1. Data Controller
Luna Aegis Labs, with commercial domicile in Mexico, is responsible for the processing of your personal data in accordance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.
Privacy contact email: privacy@lunaaegislabs.com
2. Personal Data We Collect
Depending on the product or service you use, we may collect the following categories of data:
2.1 Data provided directly by the client (B2B)
- Name or business name
- Contact email address
- Phone number
- Billing information (Mexican tax ID / RFC, tax address)
2.2 Data processed through AgentWA
AgentWA is a B2B service that enables businesses to create intelligent WhatsApp agents. When an end user interacts with a WhatsApp agent operated by one of our clients, the following data is processed:
- End user's phone number (provided by the WhatsApp Business API)
- WhatsApp profile name
- Content of messages sent to the agent
- Conversation history with the agent
- Date and time of interactions
Important: Luna Aegis Labs acts as a data processor for this data on behalf of the business operating the agent, who is the data controller. The client business is responsible for informing their end users about the use of automated agents.
2.3 Technical data
- IP address (server logs)
- Browser type and device (when visiting our website)
- Strictly necessary cookies for website functionality
3. Purposes of Data Processing
Your personal data will be processed for the following purposes:
Primary purposes (necessary for service delivery)
- Delivery of the contracted service (AgentWA, Google Maps Extractor, AegisLookup, or other products)
- Processing WhatsApp messages through artificial intelligence to generate automated responses
- Storing conversation history for service continuity
- Billing and client account management
- Technical support and customer service
- Compliance with legal obligations
Secondary purposes
- Sending communications about service updates
- Improving our products and services
- Generating anonymized usage statistics
If you do not wish your data to be processed for secondary purposes, you may send your request to privacy@lunaaegislabs.com.
4. Artificial Intelligence Processing
AgentWA uses third-party artificial intelligence models to process incoming messages and generate responses. In this regard, we inform you that:
- Messages are sent to AI providers exclusively to generate the requested response
- We do not use end user conversations to train AI models
- Data is transmitted in encrypted form (TLS/HTTPS)
- WhatsApp Business API access tokens are stored encrypted on our servers
- Conversations are retained only for as long as necessary for service delivery
5. Data Transfers
Your personal data may be transferred to:
- Meta Platforms, Inc. — Required for WhatsApp Business API functionality (international transfer to the U.S.)
- Artificial intelligence providers — For message processing (international transfer)
- Cloud infrastructure providers — For secure data hosting
These transfers are made in accordance with Articles 36 and 37 of the LFPDPPP and are necessary for the delivery of the contracted service. All providers maintain data protection policies and confidentiality agreements.
6. Your Rights (ARCO)
Under Mexican law, you have the right to Access, Rectify, Cancel, or Oppose the processing of your personal data (ARCO rights). To exercise any of these rights, please send a request to:
ARCO Requests
Email: privacy@lunaaegislabs.com
Your request must include: full name, email address associated with your account, a clear description of your request, and a document verifying your identity.
We will respond within a maximum of 20 business days as required by the LFPDPPP.
7. Security Measures
We implement administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, including:
- Data encryption in transit (TLS/HTTPS) and at rest
- Encrypted storage of access tokens
- Restricted access to personal data (principle of least privilege)
- Access monitoring and audit logging
8. Use of Cookies
Our website uses only strictly necessary cookies for its operation. We do not use tracking, advertising, or third-party analytics cookies. If we incorporate analytics tools in the future, we will update this notice and request your consent where required.
9. Data Retention
- Client account data: Retained while the business relationship is active and for the period required by Mexican tax obligations (5 years)
- Conversation history (AgentWA): Retained while the service is active. The client may request deletion at any time
- Server logs: Retained for a maximum of 90 days
10. Changes to this Policy
We reserve the right to modify this privacy notice. Any changes will be published on this page with the corresponding update date. For material changes, we will notify active clients by email.
11. Contact
For any questions or comments regarding this privacy policy, you may contact us at: