Last updated October 29, 2026
Privacy policy
What we collect, why, where it goes, and how to ask about it.
If this English text and the Spanish text differ, the Spanish text controls.
Who we are
Arodeni is a software studio in Caracas, Venezuela. This policy covers arodeni.com and Arodeni Panel at app.arodeni.com. It does not replace the notice your business gives its own customers.
Write to [email protected] (opens in a new tab). That address is how you ask for access, a correction, a copy or a deletion.
Who decides
Arodeni decides about Panel and desk accounts, passwords and sessions, Google sign-in, the signup answers, our own invoices and payment status, referral counts, our own clients, and our own WhatsApp number.
Your business decides about its customers, sales, inventory, cash closes, expenses, supplier invoices, balances, store credit, addresses, appointments, the files it uploads, and the chats on the WhatsApp number it connects. We store and process that second set only to provide the service.
Account and signup
We keep your name, your email, and your password as an Argon2id hash, not the password itself. If you sign in with Google, we receive the name, the email and the identifier Google returns, and we use them to open the session.
A second-factor secret is stored sealed. Recovery codes are stored only as hashes. Sessions expire. A browser you trust can skip the authenticator for 30 days.
Before the account exists, the signup can ask the business name, what it sells, what it is about, how it gets paid, how many people work there, the city, and how you heard of us. Those answers stay on the business record.
A register operator can be added with a name, a role and a PIN, and an optional WhatsApp number, and with no email. The owner adds that person. The PIN is not described here as a hash, because this policy states only what we have specified.
On an invoice we can store a legal name, a RIF or a cédula, a fiscal address and a phone. Those are poor candidates for deletion on request, because they identify a tax document.
What the business loads
Sales, inventory, cash closes, expenses, supplier invoices, balances, customers, store credit, addresses, map pins, appointments and files. They are kept for as long as the database exists. A lapsed plan does not delete them. The free plan can hide sales older than 31 days and still keep them.
Files such as PDFs and photos are stored in Cloudflare R2, not in the database backup. A real deletion has to include them. There is no button in the product that deletes a whole business.
A business can connect the WhatsApp Cloud API. We store the messages. Assistant chats, messages and receipt reads are kept for 180 days. Meta keeps its own copy on a shorter clock, about 30 days for message data. The two clocks are not the same.
Opt-in is the business's duty. The assistant must not ask for a card number or a cédula in the chat. A chat is not forwarded to another customer. If an assistant replies, there is a way to reach a person.
Arodeni's own WhatsApp number is ours, as the studio, and is separate from a shop's number.
Models
To read a price list or a supplier invoice, or to answer the assistant, we send the document or the chat, phone number included, to Anthropic or to DeepSeek. Which call uses which provider is not fixed in this policy, and it can change. The replies can be wrong.
On Anthropic's commercial API, inputs and outputs are not used to train models unless that is turned on or feedback is sent, and Anthropic deletes them from its backend in about 30 days, with exceptions for abuse, the law, a longer retention feature, or a different contract. Do not read 30 days as absolute. We do not send product feedback on production traffic.
DeepSeek, Hangzhou DeepSeek Artificial Intelligence Co., Ltd., says it collects, processes and stores personal data in the People's Republic of China. It does not publish the same “not used for training” promise Anthropic publishes for its commercial API. A supplier invoice can carry a RIF and bank details, and that is what leaves our servers.
We do not control those providers' copies. A letter to us does not delete their copy.
Payments
PayPal collects subscriptions, upgrades, reply packs and some invoices. We store the status of the payment. We do not store the full card number. PayPal hosts the card form. PayPal is an independent controller of what it collects. We do not claim to be PCI-DSS certified.
Crypto deposits are received through Kraken. A shop's customer often pays the business outside the app, in cash, by transfer or by pago móvil. That payment is the business's.
Refunds of a fee paid to Arodeni are on the Refunds page.
This website
A project brief is used to answer you. We do not add it to a newsletter, and we do not sell it. The brief asks for the business, what you need, and a way to reply.
If you open or share a referral link, we count the visit by place and day, and we leave out the crawlers that only fetch a link preview. The count is not described as anonymous. How fine the place is, and how long the count is kept, are not stated here because they are not fixed in this text.
How long
| What | How long |
|---|---|
| Activity log | 7, 30 or 365 days, depending on the plan |
| Unsaved invoice drafts | 7 days |
| Drafts already used | Forgotten after 90 days |
| Trusted browser | Can skip the authenticator for 30 days |
| Sessions and invitations | Until they expire |
| Assistant chats, messages and receipt reads | 180 days |
| Meta's copy on the Cloud API | About 30 days, a different clock |
| Sales on the free plan | Hidden after 31 days, still stored |
| A lapsed plan | Records are not deleted because the plan lapsed |
| Anthropic commercial API, by default | About 30 days, with the exceptions above |
| DeepSeek | No fixed period published; storage stated in China |
| Everything else in the database and in R2 | While they exist. Deletion of a business is by email |
When a deletion can be done, we delete the account and the business data we do not have to keep. We do not delete, on that request, invoices and fiscal data a legal duty requires us to keep, what an open payment or a dispute needs, or backups until they roll off. PayPal, Kraken, Google, Meta, Anthropic and DeepSeek keep what their own rules require.
Security
Passwords are hashed with Argon2id. Second-factor secrets are sealed. Recovery codes are stored as hashes. There is a second factor, register PINs, and a lockout after failed attempts. That lowers the risk. It does not remove it. No internet service can honestly promise it cannot be broken into.
Access, correction and deletion
You can ask what we hold and what it is for, by email. What the screen already shows, you can see by signing in. We do not promise a single download of everything, because that function is not in the product. Where the screen lets you edit, you correct it there. Where it does not, you write to us.
Deletion of an account or a business is by email to [email protected] (opens in a new tab). There is no delete button. We reply with what was deleted and what was kept, within the limits above. A register operator with no email asks through the owner.
A shop customer, a store-credit customer or a person in a chat asks the business. If they write to us, we point them to the business and we help the business. We do not empty a business's books because one customer asked, unless the law requires it or the business instructs it and the retention limits allow it.
Article 28 of the Constitution gives a person access to information about them held in a private register, the right to know its purpose, and a court route to update, correct or destroy data that is wrong or that unfairly affects their rights. That is narrower than a right to erase anything for any reason. There is no Venezuelan data-protection authority to complain to.
Children
The Panel is for businesses. We do not knowingly open a Panel account for a child. If a customer of a business is a minor and places an order, that relationship is with the business.
If something goes wrong
If we confirm that someone got into personal data without authorisation, and harm is likely, we email the account holder once we can say what happened and what they can do. We do not promise a number of hours. If the data belongs to a business's customers, we tell that business so it can tell its people.
We found no Venezuelan rule that sets a 72-hour notice for personal data. We do not promise to email every shopper, to publish a postmortem, or to pay for credit monitoring.
Shops and public pages
On a shop, a pay page, a receipt, a quote, a tracking page or an appointment, the seller is that business, not Arodeni. We host the page. The order, the phone, the address, the map pin, the store credit, the appointment and the chat with the assistant are decided by the business. The assistant can send that chat to a model in order to reply. Payment to the business often happens outside Arodeni.
The business publishes its own notice before it collects customer data, and names itself. That notice should say what it collects, that it uses WhatsApp and an assistant, that Arodeni hosts it, how to leave WhatsApp, and how to ask the business for a correction.
Changes
The date at the top is the version. A new use of Google account data needs your consent before that use, not only a new date. Other updates are made on this page.
Contact
[email protected] (opens in a new tab). WhatsApp +58 422 550 6247. Caracas, Venezuela. A court is not the route for an ordinary request. Write to us first.