Privacy Policy

This Privacy Policy explains how Echother collects, uses, shares and protects personal data when you visit our website or use our platform to create, manage and sell AI automations.

Echother is a trade name operated by Alber Ibarra, an individual domiciled in Colombia (hereinafter, “Echother” or “we”). For any matter related to your data you can write to us at hello@echother.com. This policy is governed by Law 1581 of 2012, Decree 1377 of 2013 and other Colombian data protection regulations.

1. Who this policy applies to

Our customers are agencies and professionals who sell automations to other businesses. With respect to their account data, Echother acts as data controller. With respect to the data that the agency uploads or captures about its own clients (for example, meeting recordings, transcripts and data that flows through its automations), Echother acts as data processor on behalf of the agency, which is responsible toward those individuals.

2. Data we collect

• Account data: name, email address, agency name and team members.

• Billing data: plan, subscription status and payment history. Subscription payments are processed by Dodo Payments; we do not store card numbers.

• Meetings: when the agency sends our bot to a meeting, we store the audio or video, the time-stamped transcript and the findings generated from it.

• Workflows, proposals and client dashboard: automation settings, prices, proposals, link opens, change requests and logs of each run.

• Connections: credentials or tokens for the apps that are connected (for example Google or WhatsApp Business) and the agency’s Stripe or Wompi keys, which we store encrypted.

• Technical data: IP address, browser, device, pages visited and cookies required for the service to work.

3. What we use the data for

We use the data to provide the service (record and transcribe meetings, detect automation opportunities, generate and run workflows, send proposals and display the client dashboard), manage your account and subscription, give you support, send you service communications, prevent fraud and abuse, comply with legal obligations and improve the product. We do not sell personal data. We do not use the content of your meetings or your clients’ data to train artificial intelligence models.

4. Artificial intelligence

To transcribe and analyze meetings and to generate workflows we use artificial intelligence providers such as Anthropic, OpenAI and Deepgram. We send them only what is necessary for each task. Results are generated automatically and may contain errors, so the agency must review them before activating them or sending them to its clients.

5. Who we share data with

We share data only with providers that help us operate the service and that act under our instructions: Supabase (database and authentication), Railway (infrastructure and automation engine), Attendee (bot that joins meetings), Deepgram and OpenAI (transcription), Anthropic and OpenAI (AI analysis), Resend (service emails) and Dodo Payments (subscription billing). When you connect an app, such as Google, WhatsApp, Stripe or Wompi, data is exchanged with that provider according to your authorization. Charges that the agency makes to its clients are processed in the agency’s own payment account. We may also share data when a competent authority requires it under the law.

6. International transfer

Several of our providers are located outside Colombia, mainly in the United States. By using Echother you authorize the transfer and transmission of your data to those countries, where we protect it through contractual commitments and security measures equivalent to those of this policy.

7. Meeting recording

The Echother bot joins the meeting as a visible participant. Before recording, the agency must inform the other participants and obtain their authorization in accordance with applicable law. If you took part in a meeting recorded with Echother and want us to delete that information, you can ask the agency or write to us directly.

8. Retention

We keep the data while your account is active and for as long as necessary to provide the service. The agency can delete its meetings, recordings and workflows at any time. When an account is closed we delete or anonymize the data within a reasonable period, except for data we must keep for legal, accounting or security obligations.

9. Security

We protect data with encryption in transit, encryption at rest for credentials and keys, separation of data by agency and restricted access for our team. No system is completely secure, but if an incident affecting your data occurs we will notify you and report it to the authority where applicable.

10. Your rights

As a data subject you have the right to know, update and rectify your data; request proof of the authorization you gave us; be informed about how we use your data; revoke the authorization or request deletion of your data when there is no legal duty to keep it; access it free of charge; and file complaints with the Superintendencia de Industria y Comercio (Colombia’s Superintendence of Industry and Commerce). To exercise these rights, write to us at hello@echother.com. We respond to inquiries within a maximum of ten (10) business days and to claims within a maximum of fifteen (15) business days, in accordance with Law 1581 of 2012.

11. Cookies

We use cookies necessary to sign in and keep the service running, and basic site analytics to understand how it is used. You can block cookies from your browser, although some features may stop working.

12. Minors

Echother is aimed at professionals and companies. It is not intended for people under 18 and we do not intentionally collect their data.

13. Changes to this policy

We may update this policy. We will publish the new version on this page with its date and, if the change is substantial, we will notify you by email before it takes effect.

14. Contact

If you have questions about this policy or about your data, write to us at hello@echother.com.