Data Processing Agreement

• The customer business is the controller of its contact database and decides what the data is used for and how.
• Agencia Crécima SRL is the data processing service provider acting on behalf of the customer business, within the meaning of article 25 of Law 25,326.

• Agencia Crécima SRL processes the data only to provide the service. The customer business's configuration and use of Crécima Inbox (whom it writes to, what it stores, what it integrates) are its instructions.
• Agencia Crécima SRL does not use the data for its own purposes and does not sell it or hand it over to third parties, except to the providers listed below or by order of a competent authority.

• Keep the data confidential and require the same from its staff.
• Apply security measures: encryption in transit, encryption of tokens and passwords, isolation between businesses and access according to each user's role.
• Help the customer business respond to its contacts' requests for access, rectification and deletion.
• Notify the customer business without undue delay if it detects a security incident affecting its data.
• When the service ends, delete the data within 30 days, except what the law requires to be kept.

• Meta Platforms, which carries WhatsApp, Instagram and Messenger messages, and which is also governed by its own terms with the customer business.
• Infrastructure providers: servers, database and file storage.
• Integrations the customer business chooses to enable, such as its online store or an automated assistant.

Some providers, such as Meta, may process data outside Argentina. By using the service, the customer business instructs those transfers, which are made with the safeguards required by data protection regulations.

• Have a legal basis for each piece of data, inform its contacts how it processes their data and respond to their requests.
• Register its database with the AAIP where applicable.
• Not upload sensitive data unless necessary.

If a contact of the customer business writes to us to exercise their rights, we pass the request on to the customer business, which is the one that resolves it.