Legal · Semprivo
Privacy notice
Semprivo stores data about three kinds of people: who contracts the service (you), who writes your agent (your prospects), and who visits a site with our widget. This document says what we keep of each, what for, and what you can do about it.
Last updated: August 7, 2026
Who is responsible
For your account data — your name, email, and password — the controller is Semprivo, with domicile for this notice in Guadalajara, Jalisco, Mexico, and contact at hola@semprivo.com. For your prospects' data, you the brokerage are the controller: we act as processors, we handle them on your instruction and only so the service works. This notice is issued under Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).
What data we store
- From your account: name, email, hashed password, your brokerage name and city, and your dashboard preferences.
- From your inventory: listings you upload, with price, area, and photos.
- From your prospects: the name and phone they write from, the conversation content, and what we infer from it (area, budget, payment method, timing) to build their card.
- From widget visitors: the conversation content and a session identifier that lives in the visitor's browser so the conversation continues across visits. We don't collect their location or track their browsing.
- From usage: how many conversations your agent handles and how long it takes to reply, for your own dashboard and to bill your plan.
What we use it for
So your agent can reply, qualify, and book; to show you your dashboard; to bill your plan; and to notify you about the service. We don't use your prospects' conversations to train AI models, ours or anyone else's; we don't do advertising profiling; and we don't sell your list to anyone.
Who we share it with
- Meta Platforms, because WhatsApp messages go through their official platform.
- Our WhatsApp connectivity provider, which links your number to Meta's platform and processes messages in transit.
- The language-model provider that generates replies, which processes conversations to answer and does not keep them for training.
- Our infrastructure provider, where the database and photos live.
With no one else. There are no ad networks or data brokers on this list, and we don't plan to add them. Some of these providers process data outside Mexico; with all of them there is a contract that binds them to use the data only to provide the service.
Cookies and local storage
The dashboard uses a single cookie: your session, required so you can sign in. The widget stores a session identifier in the visitor's browser local storage. There are no advertising, third-party analytics, or tracking cookies — that's why you won't see a cookie banner: there's nothing to consent to.
Security
Passwords are stored hashed, your connection credentials travel and are stored encrypted, and access to your data is isolated by account: no brokerage can see another's data. All traffic is encrypted (TLS 1.2 or higher).
How long we keep it
For as long as the account is open. If you delete it from Settings, your conversations, prospects, inventory, and configuration are deleted immediately, and backups rotate within 30 days. We only keep billing records the law requires us to keep, for the period the law sets.
Your rights
You can exercise your ARCO rights — access, rectify, cancel, or object to processing of your data — and revoke your consent at any time. Your inventory and prospects export from the dashboard whenever you want, without asking us, and the account deletes itself from Settings. For everything else write to hola@semprivo.com with the subject “Personal data”: we reply within 20 business days. If you're not satisfied with our response, you can go to Mexico's National Institute for Transparency, Access to Information and Personal Data Protection (INAI).
Your prospects
Your agent identifies as your brokerage's assistant: nobody is left thinking they're talking to a person. If a prospect asks you to delete their information, you can remove it from the dashboard and we drop it from backups on the next cycle. If a prospect writes us directly, we notify you and resolve it with you — you are the controller of that data.
Minors
Semprivo is not directed at minors and we don't deliberately collect their data. If you find that a minor used the chat, tell us and we delete the conversation.
Changes
If this notice changes, we email you before it applies, and the previous version stays available so you can compare. No fine print that appears overnight.
Questions about this document? Write to hola@semprivo.com. A person answers, not a form.