Privacy Policy

1. Roles and scope

For contact, commercial and website-related information where Naten decides the purpose and means of processing, Naten acts as the data controller.

When Naten provides automation services using data supplied through a customer's systems or authorized integrations, the customer is generally the data controller and Naten acts as a service provider or processor. In that role, Naten processes personal data only on the customer's documented instructions and to provide the agreed service.

2. Customer-authorized integrations

The categories of data depend on the integration and automation configured by the customer. They can include business contact details, operational records, documents, requests, transaction-related information and system metadata required to run, secure and support the automation.

Naten does not access a customer's systems or messages unless that customer has authorized the relevant integration and configuration.

3. WhatsApp Business Platform data

Where a customer connects the WhatsApp Business Platform to a Naten solution, Naten may process information made available through the official WhatsApp Cloud API. Depending on the customer's configuration and a user's interaction, this can include:

• WhatsApp identifiers, display names and profile information made available by the platform;
• Message content and attachments, such as images, documents, audio or other media;
• Message timestamps, delivery or read status, conversation metadata and technical identifiers; and
• Information that a user voluntarily provides during a conversation.

This information is used only to receive, route, classify, respond to or otherwise automate the business process that the customer has configured. Naten does not use WhatsApp data for unrelated advertising or sell it to third parties.

4. AI-assisted processing

Some automations use AI-assisted features to extract information, classify content, draft responses or support workflow decisions. These features are designed to assist a configured process and may produce incomplete or inaccurate outputs. Customers remain responsible for determining the appropriate human review, approval and use of automated outputs in their operations.

5. Third-party platforms

Customer-authorized integrations may involve third-party platforms such as Meta and WhatsApp. Those platforms process data under their own terms and privacy policies. For information about Meta's handling of data, refer to Meta's Privacy Policy.

6. Retention and deletion

Naten retains personal data only for as long as needed to provide the relevant service, maintain security and support, meet contractual requirements, or comply with applicable obligations. Retention settings may also be determined by the customer that controls the relevant automation.

Instructions for requesting deletion are available at naten.ai/data-deletion.

7. Safeguards

Naten applies technical and organizational safeguards appropriate to the service and the nature of the data processed. These may include access controls, authentication, least-privilege access, encrypted communications, logging and review of service configurations. No online service can guarantee absolute security.

8. Your rights and requests

Depending on applicable law, individuals may have rights to request access, correction, deletion, restriction, objection or portability of their personal data.

If the data was processed for one of our customers, please contact that customer first, as they control the purpose of the processing. Naten will assist its customers in responding to valid requests where required. For data that Naten controls directly, contact us at admin@naten.ai.

9. Changes to this policy

We may update this policy when our services or legal requirements change. The current version will be published on this page with its updated date.

10. Contact

For privacy-related questions or requests, contact admin@naten.ai.