Privacy Policy

Osppy (“Osppy”, “we”, or the “Controller”), operated by [LEGAL ENTITY NAME], with address at [FULL REGISTERED ADDRESS], Mexico, is responsible for the processing and protection of your personal data under this Privacy Policy.

For any matter related to your personal data, you can contact us at hello@osppy.com.

To provide our services we may collect the following categories of personal data:

• Identification and contact data: name, hotel or business name, phone number (including the WhatsApp Business number), email, and role.
• Billing data: legal name, tax ID (RFC), tax address, and data needed to issue invoices and process payments.
• Your establishment's operational data: pricing, schedules, policies, availability, and other information you load to configure the assistant.
• Conversation data: messages exchanged via WhatsApp between your establishment and your guests, handled by our assistant.
• Usage and technical data: IP address, device and browser type, pages visited, and data generated through cookies and similar technologies.

Primary purposes (necessary for the service)

• Create, configure, and manage your account and the connection to your WhatsApp Business number.
• Operate the AI assistant to answer your guests with your establishment's information.
• Escalate conversations to a human when a sensitive situation is detected or as you configure.
• Process payments, issue invoices, and comply with tax and accounting obligations.
• Provide technical support and customer service.
• Comply with legal obligations and respond to requests from competent authorities.

Secondary purposes (not necessary for the service)

• Send you communications about news, product improvements, and informational content.
• Conduct satisfaction surveys and statistical studies to improve our services.

If you do not want your data processed for secondary purposes, you may tell us by writing to hello@osppy.com. Your refusal will not be grounds to deny you the contracted services.

Osppy does not request or require sensitive personal data to provide its services. If you voluntarily provide such data through conversations, its processing will be strictly limited to the purposes described here and subject to enhanced security measures.

When you use Osppy to answer your guests, you act as the controller of those guests' personal data and Osppy acts as the processor, handling that data solely under your instructions and to provide the service.

You are responsible for maintaining your own privacy notice and for obtaining any applicable consent from your guests.

To operate the service, your data may be processed by providers acting as processors (for example, messaging providers such as WhatsApp/Meta, cloud computing services, AI models, and payment processors), who are required to maintain the confidentiality and security of the information.

We do not transfer your personal data to third parties for purposes other than those described, except in the cases provided by law or where we have your consent. Some of these providers may be located outside Mexico; in such cases, we adopt measures to ensure an adequate level of protection.

Our service uses artificial intelligence models to generate automated responses. Responses are based on the information you configure and may contain inaccuracies. The system is designed to escalate to a human in sensitive situations. You can review and intervene in conversations at any time.

Our website uses cookies and similar technologies to function properly, remember your preferences (such as language), and obtain usage statistics. You can disable cookies in your browser settings, although some features may be affected.

You have the right to Access your personal data, Rectify it when inaccurate, Cancel it when you believe it is not required for the stated purposes, and Object to its processing (“ARCO” rights).

To exercise them, send a request to hello@osppy.com including: (i) your name and a means to receive a reply; (ii) documents proving your identity or legal representation; (iii) a clear description of the data concerned; and (iv) any element that helps locate the data.

We will respond within a maximum of 20 business days and, if applicable, make it effective within the following 15 business days.

You may withdraw the consent you have given for the processing of your data, as well as limit its use or disclosure, by sending your request to hello@osppy.com. Due to legal obligations, we may need to continue processing certain data for a defined period.

We will retain your personal data for as long as necessary to fulfill the purposes described and applicable legal obligations (for example, tax-related ones). Once those periods conclude, the data will be cancelled in accordance with applicable regulations.

We implement reasonable administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

We reserve the right to update this Privacy Policy. Any change will be posted on this page, indicating the date of the last update. We recommend reviewing it periodically.

If you believe your right to the protection of personal data has been violated, you may turn to the competent authority on the matter to file the corresponding complaint.

By providing your personal data and/or using our services, you acknowledge that you have read, understood, and accepted the terms of this Privacy Policy.