Legal

Privacy Policy

LAST UPDATED: SEPTEMBER 25, 2026

At Synova Digital Solutions SRL ("we," "BOS") we take the privacy of your data seriously. This policy explains what information we collect, for what purpose, how we protect it, and what rights you have over it.

1. Data controller

Controller: Synova Digital Solutions SRL — CUIT 30-71890877-5.
Address: Av. Scalabrini Ortiz 1135, Ciudad Autónoma de Buenos Aires, Argentina.
Privacy contact: desarrollo@synova.la.

2. What data we collect

Depending on your relationship with BOS, we may process:

We don't request special categories of data (health, ideology, etc.) for the operation of the service.

3. Purpose and legal basis

We process data to:

We do not sell personal data or use it for third-party advertising.

4. How we protect it

We apply technical and organizational measures aligned with the state of the art, including: per-account data isolation (multi-tenant with Row Level Security), multi-layer role-based access control, encryption in transit (HTTPS/TLS) and at rest, authentication via corporate identity providers with two-step verification, continuous security monitoring, audit logging, and data minimization. Details are on our Security page.

5. Who we share data with (subprocessors)

To provide the service we rely on providers acting as processors, under data processing agreements:

These providers may process data outside Argentina. Transfers are carried out under contractual safeguards (DPA and standard contractual clauses).

6. Meta integrations (WhatsApp, Facebook, Instagram and ads)

If a client company chooses to connect its Meta accounts to BOS, we access only what that company authorizes, and only to provide the service it requested.

We use this information so the company can serve its customers from BOS (with an AI assistant or a person on its team), manage its templates, send messages to people who agreed to receive them, and see reports on its own accounts. Each company's data is kept separate and is visible only to its own team.

We do not sell this information, we do not use it for our own or third-party advertising, and we do not combine it across companies. For the assistant to reply, conversation content is processed by Anthropic, our AI provider, under a data processing agreement and without being used to train its models. For everything else, we follow the Meta Platform Terms.

Disconnecting and deleting data: the company can disconnect its Meta accounts from BOS at any time, or remove BOS's access from its Meta settings (Business Manager › Integrations). When disconnected, we stop receiving information and delete the access. To delete data that was already imported, write to desarrollo@synova.la from the account administrator's email, stating which data you want deleted. We delete it within 30 days, except what the law requires us to keep, and confirm by email. If a person who messaged a client company on WhatsApp wants their data deleted, they can ask that company or write to us at the same address.

7. Where data is hosted and international transfers

Data is hosted on Supabase and Vercel infrastructure, in the us-east-1 region (US East, Northern Virginia). Since the controller is based in Argentina and the infrastructure in the United States, every international transfer is carried out in accordance with Law 25.326 and, when applicable by user location, GDPR, under each provider's contractual safeguards.

8. How long we retain it

We retain data for as long as the contractual relationship exists and for the periods required by applicable legal obligations. When an account is closed, its data is deleted or anonymized within 90 days, unless a legal obligation requires longer retention.

9. Your rights

As a data subject, you can exercise the rights of access, rectification, updating, and deletion, and — where GDPR applies — objection, restriction, and portability. Write to us at desarrollo@synova.la; we respond within the legally required timeframes.

In Argentina, the supervisory authority is the Agencia de Acceso a la Información Pública (AAIP), where you can file a complaint. If GDPR applies to you, you can file one with the supervisory authority of your country of residence.

10. Cookies

We use cookies and similar technologies necessary for operation, security (session, fraud prevention) and, with your consent, usage metrics. You can manage them from the site's cookie notice. See our Cookie Policy.

11. Changes to this policy

We may update this policy. We'll publish the current version with its date and, for substantial changes, notify you through our usual channels.

12. Contact

Synova Digital Solutions SRL — desarrollo@synova.la — Av. Scalabrini Ortiz 1135, Ciudad Autónoma de Buenos Aires, Argentina.