atendari← Back to the sitePrivacy policy
Last updated: 3 November 2026
Atendari is an AI front desk for businesses that work by appointment. It answers a business's clients in WhatsApp, Instagram and Telegram, books into the business's booking system, and hands the conversation to the business's team when needed. This page explains what personal data that involves, why, where it goes and for how long.
Who we are
Atendari is run by Anastasiia Matsakova, trabalhadora independente (sole trader) in Portugal, NIF 311254934, Rua de 9 de Julho 50, Lote 3, 4050-433 Porto, Portugal. Write to us at hello@atendari.com about anything on this page.
Two roles
- For a business's clients (people who message a business that uses Atendari): the business decides how your data is used and is the controller. We process it on the business's behalf, as its processor, under our data processing agreement. For your rights, contact the business; you can also write to us and we will pass it on and help.
- For the businesses' team members who use the Atendari inbox, and for visitors of this website: we are the controller.
What we process
| Whose | What | Why |
|---|---|---|
| A business's clients | The messages you exchange with the business on WhatsApp, Instagram or Telegram (text), the name and the @username or phone number the platform shows us, and the booking details needed to book, move or cancel an appointment (service, time, name, phone). | To answer you on the business's behalf, book in its calendar, and let its team read and take over the conversation. |
| Team members | Name, email address, password (stored only as a one-way hash), role, sign-in sessions, and, if you turn them on, browser notification subscriptions. | To give you access to the inbox and notify you when a client needs you. |
| Website visitors | If you request early access: your email address and the country your request came from. | To contact you about the pilot. |
Legal bases: for the businesses, performing our contract with them (and their own basis towards their clients); for team members, the contract with their business and our legitimate interest in running a secure service; for early-access requests, your consent, which you can withdraw at any time.
We do not sell personal data, do not use it for advertising, and do not use clients' messages to train AI models ourselves.
Where it goes
We use these providers, each only for its part of the service:
| Provider | What for | Where |
|---|---|---|
| Oracle Cloud | Our server and database: conversations, inbox accounts | Frankfurt, Germany |
| Anthropic (Claude) | The AI model that reads a conversation and writes the reply | United States |
| Meta (WhatsApp, Instagram) and Telegram | Delivering messages between clients and the business | Their own infrastructure |
| The business's booking system (EasyWeek) | Services, free times and bookings | Chosen by the business |
| PostHog | Usage and reliability numbers (what happened, how long it took, what it cost). Never message text, names or phone numbers. | European Union |
| Cloudflare | This website and early-access requests | Global network |
| Your browser's push service (Apple, Google, Mozilla) | Inbox notifications for team members, sent encrypted | Their own infrastructure |
Some providers are outside the European Economic Area: Anthropic processes the conversation in the United States to write each reply. We are moving our use of Anthropic to its business terms, which include a data processing agreement with the European Commission's Standard Contractual Clauses; this page will say so when that is done.
How long we keep it
- Conversations: while the business uses Atendari, so its team can see a client's history. The business can delete a conversation at any time. When a business stops using Atendari, we delete its conversations within 30 days.
- Team accounts: until the business removes the person, or stops using Atendari.
- Early-access requests: until you ask us to remove yours, and at most 24 months.
- Technical logs (to find and fix faults): up to 90 days.
Your rights
You can ask to see your data, correct it, delete it, restrict or object to its use, or receive it in a portable form. Write to hello@atendari.com; we answer within 30 days. How to ask for deletion is on our data deletion page. You can also complain to the Portuguese data protection authority, the CNPD.
Security
Connections are encrypted (HTTPS). The businesses' logins to WhatsApp, Instagram, Telegram and their booking system are stored encrypted. Inbox passwords are stored only as hashes. Access to the server is limited to the people who run Atendari.
Cookies
This website uses no cookies and no tracking. The inbox uses one cookie, only to keep you signed in.
Changes
If we change this policy, we update the date at the top, and tell the businesses that use Atendari before a change that affects their clients' data.