Privacy notice

What will we use your personal data for?

The personal data we collect from you will be used for the following purposes, which are necessary for the service you request:

• Providing the consulting services and technology solutions requested.
• Invoicing and collection.
• Fulfilling obligations undertaken with our clients.
• Informing you about changes to our services.

Additionally, we will use your personal information for the following secondary purposes, which are not necessary for the requested service but allow us to serve you better:

• Marketing and advertising.
• Commercial prospecting.

Which personal data will we use for these purposes?

To carry out the purposes described in this privacy notice, we will use the following personal data:

• Identification data (name).
• Contact data (email address, phone number).
• Employment data (company, role).

If you use the website's voice and chat assistant, also: the content of the conversation (what you say or type and its transcript) and a technical identifier of your browser generated by the assistant's provider.

Data transfers

We inform you that your personal data is shared, inside and outside the country, with the following persons, companies, organizations or authorities other than ourselves, for the following purposes:

• Technology service providers (such as Resend, Google and Notion) for operational management and information storage.
• ElevenLabs (United States), provider of the website's voice and chat assistant, to process the conversation and answer you in real time.

The website's voice and chat assistant

The assistant on this website ("Kai") is an artificial intelligence. Before your first conversation it shows you a summary of this notice. What you say or type is processed with ElevenLabs to answer you and, if you leave your contact details, for the same purposes as the contact form: handling your request and following up. We do not keep the audio recording; transcripts are kept for 90 days at ElevenLabs and then deleted. Any contact details you leave reach our inbox and are handled like those from the form.

Living Policy and WhatsApp

Living Policy is the customer service platform for insurers and insurance agencies operated by La Agencia AI. With it, each business sends and receives messages with its policyholders from its own WhatsApp Business account. This section explains what we do with that data.

How we receive the data

When a business connects its WhatsApp Business account to Living Policy through Meta's official signup flow, it grants us access to that account. The business can remove that access at any time from its Meta settings. Messages travel through Meta's WhatsApp Business Platform, which has its own terms and its own privacy policy.

What data we process

• The messages exchanged between the business and its policyholders: text and files.
• The phone number and WhatsApp profile name of each policyholder.
• The delivery status of each message.
• The business's message templates.
• The details of the business's WhatsApp number and account.

What we use it for

Only to provide the service to the business: sending the messages the business decides on (policy welcome, renewal and payment reminders, service replies), receiving its policyholders' replies and making them available to its team and its assistant.

Our role

For this data, La Agencia AI acts as a processor (encargado) on behalf of the business, which is the controller (responsable) under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares). We do not use it for our own purposes, we do not sell it, we do not use it for advertising and we do not share it with other clients. The purposes listed at the beginning of this notice, including marketing and commercial prospecting, do not apply to this data.

Each business has its own server and its own database: one business's data does not pass through another's.

Consent and opting out

A policyholder receives messages only if they gave their consent to the business, and can opt out at any time by replying BAJA (or STOP).

Retention, deletion and ARCO rights

The data is kept while the business has the service and for the period set by its contract or by law; when that ends, it is deleted.

If you are a policyholder of a business that uses Living Policy, you exercise your ARCO rights, including the right to have your data deleted, with that business, which is the controller; we handle them on the business's instructions. You can also write to us at [email protected] and we will pass your request on to the business.

ARCO rights

You have the right to know what personal data we hold about you, what we use it for and the terms of that use (Access). You also have the right to request correction of your personal information when it is outdated, inaccurate or incomplete (Rectification); to request that we delete it from our records or databases when you consider it is not being used appropriately (Cancellation); and to object to the use of your personal data for specific purposes (Opposition). These are known as ARCO rights.

To exercise any of the ARCO rights, you must submit the corresponding request by email to: [email protected].

If we process your data on behalf of a business that uses Living Policy, your request goes to that business, which is the controller; if you send it to us, we pass it on. More details in Living Policy and WhatsApp.

Changes to this privacy notice

This privacy notice may be modified, changed or updated as a result of new legal requirements; our own needs regarding the products or services we offer; our privacy practices; changes to our business model; or other causes.

We undertake to keep you informed about any changes to this privacy notice through our website: la-agencia.ai.

Last updated: 8 November 2026.

This English text is a courtesy translation. The Spanish version is the legally binding one, as required by Mexican data protection law.