Privacy policy

CRAI Global Solutions ("CRAI", "we") is a company based in Costa Rica that provides software development, automation, chatbots and digital marketing. This policy explains what personal data we process, why, and what your rights are, in accordance with Costa Rica's Law No. 8968 on the Protection of Individuals with regard to the Processing of their Personal Data.

Privacy contact: contacto@craiglobal.co.cr.

• Contact details you give us through the website form or by message: name, email, phone number and company.
• Messages you send us through WhatsApp, Facebook Messenger, Instagram or the website chat, together with your profile name and your number or user ID on that platform.
• Basic technical data about how the site is used (for example, browser type), only so that it works properly.

• To answer your questions and give you information about our services.
• To handle conversations with automated assistants (chatbots) and with people on our team.
• To prepare proposals, follow up on projects and provide support.
• To comply with legal obligations.

We do not sell or rent your personal data.

We use Meta's official platforms (WhatsApp Business Platform, Messenger and Instagram) to communicate with you. When you write to us through those channels, Meta processes the messages under its own policies, and we receive them in our customer service platform in order to reply.

When a client company connects its WhatsApp Business, Facebook or Instagram account to our platform, we only access the data needed to manage its conversations on its behalf (messages, contacts and account settings), with the permission that company grants in Meta and can withdraw at any time.

Only with providers we need in order to operate, and only for that purpose:

• Meta Platforms, to send and receive messages through its platforms.
• Clouding.io (Cloudi NextGen S.L., Spain), the server provider that hosts our platform.
• Authorities, when required by law.

If a public authority (judicial, police or administrative) asks us for users' personal data:

1. We review its legality: we check that the request is valid, comes from a competent authority and has a sufficient legal basis.
2. We challenge unlawful requests: if a request is unlawful, excessive or does not meet the legal requirements, we reject it or challenge it through the appropriate channels.
3. We hand over the minimum: we only share the information strictly necessary to comply with the request.
4. We document every case: we record each request, our response, the legal reasoning and the parties involved.

Where the law allows it, we will inform the client company or the affected user before handing over their data.

We keep data while there is a business relationship or an active conversation, and afterwards for as long as needed to meet legal obligations. Then we delete or anonymize it.

We use encrypted connections (HTTPS), access restricted to authorized staff and servers with reasonable security measures to prevent loss or unauthorized access.

You can ask at any time to access, correct or delete your data, or to withdraw your consent. Write to us at contacto@craiglobal.co.cr and we will reply within 5 business days at most.

To ask us to delete your data:

1. Send an email to contacto@craiglobal.co.cr with the subject "Delete my data".
2. Tell us the channel you used to contact us (WhatsApp, Facebook, Instagram, website) and your number or username on that channel.
3. We will delete your data and conversations from our platform and confirm by email within 30 days at most.

If you connected your Facebook or Instagram account to our app, you can also remove its access from your account settings, under "Business integrations".

If we change this policy, we will publish the new version on this page with its update date. The Spanish version is the reference text.