Legal

Privacy policy

Last updated 28 October 2026

Who we are

Official Reply is a service run by Cristian Desivo, in Buenos Aires, Argentina (“we”, “us”). It gives a business an assistant, on its website and in chat apps like WhatsApp, that replies only with answers the business has approved. The service is at officialreply.com. For anything about this policy or your data, write to cdesivo92@gmail.com.

Whose data, and who decides

There are two situations, and our role is different in each:

• You're a visitor chatting with a business's assistant. The business whose assistant it is decides why your conversation is kept and what is done with it. We process it on its behalf and following its instructions (we're its data processor, or encargado del tratamiento). That business's own privacy policy applies too. You can ask it, or us, about your data.
• You're a business using the service, or you asked us for access. We decide how your details are used, as set out below (we're the data controller, or responsable).

If you chat with an assistant

What's collected

• Your questions and the replies, with the time, which approved answer was used and which version of the answers was live. If a question depended on earlier ones (“how much is it?”), a self-contained version is kept beside it.
• The website address the assistant was used on, or which chat app, and a random conversation number. Nothing in it identifies you by itself.
• In a chat app, who you are in it, so the reply reaches you: your phone number on WhatsApp, or the id Telegram, Messenger or Instagram gives the business for you. On WhatsApp your number also fills in the phone when you confirm a request, and is what we pass on if you ask the business to get back to you.
• Whether you marked a reply helpful, if you did.
• Contact details you choose to leave (an email or phone, and a message) when you ask the business to get back to you.
• Details you enter to confirm a request, like a booking or an order: for example your name, phone or email, and what you asked for.

Anything you type into the chat is kept as part of the conversation, so please don't share more than the question needs: no passwords, card numbers or health details.

What it's used for

• Choosing the right approved answer and showing it to you.
• Passing your contact details and confirmed requests to the business, by email and to its website, so it can act on them.
• Showing the business which questions went unanswered, so it can add answers, and how the assistant is doing.
• Keeping the service secure and fixing problems.

We don't sell it, use it for advertising, or build profiles of you.

Chat apps

When you write to an assistant on WhatsApp, Telegram, Messenger or Instagram, your messages also go through that app, under its own terms and privacy policy. The business connects its own account (its WhatsApp Business number, its Facebook page, its Telegram bot); we receive your messages from the app and send the replies back through it. We only answer messages sent to the business: we never message you first.

Cookies and your browser

The assistant sets no cookies. While the tab is open it keeps the conversation in your browser's session storage, so it survives a page change; it's gone when you close the tab. Your IP address is used for a short time to limit abuse and isn't stored.

If you're a business, or asked us for access

• The request access form: your name, email, business, website, industry and message, and the IP address it was sent from (to stop spam). We use these only to reply and to set up your assistant.
• Dashboard accounts: your email, a password (stored only as a one-way hash) and your role. Signing in sets one cookie that keeps you signed in for up to 14 days; it's needed for the dashboard to work. We log who published or deleted what, so each business has a record of its changes.
• Your business content: the answers you approve, the documents and emails you send us (we keep their text, not the original files), and the logins for systems the assistant reads, which are stored encrypted.

We use this to provide the service you asked for, as agreed in our terms.

Who else processes data

We use a few providers to run the service. Each one only gets what it needs for its part:

So your data is stored and processed in the United States. By using the assistant or sending us your details, you accept this transfer. We choose providers with appropriate protections and only send what each step needs.

How long it's kept

The server erases these automatically once they reach the age below. A business can delete contact requests and confirmed requests sooner from its dashboard.

Emails already sent to a business stay in its mailbox under its own control.

How it's protected

• All traffic uses HTTPS.
• Logins to a business's systems are stored encrypted, and the assistant's connections to them are read-only.
• Each business sees only its own assistant's data.
• Only Cristian Desivo has access to the server.

No system is perfectly secure. If a breach affects your data, we'll tell you and the affected businesses without undue delay.

Your rights

Under Argentina's Personal Data Protection Law (Ley 25.326) you can:

• see the data we hold about you, free of charge, at intervals of six months or more unless you have a legitimate reason to ask sooner;
• have it corrected or updated;
• have it erased, or kept confidential.

Write to cdesivo92@gmail.com from the address you want us to look for, or tell us the email or phone you used in the chat. We may ask you to confirm it's you. We reply to requests to see your data within 10 calendar days, and correct or erase it within 5 business days. If your request is about a conversation with a business's assistant, we'll handle it with that business. Erased data leaves our backups within 14 days.

If you live outside Argentina, the law where you live may give you similar rights; write to us and we'll help.

LA AGENCIA DE ACCESO A LA INFORMACIÓN PÚBLICA, en su carácter de Órgano de Control de la Ley N° 25.326, tiene la atribución de atender las denuncias y reclamos que interpongan quienes resulten afectados en sus derechos por incumplimiento de las normas vigentes en materia de protección de datos personales.

In English: Argentina's Agency for Access to Public Information (AAIP), which oversees Law 25.326, handles complaints from anyone whose data rights have been affected.

Children

The service is meant for businesses and their customers, not for children under 13. If you think a child has given us personal data, write to us and we'll erase it.

Changes to this policy

If we change this policy, we'll update it here and change the date at the top. Businesses using the service get an email about any significant change before it takes effect.