Privacy Policy

Last updated: August 21, 2026

1. Who we are

The Agento service (the Android app, the website agento.ceo and the servers behind them — together, the "Service") is operated by Yaya Tech PBC, a public benefit corporation organized in the State of California, United States of America ("Yaya Tech", "we"). Privacy contact: andre@yaya.tech.

This policy is written to comply with Peru's Personal Data Protection Law (Law No. 29733) and its Regulations (Supreme Decree No. 016-2024-JUS), and applies, as relevant, to users outside Peru as well. The Spanish version at /privacidad prevails in case of conflict.

2. Two kinds of people, two roles

• Users: business owners or managers who install the app and register an account. For their data, Yaya Tech is the data controller.
• The User's customers: people who message or pay the business. Their messages and payments reach Agento only because the User chose to connect their notifications. For this data, the User is the controller and Yaya Tech acts as a processor, on the User's instructions as described in this policy and in the Terms of Service.

If you are a customer of a business that uses Agento and have questions about your data, please contact that business first. You can also write to us and we will help route your request.

3. What we collect

3.1 Data you give us when you sign up

• Business name, country, and the business phone number, which we verify by sending a one-time code.
• Email address, if you leave it on the website (optional) or set it in the app.
• What you tell Agento about your business during the initial interview and afterwards: services, prices, hours, delivery areas, policies, catalog. You can do this by text, by voice, or by sending photos of your menu or catalog.

3.2 Data the app reads from your phone (only with your permission)

Agento requests Android's notification access permission. With that permission, and only for the apps you enable in settings, the app reads and sends to our servers:

• Messaging notifications (by default, only WhatsApp Business; you can enable others): sender name or number, message text, and the source app. Agento uses this to compose and send a reply through the notification's own "reply" action.
• Payment and banking notifications (Yape and other wallets or banks it detects): amount, currency, payer name or partial phone number as shown in the notification, and the source app. Agento uses this to match payments to appointments and orders.

The app does not read your chat history, contacts, photo gallery, or the contents of other apps. It only sees the text each app displays in its notification, at the moment it appears.

3.3 Data generated by using the Service

• Conversations between Agento and your customers; recorded appointments, orders and payments; and questions Agento could not answer ("gaps") for you to fill in.
• Voice recordings when you use voice mode, which are transcribed and not kept beyond processing.
• Technical data: device model, Android and app version, a device identifier we generate, IP address, timestamps, usage counters, and error logs.

3.4 Website data

agento.ceo keeps a standard access log (IP address, pages visited, browser, timestamp) used for aggregate statistics and security. We use no tracking cookies or third-party advertising. The only thing stored in your browser is your language preference.

4. How we use data

• To provide the Service: reply to your customers, book appointments, record orders, confirm payments, alert you to what needs your attention.
• To learn about your business so it answers better (adjustments are saved to your business configuration; they are not used for other businesses without anonymization).
• To verify your identity at sign-up and protect accounts from abuse.
• To send operational communications (reminders, alerts, Service changes) and, if you opted in, news. You can unsubscribe from news at any time.
• To measure and improve the Service using aggregated or anonymized data.
• To comply with legal obligations and defend our rights.

Legal basis. We process your data with your consent (given at sign-up and when enabling each permission) and because it is necessary to perform our contract with you. For your customers' data, we act on your instructions.

We do not run targeted advertising, sell or rent personal data, or use the content of your conversations to train third-party AI models.

5. Artificial intelligence and automated decisions

Replies to your customers are generated by a language model. For that, the message content, your business context and the recent conversation history are sent to AI model providers (see section 6). The model can make mistakes. Agento is designed so you can see every conversation, correct the agent, and take over whenever you want. Agento does not make decisions with legal effects on people; the appointments and orders it records are proposals that you and your customer confirm.

6. Who we share data with

Only with providers that perform a specific service for us, under contract, and only what is necessary:

We may change providers within these categories and will update this table when we do. We may also disclose data if required by law or a competent authority, or in a merger or acquisition, with prior notice.

Third-party platforms. Agento interacts with messaging and payment apps installed on your phone. We have no agreement with those platforms and do not send them your data; they process your data under their own policies.

7. International transfers

Yaya Tech is a U.S. company and our servers and providers may be located outside Peru (mainly in the United States and the European Union). By using the Service you consent to this cross-border data flow. We require our providers to provide confidentiality and security guarantees equivalent to those in this policy.

8. How long we keep data

• Account data and business configuration: while your account is active and up to 90 days after you close or delete it, unless you request immediate deletion.
• Conversations, appointments, orders and payments: while your account is active. You can request deletion of older conversations at any time.
• Voice audio: discarded after transcription.
• Technical and access logs: up to 12 months.
• Phone verification codes: minutes.
• Emails left on the website: until you unsubscribe.

We may keep data longer where the law requires it (e.g., accounting records) or to resolve disputes, limited to that purpose.

9. Security

We use encryption in transit (TLS) between the app, the website and our servers; your device's access token is stored encrypted with the Android keystore; administrative access requires separate keys and is logged; we apply usage limits to curb abuse. No system is infallible: if we detect a breach affecting your data we will notify you without undue delay and, where applicable, Peru's National Authority for Personal Data Protection.

10. Your rights

You have the right to access your data, rectify it, delete it, object to its processing, withdraw consent and request portability of your business information. To exercise them, write to andre@yaya.tech from your registered email or phone; we will respond within 10 business days (access: 20). Exercising these rights is free.

You can also, at any time: disable individual apps or revoke notification access from the app or Android Settings (Agento stops reading immediately); sign out; or uninstall the app.

If you believe we did not handle your request properly, you may file a complaint with Peru's National Authority for Personal Data Protection (ANPD) at the Ministry of Justice and Human Rights, or with the data protection authority of your country.

11. Minors

The Service is intended for businesses and people over 18. We do not knowingly register accounts for minors. A business's customers may be of any age; the business is responsible for complying with the rules applicable to its activity.

12. Changes to this policy

If we make material changes we will notify you in the app or by email before they take effect. The "last updated" date above always indicates the current version.

13. Contact

Yaya Tech PBC · andre@yaya.tech · agento.ceo
For consumer complaints in Peru you can also use our Libro de Reclamaciones.