Darto Privacy Policy
Last update: 2025
Owner: David Chicano
Contact email: [email protected]
Country: Spain
Darto is a platform that allows businesses to manage WhatsApp Business conversations using automation and AI. We only process personal data to provide the service and in accordance with GDPR.
1. Data we process
- Business data: name, email and public information about the company.
- Operational data: messages sent through WhatsApp Business.
- Technical data: logs, IP addresses and internal metrics.
2. Purpose of the processing
- Provide the contracted service.
- Process customer messages and generate AI-powered responses.
- Improve the performance and security of the platform.
3. Legal basis
- Execution of the contract between the business and Darto.
- Consent granted during signup.
- Legitimate interest to guarantee security and technical operation.
4. Data processors
To run Darto we use providers that handle data on our behalf:
- Supabase (infrastructure and database) – EU/US
- OpenAI, DeepSeek, Google Gemini, Anthropic (AI models) – US/Asia
- Meta Platforms (WhatsApp Business API)
We only share the data that is strictly necessary to provide the service.
5. International transfers
When data leaves the EU we apply Standard Contractual Clauses (SCC) and safeguards such as encryption and minimization.
6. User rights
You can request access, rectification, deletion or portability by writing to [email protected].
7. Data retention
Data is kept while the account remains active or as long as required to meet legal obligations.
8. Security
We implement TLS encryption, access controls and safeguards to protect data from unauthorized access.
9. Changes to this policy
We will publish any updates at this same URL: https://www.darto.es/privacy