Privacy Policy

Last updated: October 15, 2026

1. Who we are and when this policy applies

This Privacy Policy applies to Contacto Live ("Contacto Live," "we," "us" or "our"), our website at contacto.live, the platform at build.contacto.live and the related services we provide. You can contact us at mario@contacto.live or 2719 Hollywood Blvd, Hollywood, FL 33020.

When a business uses Contacto Live to manage its customers and prospects, that business determines the purposes for processing information in its workspace. We process that information to provide the services it requests. If you are a customer or prospect of one of those businesses, contact that business first about its communications or its use of your information; we can assist with requests involving our platform.

2. Information we collect

• Account and business details: names, email addresses, telephone numbers, business information, workspace memberships, roles and preferences supplied during registration or setup.
• CRM and service records: contact details, inquiries, appointment information, pipeline stages, tasks, notes, uploaded documents, images and other records entered by authorized users.
• Communications: messages, attachments, conversation participants, timestamps, delivery information and conversation history from connected channels. Where voice features and recording are enabled, this may include call information, recordings or transcripts.
• Marketing and creative content: prompts, reference materials, generated content, social posts, schedules, campaign settings and available results associated with requested features.
• Integration information: account identifiers, permissions, authorization tokens and service data obtained when you connect a third-party account.
• Technical and transaction information: IP addresses, browser or device information, authentication and security events, usage records, subscription details and payment-provider transaction references. Payment providers process payment credentials under their own policies.

3. How we use information

We use information to create and administer accounts; organize CRM records; deliver messages; manage supported appointments and follow-ups; run workflows selected by a business; prepare and publish authorized content; provide requested AI responses and creative features; provide onboarding, virtual-assistant and technical support; administer billing; and protect the platform against misuse.

We also use necessary service and diagnostic information to maintain functionality, resolve errors, understand service usage and meet applicable obligations. Connecting a channel does not authorize unrestricted messaging or publication. Businesses remain responsible for their instructions, recipient permissions and the communications they initiate.

4. Google account and Business Profile data

Google connections are optional and use Google's authorization process. We receive the permissions you grant and an account identifier and email address needed to identify the connected account. We do not receive your Google password.

For Google Business Profile, authorized features may retrieve accounts and business locations, business listing information, reviews and responses, local posts and available performance information. We use this information to display the selected business locations, synchronize their activity, prepare responses, publish posts or replies when instructed, and present available reporting in the correct workspace. These features use the business.manage permission.

When separately enabled and authorized, Google Workspace features may process:

• Gmail: recipient addresses, subject lines, message bodies and attachments supplied for sending requested emails.
• Calendar and Meet: event details, times, participants and meeting links used for supported scheduling workflows.
• Drive: files and folders created by or made available to the application, for requested file operations.
• Sheets and Docs: spreadsheet data, document content and templates selected for connected workflows.
• Forms: authorized form information and responses used in requested workflows.

Access depends on the services you enable and the permissions you actually grant. Enabling one Google feature does not automatically connect all Google services. We store connection credentials to maintain authorized access and may cache or store selected service records needed for the feature. Integration credentials are encrypted in the application database.

Google API Limited Use: Contacto Live's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including its Limited Use requirements. Google user data is not sold, used for targeted advertising or used to train or improve generalized AI or machine-learning models. Human access to Google user data is limited to permitted purposes, such as assistance with your consent, security investigations or legal requirements.

5. Messaging, social and store integrations

If you connect WhatsApp, Facebook, Instagram, Messenger, Telegram or other supported services, we process the account information, messages, attachments, posts and related identifiers necessary for the enabled features. Social publishing uses the accounts and content you select. Store integrations may synchronize authorized product, customer, order and fulfillment information for service workflows.

Each provider also processes information under its own terms and privacy policy. You control which accounts you connect, and the provider controls the permissions and capabilities available through its service.

6. AI features and human assistance

When a business enables an AI feature, the information needed to carry out that request may be sent to its configured AI provider. This can include a prompt, selected knowledge-base excerpts, recent conversation messages, relevant business or order information, or reference images. AI image and video features process the prompts and materials supplied for generation.

For example, requesting an AI draft of a Google Business review reply may send the review text and relevant business context to the configured AI provider. Google-derived data may be processed only for the authorized, user-facing feature and subject to Google's applicable data-use restrictions. AI providers process requests under their applicable service terms. Do not include information that is unnecessary for the requested task.

Authorized staff and Virtual Assistants may access the workspace information needed to provide requested onboarding, support, conversation handling or follow-up services. Business administrators should assign access according to each team member's responsibilities.

7. When information is shared

We do not sell personal information. We share information as necessary with:

• Authorized users and service personnel working in the relevant business workspace.
• Providers supporting hosting, storage, communications, AI processing, payments and other enabled platform services.
• Recipients and connected applications selected through a user's message, post, workflow, export or integration instructions.
• Authorities or other parties when required by law or necessary to address fraud, security incidents or the protection of rights.

Content you authorize for public posting becomes available through the destination platform. Third-party services and the businesses using Contacto Live may retain their own copies independently.

8. Storage, security and retention

We use access controls, workspace permissions and application security measures to protect information. No service can guarantee absolute security. Users should protect their credentials and promptly report suspected unauthorized access.

We retain information for as long as necessary to provide the requested services, maintain relevant account and transaction records, resolve disputes, protect security and satisfy applicable legal obligations. Retention depends on the information and purpose; disconnection alone does not delete existing CRM records, messages or synchronized data. Information may also remain in backups or required records until applicable retention and backup cycles allow its removal.

Service providers may process information in countries other than your own. Where applicable, transfers are subject to the safeguards required for the services and information involved.

9. Your choices, revocation and deletion

You can manage available integrations through your workspace settings and revoke Google's access through your Google Account connections. Revocation stops future authorized access through the revoked connection; it does not automatically erase information already stored in Contacto Live or undo previously published content.

To request access, correction, export or deletion of information, email mario@contacto.live with the subject "Privacy request" and identify the relevant account or business workspace. We may verify your identity and authority before acting. Do not send passwords, authorization tokens or identity documents unless a necessary verification method has been agreed with our team.

For a valid deletion request, we will remove or anonymize information within our control that is no longer needed, subject to legal, security, transaction and backup retention requirements. If a business controls the relevant records, we may refer the request to that business or act on its authorized instructions. Depending on your location, you may have additional rights under applicable privacy laws.

10. Cookies and preferences

The platform uses cookies and similar storage for functions such as sign-in sessions, security and language or interface preferences. Browser controls can restrict cookies, but doing so may prevent some functions from working.

11. Children

Contacto Live is intended for business use and is not directed to children under 13. If you believe a child has provided personal information through our services, contact us so we can investigate and take appropriate action.

12. Changes and contact

We may update this policy to reflect changes to our services or practices. The date at the top identifies the latest revision. Material changes will be communicated as required by applicable law.

Contacto Live
2719 Hollywood Blvd, Hollywood, FL 33020
mario@contacto.live
www.contacto.live