Legal
Privacy Policy
Last updated: September 2, 2026
On this page
In this section
Courtesy translation
This English version is provided for convenience only. The Spanish version of this Privacy Policy is the legally binding version, and it prevails in the event of any discrepancy or inconsistency between the two.
Introduction
RICKY AI, S.EP. ("we," "us" or "our") operates the website getricky.ai and provides AI automation services for WhatsApp and Instagram (the "Service"). We are committed to protecting your privacy and to complying with Meta's Platform Terms and with the data protection laws applicable in Panama and internationally.
The Service currently supports WhatsApp and Instagram. Additional messaging channels may be introduced in the future, in which case this Policy will be updated.
This Privacy Policy describes how we collect, use, disclose and protect your information when you visit our website or use our Service. Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read and understood it and agree to be bound by it.
Scope and roles
We process personal data in two distinct capacities, and your rights may vary depending on which one applies to you:
As data controller
If you visit our website, contact us about the Service or are a direct customer, we act as the controller of the information you provide to us directly. This means that we determine the purposes and means of the processing of your personal data.
As data processor
If you are a person who messages a business that uses Ricky on WhatsApp or Instagram (an "End User"), that business is typically the controller of your message data, and we process that data on the business's behalf as its service provider. We strictly follow our customers' instructions and do not use this data for any purpose other than providing the Service.
Privacy requests about messages sent to a business should first be directed to that business. We assist our customers as required by contract and applicable law.
Data we collect
We collect specific data to provide our AI services:
Account information
Name, email address, phone number and business details that our direct customers provide during sign-up and account setup.
Message data
When you enable our Service on WhatsApp Business or an Instagram professional account, we process the content of incoming and outgoing messages, user identifiers, phone numbers where applicable, profile names and message metadata in order to generate AI responses.
Technical data
IP addresses, browser types, device information, operating system and server logs needed for security, debugging and optimization of the Service.
Usage data
Information about how you interact with our Service, including features used, actions taken and performance metrics.
Usage and analytics data
Basic information about how the site is used, to detect failures and improve the Service.
How we use your data
We use the data we collect strictly for the following purposes:
Providing the service
To read incoming WhatsApp or Instagram messages and generate appropriate AI responses on behalf of our customers. This is the core function of our Service.
Improving the service
To analyze message accuracy, identify issues and improve the quality and reliability of our AI models and of the Service's infrastructure.
Compliance and security
To verify accounts, prevent spam or abuse, detect fraud and ensure compliance with Meta's policies and applicable laws.
Communication
To send you Service-related notices, updates, security alerts and support messages. We do not send marketing communications without your explicit consent.
Acquisition measurement
To measure the performance of our campaigns and improve the Service.
Data sharing and third parties
We do not sell your personal data. We may share data with trusted infrastructure providers solely to operate our Service:
Meta Platforms, Inc.
To send and receive messages through the official WhatsApp and Instagram APIs. Messages are transmitted over Meta's infrastructure as required for each channel to function.
AI service providers
To process text and generate responses. These providers are bound by strict data confidentiality agreements and process the data solely to provide AI inference capabilities.
Infrastructure and analytics providers
Services needed to operate, protect and measure the performance of the site and the Service.
We may also disclose your information if required by law, a court order or a government request, or to protect our rights, privacy, safety or property.
AI processing and model training
The Service sends message content to AI providers solely to generate responses for our customers in real time. We are committed to responsible AI practices:
Our commitment
We do not use business messaging data subject to Meta's applicable terms, including its anonymized, aggregated or derived forms, to create, develop, train or improve AI models. The only exception is fine-tuning a model for the exclusive use of a single customer, when that customer explicitly authorizes it through a separate written agreement.
Data retention and deletion
Retention period
We keep chat logs and account data only for as long as necessary to provide the Service, typically for the term of your subscription plus a reasonable period for backup and compliance purposes. Technical logs are kept for up to 90 days.
Deletion process
You have the right to request the deletion of your personal data. To request the deletion of your data (including phone numbers and chat history), contact us at
ricardo@getricky.ai. We will process verified requests within 30 days.
Legal requirements
Some data may be kept for longer if required by an applicable law, regulation or legal process.
Your data protection rights
Depending on your location and the applicable laws, you may have the following rights over your personal data:
Access
Request confirmation of whether we process your personal data and obtain a copy of it.
Rectification
Request the correction of inaccurate or incomplete personal data we hold about you.
Erasure
Request the deletion of your personal data under certain circumstances.
Restriction
Request that we limit the use of your data while your concerns are resolved.
Portability
Receive your personal data in a structured, machine-readable format.
Objection
Object to processing based on legitimate interests or for direct marketing purposes.
Withdrawal of consent
Withdraw your consent at any time where processing is based on it.
Complaint
Lodge a complaint with a supervisory authority in your jurisdiction.
To exercise any of these rights, contact us at
ricardo@getricky.ai. We will respond to your request within 30 days.
Legal basis for processing
For individuals in the European Economic Area (EEA), the United Kingdom, Brazil or other jurisdictions that require a legal basis for processing, we rely on the following:
Performance of a contract
Processing necessary to perform our contract with you, including providing the Service, managing your account and processing payments.
Legitimate interests
Processing necessary for our legitimate interests, such as improving the Service, ensuring security and preventing fraud, provided that those interests are not overridden by your rights.
Legal obligations
Processing necessary to comply with applicable laws and regulations.
Consent
Where the law requires it, we obtain your consent before processing, for example for marketing communications or certain cookies.
International data transfers
Your information may be transferred to and processed in countries other than your country of residence. Those countries may have data protection laws that differ from those of your country.
When we transfer personal data internationally, we implement appropriate safeguards to ensure that your data receives adequate protection, including:
- •Standard Contractual Clauses approved by the relevant data protection authorities
- •Transfers to countries recognized as providing adequate data protection
- •Binding contractual obligations with our service providers
Children's information
Our Service is not intended for persons under the age of 18 ("Minors"). We do not knowingly collect personally identifiable information from Minors.
If you are a parent or guardian and you learn that your child has provided us with personal data, please contact us. If we learn that we have collected personal data from Minors without verification of parental consent, we will take steps to remove that information from our servers immediately.
Security
We implement industry-standard security measures to protect your data against unauthorized access, alteration, disclosure or destruction. These measures include:
- •Encryption of data in transit (TLS/HTTPS) and at rest
- •Secure access controls and authentication mechanisms
- •Periodic security assessments and monitoring
- •Employee access limited to those who need it for their role
In the event of a security breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law.
Changes to this policy
We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable laws. We will notify you of any material change by posting the updated Privacy Policy on our website with a new "Last updated" date.
Your continued use of the Service after the changes are posted constitutes acceptance of the amended Privacy Policy. We encourage you to review this Privacy Policy periodically.
Contact us
If you have questions about this Privacy Policy, wish to exercise your rights over your data or have concerns about our data practices, contact us:
Urbanización Marbella, PH La Concha, Apartamento 6-B, Corregimiento de Bella Vista, Distrito de Panamá, Provincia de Panamá, República de Panamá
Related documents
Terms of Service →