Privacy Policy

1. Who is the data controller

Xerix is a product operated by Rodrigo Alejandro Camacho (registered name CAMACHO RODRIGO ALEJANDRO), CUIT 20-29328374-6, with address at Av. Cabildo 1324, Ciudad Autónoma de Buenos Aires, Argentina.

For any question about your data, write to us at hola@xerix.ar, call +54 11 3061-3429, or use the contact form on the site.

2. Scope and roles

This policy covers two distinct situations, with different legal roles:

• Visitors to xerix.ar: when you browse or write to us through the form, Xerix is the controller of that data.
• End customers of the bot: when a business uses Xerix to serve its own customers, Xerix processes those messages as a processor on behalf of and under the instructions of that business, which is the controller of that data.

3. What data we process

We process different data depending on the case:

• Website: the name, email and message you leave in the contact form, plus minimal technical data (for example, your preferred language).
• Bot, on behalf of the client business: message content, phone number, contact name or identifier, and conversation history.

4. For what purpose

We use the data to:

• Answer your inquiries when you write to us.
• Operate the service: read incoming messages, generate reply drafts with artificial intelligence, and assist the business team in responding.
• Personalize and improve the assistant solely within your own account (a per-client isolated model that learns your style). We do not use the content of your messages to train general or cross-client models, or for advertising, and our AI provider is contractually prohibited from training its models on it.
• We do not use your data to sell it or for advertising.

5. Legal basis for processing

We process your data on the basis of your consent and of the commercial relationship between us. In the case of the bot, processing is carried out following the instructions of the client business, which is the party that obtains consent from its own contacts.

6. Who we share it with

We share data only with providers that help us deliver the service, and only what is necessary:

• The WhatsApp Business Platform (and, in the future, other messaging channels) as the channel for messages.
• The artificial intelligence provider that generates the drafts.
• The hosting provider for the infrastructure.
• We do not sell or rent your data to third parties.

7. International transfers

Some of these providers process data on servers located outside Argentina. When that happens, we take reasonable measures so that your data remains protected with an adequate level of safeguard.

8. How long we keep it

We keep data while the client business account is active and while it is necessary for the stated purpose. Upon a deletion request, we remove it. Technical records (logs) are kept for a limited period, between 30 and 90 days, for security reasons.

9. Security

We apply technical and organizational measures to protect your data: encryption in transit and at rest, restricted access control, and isolation of each client's information. No system is infallible, but we work to minimize the risks.

10. Your rights

As the data subject, you have the right to access, rectify, update and delete your personal information, in accordance with Argentina's Personal Data Protection Law No. 25.326.

You can exercise them by writing to us at hola@xerix.ar or through the contact form. We respond to access requests within 10 calendar days, and to rectification, update or deletion requests within 5 business days.

The Agency for Access to Public Information (AAIP), the enforcement authority of Law 25.326, is the body before which you may file a complaint if you believe your rights were not addressed.

11. How to request deletion of your data

You can request that we delete your data at any time:

• Fill out the contact form on the site indicating "data deletion", or write to us at hola@xerix.ar.
• We process the request and confirm deletion within the legal timeframes stated above.

12. Minors

Xerix is not directed at minors. The business that uses Xerix is responsible for the age and consent of its contacts. If we are informed that we are processing a minor's data without proper authorization, we delete it.

13. Changes to this policy

We may update this policy. When we do, we will publish the new version on this same page, with its update date.

14. Connected accounts: Google, Microsoft and Meta

When you connect a Gmail (Google), Outlook (Microsoft) or WhatsApp (Meta) account, Xerix accesses that account's messages through each provider's official APIs, with your explicit authorization, and solely to provide the service described in this policy. Messages sent or received through WhatsApp are also processed by WhatsApp/Meta under the WhatsApp Business Terms and Privacy Policy.

• Xerix's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
• We use data from your connected accounts only for user-facing product features (reading, organizing and preparing replies). We do not use it for advertising and we do not sell it, and a person only accesses specific messages with your consent or where required by law.
• You can revoke access at any time from your Google, Microsoft or Meta account; from that point Xerix stops accessing that data.

15. Independence from Meta, WhatsApp and Instagram

Xerix is an independent product operated by Rodrigo Alejandro Camacho. It is not affiliated with, associated with, authorized, endorsed, or sponsored by Meta Platforms, Inc., WhatsApp LLC, or Instagram. "WhatsApp" and "Instagram" are trademarks of Meta Platforms, Inc. Xerix uses the WhatsApp Business Platform solely to integrate with these services.

16. Contact

For any question about this policy or about your personal data, write to us at hola@xerix.ar or use the contact form on the site.