Privacy policy

Portal controller: TLART Services LLC, United States of America. Privacy contact: info@tlartservices.com.

This notice describes the TLART AI Platform portal, its integration with professional Instagram accounts and the TLART Portal Pruebas WhatsApp pilot. The policy of the business you contact may also apply to its conversations.

Information we use

• Identifier and email address for your TLART sign-in method. Google verifies your sign-in; TLART does not receive your Google password.
• Business information you provide, such as services, instructions, opening hours, prices, documents and support requests.
• Identifiers and username of the authorised professional Instagram account, permissions, access credential, expiry and connection status. The password is entered only on Instagram.
• Messages and files received through authorised channels, participant identifiers, replies and handling status, according to features enabled for each business.
• Technical session and connection data, sign-in attempts and change records needed for security and operation. IP addresses may be processed to limit abusive sign-in attempts.

WhatsApp pilot: TLART Portal Pruebas

The direct Meta integration prepares connections for WhatsApp Business accounts and numbers authorised by their administrators, receives messages and delivery statuses and links them to the assistant and human support. It may process account and phone identifiers, participants’ numbers, message text, dates and statuses. Meta processes channel data and Cloudflare hosts the receiver, portal and storage. Once the business enables the assistant, the OpenAI API may receive the text and context needed for replies. This direct WhatsApp connection does not use Composio to transport messages. Prepared screens or a Meta test do not prove a real number is connected or automatic replies are active. Connection, permissions and delivery are validated before enabling the service.

To withdraw WhatsApp authorisation, use Meta’s integration settings or contact TLART. You do not need to delete your account or uninstall WhatsApp. Revoking permissions does not itself delete test records; request deletion through the contact in this notice.

How we use it

To identify the owner, store information, connect the correct professional account, manage authorised conversations, prepare and test assistants, enable human support, protect the service and handle support and privacy requests. Instagram authorisation can be withdrawn. Connecting an account does not itself activate assistant replies.

Access and service providers

The owner accesses their space and authorised TLART staff provide the service. Cloudflare provides hosting and storage. Enabled AI features use the OpenAI API and may transmit the context and messages needed for replies; images are processed only if that feature is enabled. If you connect Instagram through Composio, that provider manages authorisation, holds and renews credentials; TLART stores the connection identifier and links it to your business. Messages and replies may pass through Composio when that channel is used. Google and Meta manage their own sign-in and authorisation processes under their policies.

TLART is registered in the United States and uses providers with international infrastructure. We do not guarantee exclusive storage in one country. Contact us for information about processing applicable to your service.

Retention and security

We retain workspace and conversation data to maintain the service and handle related requests. Disconnecting does not delete historical data; you can request deletion as described below. Any retention after a request must be assessed against its scope and applicable obligations.

Portal sessions expire after eight hours and Instagram authorisation states after ten minutes. Maintenance clears expired sessions and challenges. Direct Instagram credentials are stored encrypted and linked to each business’s workspace. With Composio, credentials remain with that provider and are not sent to the customer’s browser. Client and operator access are separate. No system guarantees absolute security.

Your requests

You can request access, correction or deletion and, where applicable, restriction, objection or portability. If you consider your rights unmet, you may contact the competent authority under applicable law.

To request deletion, email info@tlartservices.com with the subject “Eliminar datos de TLART” and identify the business and related Instagram account or WhatsApp number. You can also submit a request through Help in your space.

Do not send passwords or tokens. We may request the minimum information needed to verify identity and locate data. If you wrote to a business served through TLART, identify it so it can handle your request.

You can withdraw permission through Instagram. Disconnecting removes the local credential and stops the channel; it does not itself delete all saved messages, documents or records.

When a signed deletion request arrives from Meta, we record it and pause the related connection. The confirmation and tracking link acknowledge receipt. The team reviews and performs deletion; receipt does not confirm complete deletion. Use the reference or contact us to check status.

Authority requests

TLART’s owner is the contact for these requests. As of 20 October 2026, a formally implemented internal review and recording procedure has not been confirmed. This notice does not claim such a procedure exists.

Changes and contact

Updates to this notice will be published here. For questions, contact info@tlartservices.com.