Privacy Policy
This policy explains what data DarkFunnels processes, what for, with which providers, and what control you (and your customers) have. It is written to be read.
This is a courtesy translation. The binding version is the Spanish one at darkfunnels.ai/privacidad; if the two differ, the Spanish text prevails.
1. The two roles
Two sets of data live side by side in DarkFunnels. The data of your account (yours and your team’s), for which DarkFunnels (DECHINAAPERU.COM EIRL (RUC 20604387397), located at Av. Don Diego de Día 228, Of. 201, Santiago de Surco, Lima, Peru) is the data controller. And the data of your customers, which flows through your WhatsApp conversations: for that data your business is the controller, deciding what is captured and what for; we process it on your instructions, for the sole purpose of providing you the service.
2. What data we process
- Your account: name, email, phone, company and billing details.
- Your operation: WhatsApp conversations (text, audio, images, documents and locations), contacts and the variables your agent captures, orders, payment receipts your customers send, files in your Library, appointments and shipments.
- Technical: activity logs, usage metrics and an audit trail of actions.
- From Meta, only if you connect your ad account: the figures of your ads and of the posts they use (see “Meta data”).
3. What we use them for
To run the service: so your agent answers from your own sources, your team sees the inbox, payments get reconciled, shipments go out and usage is measured. Also for security (isolating accounts, detecting abuse) and to support you when you write to us. We do not sell your data or your customers’ data, and we do not use it to train AI models.
4. AI and providers
To generate each reply, the relevant content of the conversation is processed with AI model providers (text generation, vision to read payment receipts, audio transcription) under API terms that do not allow your content to be used to train their general models. The infrastructure runs on international cloud providers (for example Supabase and Railway), so data may be stored outside Peru, under those providers’ data protection agreements.
If you connect your own AI assistant
It is optional: you turn it on from Customize → AI assistants so that Claude, ChatGPT, Codex or another assistant can operate your account. When you authorize it:
- Your assistant works in a single company —the one active when you connected it— and with the same permissions your account has there.
- What your assistant reads through the connection (for example, your customers’ conversations and records, your playbook or your catalog) leaves optiMind for that assistant’s provider (Anthropic, OpenAI or another), under your own relationship with them and their terms. Your customers’ phone numbers and ID document numbers travel masked, unless you ask otherwise in the connection URL.
- We log every call your assistant makes in an audit trail: who, in which company, with which assistant, which tool, when, whether it succeeded or the type of error, and how long it took. We do not store the content of what it asked or received; of the data it sent, only a cryptographic fingerprint remains, which cannot be used to recover it. It is visible to the people who administer your company and, for support and security, to our team.
- If your assistant reports something the connection could not handle, we keep the text of that request to build what is missing; we instruct it not to include your customers’ personal data.
- You can cut off access at any time with Revoke (Customize → AI assistants): it takes effect within seconds. Logging out of the panel does not disconnect it.
5. Meta data (Facebook and Instagram)
If you connect your Meta ad account in DarkFunnels (Sales → Ads → Connect Meta), with the permissions you accept on Meta we read, once a day:
- With
ads_read: each ad’s spend, impressions, clicks and engagement (reactions, comments, shares and saves), by day and by country; the names of your ads, ad sets and campaigns; and each ad’s thumbnail and video, of which we keep a copy to show them to you. - With
pages_show_list,pages_read_engagementandpages_read_user_content: the list of Pages you manage, to find the post each ad uses, and that post’s total reactions, comments and shares. For comments we only count how many there are: we don’t store what they say or who wrote them. - The name and Facebook ID of whoever connected, and the name, ID and currency of the connected ad accounts.
We use them only to show you, inside your DarkFunnels account, what each chat, each qualified lead and each sale brought by your click-to-WhatsApp ads cost. Only the people in your business with access to Sales see them. We don’t create, change or publish anything on Meta, we don’t sell this data or share it with other companies, and we don’t use it to train AI models. The permission Meta gives you is stored encrypted.
Disconnect and delete. You can disconnect at any time from DarkFunnels (Sales → Ads → Meta connected → Disconnect): we stop reading your accounts and delete the stored permission. To also remove its access on Meta’s side, remove DarkFunnels from your Facebook business integrations. To have us delete the ad data we already stored, write to soporte@darkfunnels.ai from your account’s email, naming your business: we delete it and confirm it to you.
6. Security
Each company is isolated at the database level (multi-tenant architecture with row-level access rules); sensitive actions are recorded in an append-only audit trail that is never rewritten; access inside your account is decided by you, per person; and traffic travels encrypted. No system is infallible: if an incident were to affect your data, we will tell you and act to contain it.
7. How long we keep them
While your account exists, your data stays, even if your subscription lapses, so you can come back without starting over. You can request permanent deletion of your account or of specific data by writing to soporte@darkfunnels.ai; we carry it out, except for records the law requires us to keep (billing documents, for instance).
8. Your customers’ control
If one of your customers writes “stop messaging me” (or something equivalent), the agent automatically stops writing to them and the preference is recorded. That preference is respected until the customer expressly asks to receive messages again. If an end customer wants to exercise rights over data your business captured, they should address your business as the controller; if they write to us, we channel it to you.
9. Your rights
You may exercise your rights of access, rectification, cancellation and objection under Peru’s Law No. 29733, the Personal Data Protection Act, and its regulations. Write to soporte@darkfunnels.ai from your account’s email address and we will respond within the legal deadlines.
10. Cookies
darkfunnels.ai (this site) sets no tracking cookies. If you arrive with campaign parameters (for example utm_source), they are kept in your browser’s session storage only to attribute your sign-up. The application (optimind.darkfunnels.ai) uses the cookies and tokens strictly necessary to keep your session open.
11. Minors
DarkFunnels is a service for businesses. It is not directed at minors and we do not knowingly collect their data.
12. Changes and contact
If this policy changes, we publish the new version here with its date and give notice through the platform’s channels when the change is material. Questions? soporte@darkfunnels.ai.