecting your number are at sintonai.com/en/data-deletion. We reply within one month at most and delete within 30 days.
We may update this policy. The current version and its date will always be published here, and we will notify Customers of material changes.
Last updated: 28 October 2026
Let's talk
Book a 15-minute call with Ricardo or Manuel, or message us on WhatsApp and an AI agent replies straight away. Leave your details and we'll get back to you within 24 business hours.