Privacy Policy

Last updated: 19 de enero de 2026

1. Data controller

The controller of the personal data collected through this platform is Carmelo Jesús Chery Martino, a natural person, who operates the commercial establishment FromChats under Operating Notice No. 8-878-783-2026-574428213 of the Ministry of Commerce and Industry of the Republic of Panama, with address at Distrito de La Chorrera, provincia de Panamá Oeste, República de Panamá.

Contact email for data-protection matters: soporte@fromchats.com.

This policy is governed by Law 81 of 26 March 2019 on the protection of personal data of the Republic of Panama and its implementing regulations. By using our services you accept the practices described here. If you do not agree with them, please do not use the platform.

2. Information we collect

2.1 Account information

• Full name
• Email address
• Phone number
• Authentication data (encrypted password, OAuth tokens)

2.2 Affiliated business information

• Business name and type
• Business contact details
• Location and address
• Operating hours
• Services offered and prices
• Bank details for the settlement of funds

2.3 End client information

• Client name
• WhatsApp phone number or other contact channel
• Conversation history
• Service preferences and requests
• Appointment and booking data

2.4 Messaging data

• Content of the messages sent and received
• Message metadata (date, time, delivery status)
• Shared location, when the user voluntarily provides it

2.5 Payment-related data

FromChats does not store on its servers the full card number, expiration date or security code (CVV) of any payment method. That data is transmitted encrypted directly to the authorized payment service provider, which acts as an independent controller of its processing.

For each transaction we keep only:

• The transaction identifier assigned by the processor
• The amount, currency and date
• The payment status (approved, declined, refunded)
• The type of payment method and, when provided by the processor, the last four digits
• The affiliated business and booking associated with the charge

3. How we use your information

• Provide the service: enable communication between businesses and their clients through the connected chat channels.
• Manage bookings: allow the scheduling, confirmation and administration of appointments.
• Process payments: handle end clients' charges, settle funds to the affiliated business and manage refunds and disputes.
• Automated processing: generate automated responses through artificial-intelligence systems.
• Fraud prevention: detect and prevent fraudulent or unauthorized use of the platform and payment methods.
• Service improvement: analyze aggregate usage to improve features.
• Communications: send relevant notifications about the service.
• Legal compliance: meet legal, tax and regulatory obligations.

4. Sharing data with third parties

We share information with the following providers, only to the extent necessary to provide the service:

• Meta / WhatsApp: to send and receive messages through the WhatsApp Business API.
• Authorized payment service providers: to process charges, refunds and settlements, and to meet their fraud-prevention and anti-money-laundering obligations.
• OpenAI: for natural-language processing and the generation of automated responses.
• Google: for OAuth authentication, mapping services and website usage statistics through Google Analytics.
• Infrastructure providers: for data hosting, storage and processing.
• Competent authorities: where there is a valid legal requirement.

We do not sell, rent or transfer your personal information to third parties for advertising or marketing purposes.

Some of these providers are located outside the Republic of Panama, so your data may be subject to international transfer. In those cases we require contractual guarantees of confidentiality and security equivalent to those provided by Panamanian law.

5. Data security

• Encryption of data in transit via HTTPS/TLS
• Passwords stored with secure hash functions (bcrypt)
• Access tokens with expiration
• Role-based access control
• Access monitoring and auditing

No security measure is infallible. In the event of a security breach that significantly affects your personal data, we will notify you through the registered contact method within the timeframes required by applicable regulations.

6. Data retention

• We keep your information while your account is active or while it is necessary to provide you the service.
• Conversation data is retained to maintain the client's history and provide service continuity.
• Transaction and billing records are kept for the period required by Panamanian tax and fraud-prevention legislation, even after the account is closed.
• You may request the deletion of your data at any time by writing to us. We will handle it within 30 days of your request, except for information we are required to keep by legal obligation.

7. Your rights

Under Law 81 of 2019, you have the right to:

• Access: request a copy of your personal data.
• Rectification: correct inaccurate or incomplete data.
• Cancellation or deletion: request the erasure of your personal data.
• Portability: receive your data in a structured, commonly used format.
• Objection: object to the processing of your data in certain circumstances.
• Withdrawal of consent: revoke your consent at any time, with no retroactive effect.

To exercise any of these rights, write to soporte@fromchats.com. We will respond within the legal timeframes. If you believe your request was not handled properly, you may turn to the National Authority for Transparency and Access to Information (ANTAI) of the Republic of Panama.

8. Use of the WhatsApp Business API

Our service uses Meta's WhatsApp Business API. When you interact with a business through our platform:

• Your messages are processed by Meta in accordance with that company's privacy policy.
• The affiliated business can see and reply to your messages.
• Automated responses may be used to speed up service.
• Conversation data is stored to provide service continuity.

9. Cookies and similar technologies

We use cookies and similar technologies for two purposes:

• Necessary cookies: they keep your session logged in, protect the security of the platform and remember preferences such as language or visual theme. The service cannot operate without them.
• Analytics cookies: we use Google Analytics to understand in aggregate how the site is used (pages visited, visit duration, device type and country) so that we can improve it. These cookies are set by Google as a third party. We do not use them to identify you individually, and we do not send Google your name, email address, phone number or the content of your conversations.

We do not use third-party advertising cookies or tracking cookies for marketing purposes. You can set your browser to reject cookies, or install the Google Analytics opt-out add-on available at tools.google.com/dlpage/gaoptout. Please note that rejecting necessary cookies may affect the operation of the platform.

10. Minors

The platform is not directed at persons under 18 years of age and we do not knowingly collect personal data from minors. If we detect that we have collected data from a minor without the authorization of the person holding parental authority, we will delete it.

11. Changes to this policy

We may update this policy from time to time. We will notify significant changes by publishing the new version on this page and updating the last-updated date. We recommend reviewing it regularly.

12. Contact