Privacy Policy

This Privacy Policy explains how Contestalia collects, uses, and shares personal data. It applies to our website and dashboard, and to the AI assistant that answers, qualifies, and books leads on behalf of the businesses that use Contestalia.

Contestalia is operated by DonQuijotech LLC, a Florida limited liability company, 910 West Ave, Apt 904, Miami Beach, FL 33139, USA. Contact: support@contestalia.com.

1. Our two roles

• For the account data of the businesses that use Contestalia, we act as a data controller.
• For the leads and end-users that a business's assistant talks to, we act as a service provider / data processor on that business's behalf. The business decides what data is collected and why; we process it under our agreement with them. If you are an end-user, please also see that business's own privacy notice.

2. Data we collect

From businesses (our customers)

• Account and contact details (name, email, organization, role).
• Configuration you enter (business profile, services, knowledge, assistant identity).
• Billing details, processed by our payment provider (we do not store full card numbers).

From leads / end-users (on behalf of a business)

• Contact details you provide — name, phone number, email.
• The content of your conversation with the assistant across the web form, chat widget, SMS, and WhatsApp, plus metadata such as timestamps and channel.
• Anything else you choose to share in the conversation.

Automatically

• Technical and log data (e.g. IP address, device/browser info, and app usage).
• Cookies and similar technologies — see our Cookie Policy.

Health information. The Service is for the commercial management of leads only. It is not designed to collect, process, or store protected health information (PHI) or other health data, and businesses agree not to enter it or allow it to be entered through the Service. Where a business uses an external intake or evaluation form, that information is submitted directly to that third party — it is not stored by Contestalia. Please do not share sensitive health details in the conversation.

3. How we use data

• To operate and provide the Service and generate the assistant's replies.
• To qualify and route leads, book meetings, and send messages on the channels above.
• To process billing, provide support, keep the Service secure, and prevent abuse.
• To maintain and improve the Service.
• To comply with legal obligations.

We do not sell personal data. We do not use the content of conversations to train third-party AI models — our AI and search providers process data only to return a result for that request.

4. Legal bases

Where a privacy law such as the GDPR applies and we act as a controller, we rely on: performance of a contract; our legitimate interests in operating and securing the Service; your consent where required (e.g. certain marketing messages); and legal obligations. For lead/end-user data we process as a service provider, the business customer is responsible for establishing the lawful basis and for obtaining any required consent to be contacted.

5. Messaging consent and opt-out

When you submit a lead form or start a conversation, you consent to be contacted by the relevant business's assistant on the channel you used (SMS, WhatsApp, chat). You can opt out of SMS/WhatsApp at any time by replying STOP, or by asking to be removed.

6. Sharing and subprocessors

We share data with service providers that help us run the Service, under appropriate data-protection terms. Current subprocessors:

We may also share data with the business customer whose assistant you contacted, and where required by law or to protect rights and safety. In a business transfer (merger, acquisition), data may be transferred as part of that transaction.

7. International transfers

Some providers above process data in the United States and other countries. Where we transfer personal data internationally, we rely on appropriate safeguards such as Standard Contractual Clauses or the providers' equivalent mechanisms.

8. Retention

We keep account data for as long as the account is active and as needed to provide the Service, then delete or anonymize it unless a longer period is required by law. Lead/end-user data is retained according to the instructions of the business customer, and on account termination is exported and then deleted as set out in our customer agreement.

9. Your rights

Depending on where you live, you may have the right to access, correct, delete, restrict, object to, or port your personal data, and to withdraw consent. If you are in California, you may request to know and delete your data and to opt out of "sale/sharing" (we do not sell data), without discrimination.

To exercise these rights, contact support@contestalia.com. If your data was collected by an assistant on behalf of a business, we will route your request to that business as the responsible party. You may also lodge a complaint with your local data-protection authority.

10. Children

The Service is not directed to children and is not intended for anyone under 18. We do not knowingly collect data from children.

11. Changes

We may update this Policy. We will post the new version here and update the effective date; significant changes may be notified through the Service.

12. Contact

DonQuijotech LLC · 910 West Ave, Apt 904, Miami Beach, FL 33139, USA · support@contestalia.com