Política de Privacidad

Last updated: [fecha]

Esta Política explica cómo [Nombre legal de la empresa] (“topdoer”) recopila, usa y protege la información al operar Onda.

1. Qué datos recopilamos

Datos de cuenta: nombre del negocio, email y contraseña (guardada solo como hash).

Datos de llamadas: números, grabaciones, transcripciones y resúmenes de las llamadas que tu agente atiende o realiza.

Datos de uso: métricas de llamadas, duración y actividad del panel.

2. Cómo usamos los datos

Para operar y mejorar el servicio, atender y realizar llamadas, generar transcripciones y análisis, dar soporte y facturar. No vendemos tus datos.

3. Proveedores (sub-encargados)

Usamos proveedores externos para operar el servicio, entre ellos un proveedor de orquestación de voz y telefonía, Deepgram (transcripción), ElevenLabs (voz) y Anthropic (modelos de lenguaje), además de un proveedor de base de datos en la nube y Vercel (infraestructura). Cada uno procesa datos únicamente para prestar su función. [Confirmar lista y acuerdos vigentes.]

4. Datos sensibles o regulados

Onda no está destinado a procesar datos regulados (por ejemplo, información de salud o financiera sujeta a normativa especial) sin un acuerdo por escrito. No subas ni proceses ese tipo de datos a través del servicio salvo que exista un acuerdo previo con nosotros.

5. Retención

Conservamos los datos mientras tu cuenta esté activa y según lo requiera la ley o tus acuerdos. Puedes solicitar la eliminación de grabaciones y transcripciones [detallar período de retención].

6. Seguridad

Aplicamos controles de acceso y aislamiento por cuenta: cada cliente accede únicamente a sus propios datos. Las claves sensibles se usan solo del lado del servidor. Ningún método es 100% seguro, pero trabajamos para proteger tu información.

7. Tus derechos

Puedes solicitar acceso, corrección, exportación o eliminación de tus datos escribiéndonos a [email de contacto].

8. Cambios

Podemos actualizar esta Política. Te avisaremos de cambios materiales.

9. Contacto

[Nombre legal] · [dirección] · [email de contacto].

Documentos and artificial intelligence

How Onda handles the documents you upload or create in Documentos, and what it sends to the language model provider.

Where your documents live

The documents you upload or create are kept in private storage at Onda's database provider. Every document and folder has its own access: only people with permission open them.

Download links expire after one minute and preview links after ten minutes.

When text leaves Onda, and what is sent

Some features send text to a language model. The model provider is Anthropic (Claude). This is what is sent in each case:

  • Documentos AI actions (Ask, Draft with AI, Review, Translate with AI and Fill with AI): what you ask for; the document you review or translate, or the template you fill; the passages of your documents that search finds for your question or brief; and the business profile, the style guide, the glossary and the folder's details.
  • When drafting, reviewing, translating and filling, wording corrections your team made to AI text in other documents of the same folder also go along as examples, only for the document types the workspace allows. They are marked as wording examples, with the instruction not to reuse their facts.
  • The content and email drafting tools: what you ask for, plus the business profile, the style guide and the glossary.
  • The assistant that sets up your agent: what you type to it and, if you ask it to import a website, that website's text.

Uploading, indexing, searching and reading documents send nothing to the model provider.

The search index is built and stored at Onda's hosting and database providers, and it is never sent to a third party.

When similarity search is on, it is computed there too, with no outside service.

Citations

In Ask answers, a "verified" citation means Onda checked that what is cited is in the source's passage. A "not verified" citation points to the source the model named, without that check: review it before you use it.

Each answer keeps the passage it cites, so it can be shown later even if the document changes.

Translations

AI translations are a working aid, not certified translations. Review them before you use them outside your team.

Questions are shared

Anyone who can see a folder, or every document chosen for a question, can read that conversation and add to it. Admins see every conversation.

If someone cannot see one of the documents cited, that source shows as hidden to them.

The spend ceiling and its alerts

Every workspace has a monthly ceiling on AI spend. The owner and the admins get an email at 80% and at 100%. At the ceiling, Documentos AI actions pause until next month or until an admin raises it; the rest of Onda keeps working.

The voice agent

An admin can publish a business profile for the voice agent: the profile, the style guide, the glossary and short facts from the documents marked for the agent. Publishing does not send it: with sending turned on, an admin confirms each version before Onda adds it to each agent's instructions, in a separate section that is removed when sending is turned off.

Once sent, anyone who calls can hear what was published, and the voice provider stores it with every call. While the profile has facts from documents, the agent only sends messages from approved templates. An admin can erase the text of a published version; the agents that have it stop having it.

Contacts

Contacts: names, phones and emails your team saves or imports from tickets, messages and folders; the whole team sees them; an admin can delete them permanently.

Activity

Activity keeps references: ids, durations, outcomes and which team member acted. It never keeps callers' transcripts, names or numbers, or document titles. An admin can erase it, all of it or one contact's.

Documents from calls

Creating a document from a call reads the transcript at that moment and sends it to the language model to fill the template; the transcript is not kept.