LEGAL INFORMATION
Transparency
and privacy.
This English version is provided for convenience. If it differs from the Spanish version, the Spanish version prevails.
Legal notice
1. Company information
This website is owned by Crocode, a company registered with the National Registry of Costa Rica under corporate ID (cédula jurídica) 3-102-965779. For any questions, write to us at hello@crocode.ai.
2. Purpose
This notice governs the use of the website, through which Crocode provides information about its automation and artificial intelligence services for businesses.
3. Intellectual property
All content on the site (text, design, logos and code) belongs to Crocode or to third parties who have authorized its use, and is protected by intellectual property law.
4. Liability
Crocode is not responsible for misuse of the content or for damages arising from the use of the site. Crocode reserves the right to change the information without prior notice.
5. Governing law
Any relationship arising from the use of this site is governed by the laws of the Republic of Costa Rica.
Privacy policy
Data controller
Crocode, corporate ID 3-102-965779, Costa Rica. Contact: hello@crocode.ai.
Purpose and data we process
We process the information you provide when contacting us (name, email address, company, area of interest, and message) solely to respond to your inquiry, assess your project, and, where applicable, provide our services.
When you submit the contact form, our system automatically includes a technical reference code corresponding to your visit that day (the same daily anonymous identifier used to measure visits, which changes every midnight). This allows us to link your inquiry with the pages and sections you browsed prior to reaching out, helping us better understand your needs and tailor our proposal accordingly.
Legal basis
The legal basis is your explicit consent, granted by checking the acceptance box and submitting the contact form, in accordance with Costa Rica’s Law No. 8968 on the Protection of Individuals with Regard to the Processing of Their Personal Data.
Retention and recipients
We retain your personal data for as long as necessary to handle your request and maintain the resulting professional relationship, or until you request its deletion. Crocode stores your request in a secure database (Cloudflare D1) and uses Web3Forms to send an email notification to our team. These providers process the request for storage and notification; a notification failure does not delete the stored request. We do not sell, rent, or transfer your personal data to third parties, nor do we use it to train internal or third-party artificial intelligence models.
Your rights
You can exercise your rights of access, rectification, deletion, and objection at any time, as well as withdraw previously given consent, by writing to hello@crocode.ai. If you consider that your rights have not been adequately addressed, you may also file a claim with Costa Rica’s Data Protection Agency (Agencia de Protección de Datos de los Habitantes, PRODHAB).
WhatsApp assistant service
This section applies to businesses that use Crocode’s artificial intelligence assistant for WhatsApp and to the people who write to those businesses on WhatsApp. It complements the privacy policy above.
Role of each party
Each client business is the controller of its own customers’ data and decides what it uses the service for. Crocode acts as a data processor: it processes that data only on the business’s behalf, following its instructions and to provide the contracted service.
Data we process
From people who write to the business: WhatsApp number, profile name, message content, date and time, and the delivery status of each message.
From the business and its team: the identifiers of its WhatsApp Business account and number, its message templates, the product and service information it configures for the assistant, and its team’s access data for the app (name, email and activity log).
How we use it
To receive and answer messages from the business’s customers with the information the business configured; to show conversations in the business’s app so its team can read them, reply or take them over; to hand a conversation to a team member when appropriate; to manage the business’s WhatsApp number and message templates; and to measure usage in order to apply limits and prevent abuse. We do not sell this data, use it for advertising, or use it to train our own artificial intelligence models.
Service providers involved
Meta Platforms (WhatsApp Business Platform), to send and receive messages; OpenRouter and the artificial intelligence model provider, which receive the necessary part of the conversation only to generate each reply, under their own terms; Cloudflare, which carries encrypted traffic to our servers; Supabase, which stores a backup copy; TypeSafe, which receives the latest turns of a conversation only to classify them and decide how the assistant should continue; Google (Firebase Cloud Messaging), which delivers notifications with the customer's name and the message text to the phones of the business's team; and, only if the business uploads documents for the assistant to consult, Voyage AI and Qdrant, which index them. Several of these providers operate in the United States, so data may be transferred outside Costa Rica.
Where and for how long it is stored
Each business’s data is stored in a separate database on servers managed by Crocode in Costa Rica, with a daily backup copy at Supabase (United States). We keep conversations while the business uses the service. When the business ends the service or asks us to, we delete its data within 30 days; backups containing it are deleted no later than 14 days after that.
Security
Communications are encrypted in transit, access to the business app requires a username and password, and only authorized Crocode staff can access the servers and backups.
How to request deletion of your data
If you wrote on WhatsApp to a business that uses our assistant, you can ask that business to delete your conversation, or write to us at hello@crocode.ai with the WhatsApp number you wrote from and the name of the business. If you are a client business, write to us from the email address associated with your account. We will confirm receipt of your request and delete the data within 30 days, except data we must keep by law. Through the same channel you can exercise your other rights of access, rectification and objection, and you may contact PRODHAB if you consider they were not addressed.
Terms of use of the service
The scope and price of the service are agreed in writing with each business. The business agrees to use the assistant in line with WhatsApp Business policies and applicable law, and to have the consent required to contact its customers. The assistant’s replies are generated with artificial intelligence and may contain errors: the business is responsible for the information it configures and can personally handle any conversation from its app.