Skip to content

Legal

Privacy Policy

Last updated: October 9, 2026

In this section

Courtesy translation

This English version is provided for convenience only. The Spanish version of this Privacy Policy is the legally binding version, and it prevails in the event of any discrepancy or inconsistency between the two.
01

Introduction

RICKY AI, S.EP. ("we," "us" or "our") operates the website getricky.ai and provides AI automation services for WhatsApp and Instagram (the "Service"). We are committed to protecting your privacy and to complying with Meta's Platform Terms and with the data protection laws applicable in Panama and internationally.

The Service currently supports WhatsApp and Instagram. Additional messaging channels may be introduced in the future, in which case this Policy will be updated.

This Privacy Policy describes how we collect, use, disclose and protect your information when you visit our website or use our Service. Please read this Privacy Policy carefully. By accessing or using our Service, you acknowledge that you have read and understood it and agree to be bound by it.

02

Scope and roles

We process personal data in two distinct capacities, and your rights may vary depending on which one applies to you:

As data controller

If you visit our website, contact us about the Service or are a direct customer, we act as the controller of the information you provide to us directly. This means that we determine the purposes and means of the processing of your personal data.

As data processor

If you are a person who messages a business that uses Ricky on WhatsApp or Instagram (an "End User"), that business is typically the controller of your message data, and we process that data on the business's behalf as its service provider. We strictly follow our customers' instructions and do not use this data for any purpose other than providing the Service.

Privacy requests about messages sent to a business should first be directed to that business. We assist our customers as required by contract and applicable law.

03

Data we collect

We collect specific data to provide our AI services:

Account information

Name, email address, phone number and business details that our direct customers provide during sign-up and account setup.

Message data

When you enable our Service on WhatsApp Business or an Instagram professional account, we process the content of incoming and outgoing messages, user identifiers, phone numbers where applicable, profile names and message metadata in order to generate AI responses.

Technical data

IP addresses, browser types, device information, operating system and server logs needed for security, debugging and optimization of the Service.

Usage data

Information about how you interact with our Service, including features used, actions taken and performance metrics.

Usage and analytics data

Basic information about how the site is used, to detect failures and improve the Service.
04

How we use your data

We use the data we collect strictly for the following purposes:

Providing the service

To read incoming WhatsApp or Instagram messages and generate appropriate AI responses on behalf of our customers. This is the core function of our Service.

Improving the service

To analyze message accuracy, identify issues and improve the quality and reliability of our AI models and of the Service's infrastructure.

Compliance and security

To verify accounts, prevent spam or abuse, detect fraud and ensure compliance with Meta's policies and applicable laws.

Communication

To send you Service-related notices, updates, security alerts and support messages. We do not send marketing communications without your explicit consent.

Acquisition measurement

To measure the performance of our campaigns and improve the Service.
05

Data sharing and third parties

We do not sell your personal data. We may share data with trusted infrastructure providers solely to operate our Service:

Meta Platforms, Inc.

To send and receive messages through the official WhatsApp and Instagram APIs. Messages are transmitted over Meta's infrastructure as required for each channel to function.

AI service providers

To process text and generate responses. These providers are bound by strict data confidentiality agreements and process the data solely to provide AI inference capabilities.

Infrastructure and analytics providers

Services needed to operate, protect and measure the performance of the site and the Service.

AI assistants you connect

If you connect Ricky to an AI assistant such as ChatGPT or Claude, that assistant receives only the data its requests ask Ricky for, within the organization you choose and the permissions of your role: contacts, conversations, messages and settings. Its provider handles that data under its own terms. Ricky stores the connection, never your password, and you can revoke it at any time in Settings → My account.

We may also disclose your information if required by law, a court order or a government request, or to protect our rights, privacy, safety or property.

06

AI processing and model training

The Service sends message content to AI providers solely to generate responses for our customers in real time. We are committed to responsible AI practices:

Our commitment

We do not use business messaging data subject to Meta's applicable terms, including its anonymized, aggregated or derived forms, to create, develop, train or improve AI models. The only exception is fine-tuning a model for the exclusive use of a single customer, when that customer explicitly authorizes it through a separate written agreement.

07

Data retention and deletion

Retention period

We keep chat logs and account data only for as long as necessary to provide the Service, typically for the term of your subscription plus a reasonable period for backup and compliance purposes. Technical logs are kept for up to 90 days.

Deletion process

You have the right to request the deletion of your personal data. To request the deletion of your data (including phone numbers and chat history), contact us atricardo@getricky.ai. We will process verified requests within 30 days.

Legal requirements

Some data may be kept for longer if required by an applicable law, regulation or legal process.
08

Your data protection rights

Depending on your location and the applicable laws, you may have the following rights over your personal data:

Access

Request confirmation of whether we process your personal data and obtain a copy of it.

Rectification

Request the correction of inaccurate or incomplete personal data we hold about you.

Erasure

Request the deletion of your personal data under certain circumstances.

Restriction

Request that we limit the use of your data while your concerns are resolved.

Portability

Receive your personal data in a structured, machine-readable format.

Objection

Object to processing based on legitimate interests or for direct marketing purposes.

Withdrawal of consent

Withdraw your consent at any time where processing is based on it.

Complaint

Lodge a complaint with a supervisory authority in your jurisdiction.

To exercise any of these rights, contact us atricardo@getricky.ai. We will respond to your request within 30 days.

10

International data transfers

Your information may be transferred to and processed in countries other than your country of residence. Those countries may have data protection laws that differ from those of your country.

When we transfer personal data internationally, we implement appropriate safeguards to ensure that your data receives adequate protection, including:

  • •Standard Contractual Clauses approved by the relevant data protection authorities
  • •Transfers to countries recognized as providing adequate data protection
  • •Binding contractual obligations with our service providers
11

Children's information

Our Service is not intended for persons under the age of 18 ("Minors"). We do not knowingly collect personally identifiable information from Minors.

If you are a parent or guardian and you learn that your child has provided us with personal data, please contact us. If we learn that we have collected personal data from Minors without verification of parental consent, we will take steps to remove that information from our servers immediately.

12

Security

We implement industry-standard security measures to protect your data against unauthorized access, alteration, disclosure or destruction. These measures include:

  • •Encryption of data in transit (TLS/HTTPS) and at rest
  • •Secure access controls and authentication mechanisms
  • •Periodic security assessments and monitoring
  • •Employee access limited to those who need it for their role

In the event of a security breach affecting your personal data, we will notify you and the relevant authorities as required by applicable law.

13

Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices or in applicable laws. We will notify you of any material change by posting the updated Privacy Policy on our website with a new "Last updated" date.

Your continued use of the Service after the changes are posted constitutes acceptance of the amended Privacy Policy. We encourage you to review this Privacy Policy periodically.

14

Contact us

If you have questions about this Privacy Policy, wish to exercise your rights over your data or have concerns about our data practices, contact us:

RICKY AI, S.EP.
Address:
Urbanización Marbella, PH La Concha, Apartamento 6-B, Corregimiento de Bella Vista, Distrito de Panamá, Provincia de Panamá, República de Panamá

Related documents

Terms of Service →