Tango Agent is an AI agent that answers real estate agencies' clients on WhatsApp, together with a console where each agency's team manages its listings, conversations, viewings and leads. This policy explains what personal data we process, why, who we share it with and how you can exercise your rights.
“We” means Tango Agent (contact: santino.fajardo@tangoagent.app). An “agency” is the company that subscribes to Tango Agent, and an “end client” is the person who messages that agency on WhatsApp.
Who decides about each piece of data
We process data in two different roles, and it helps to keep them apart:
- We are the controller of the data of visitors to this site, of people who contact us, and of the accounts of people who use the console.
- We are a processor of each agency's end-client data: their WhatsApp conversations, profiles, viewings and leads. The agency is the controller and decides what the data is used for; we only process it to provide the service and on the agency's instructions.
If you are an agency's end client and want to know what data it holds about you, the fastest route is to ask the agency. If you write to us, we will forward your request and help get it resolved.
What data we process
| Whose | What data | Where it comes from |
|---|---|---|
| Site visitors | We use no analytics or advertising cookies; our hosting provider logs technical data for each visit, such as IP address and browser. The contact form opens your email app with a pre-filled message; it only reaches us if you send it, with your name, agency, email, country and message. If you message us on WhatsApp or book a call, we receive whatever you share there. | You, our hosting provider |
| Team members (console) | Name, email, role, the agencies they belong to, invitations, their last sign-in date, and the actions they take in the console (for example, who replied to a message or confirmed a viewing). If they are a handoff contact, their WhatsApp number. If they have a WhatsApp number for viewings, that number, whether they show properties and whether the number is verified: the rest of the team can see the number, it is shared with the client along with their name when the member becomes responsible for a viewing, and Twilio and Meta process it to send them viewing offers and notices and to receive their replies. If you sign in with Google, we receive the name and email of your Google account. | You, the agency that invites you, Google |
| End clients | WhatsApp number and alternate phone, name and email if shared, the text of messages with the agent or the team, listing links they send, the properties they asked about, viewings they requested, their client type (for example, buyer or renter), their lead status and short notes about what they are looking for, written by an automatic summary and editable by the team. Each viewing's details (property, address, day and time) and the client's first name reach team members on WhatsApp; their name, phone number and the link to the conversation, which requires signing in to the console, reach only the member who accepts it. If a viewing notice does not reach the client, their phone number goes in an alert so someone can contact them: to the viewing's host, or to owners and admins if no one has taken it. We do not store audio, photos or other attachments they send. | The end client on WhatsApp, the agency's team |
| Agencies | Name, description, service areas, hours and tone, WhatsApp line and its Twilio credentials (encrypted), handoff contacts, property listings and photos, and the agent's configuration. | The agency |
| Technical usage | Operational records: timestamps, errors and AI model usage per conversation. They are written with as little personal data as possible: phone numbers are masked and errors are recorded by type, without message content. | The system |
Console passwords are stored hashed by our authentication provider: we do not store them.
We do not ask for sensitive data (health, religion, political opinions and the like). If an end client mentions it in a conversation, it stays in the history like any other message, and the agency can ask us to delete it.
What we use it for
- Providing the service: the agent replies on WhatsApp, searches the listings, records viewing requests and hands off to a person when needed.
- Letting the agency's team see and continue every conversation from the console.
- Remembering each end client's context —what they are looking for, what they already asked— so they don't have to repeat themselves.
- Authenticating team members and controlling what each role can do.
- Keeping the service secure, measuring its cost and fixing errors.
- Answering sales and support enquiries.
We do not sell personal data, we do not use it for advertising, and we do not build end-client profiles for anything other than serving the agency that received them. One agency's data is never used to serve another.
We process end-client data on behalf of the agency, which must have a legal basis to do so, such as the enquiry the client starts by messaging it. Console account data is needed to perform our contract with the agency, and contact-form data is processed because you send it to us so we can reply.
Artificial intelligence
- The agent's replies are generated by an Anthropic language model through its commercial API. To reply, we send it the agency's configuration, the ongoing conversation (including the team's messages and the viewing notices the client received), the end client's profile —name, what they are looking for, properties they asked about, viewings and notes—, the last messages of the previous chat and the results of the listing search. When a viewing has a host, their name and WhatsApp number are part of that conversation, because they go in the confirmation the client receives and in the viewings the agent looks up. We do not send the end client's phone number. When a chat ends, the model summarizes it to update the profile notes.
- Under Anthropic's commercial terms, data sent through its API is not used to train its models. We do not train models on agencies' conversations either.
- The agent is instructed to talk only about properties returned by a search of that agency's listings, cannot modify the listings and hands off to a person when needed. Team members who handle conversations can take over any of them at any time.
- Like any AI system, the agent can make mistakes. What it says about prices, availability or terms does not replace the agency's confirmation.
We recommend that every agency tell its clients they are being helped by an automated assistant, with the option to talk to a person.
Who we share it with
We use providers to host and run the service. Each one only receives what its part requires:
| Provider | Purpose | Location |
|---|---|---|
| Supabase | Database and console authentication | Brazil (São Paulo) |
| Vercel | Hosting for this site and the console | Brazil (São Paulo) and global edge network |
| Railway | WhatsApp agent server | United States |
| Twilio and Meta (WhatsApp) | Sending and receiving WhatsApp messages | United States and global |
| Anthropic | AI model that generates replies | United States |
| Cloudinary | Storage and delivery of property photos | United States |
| Resend | Console sign-in and invitation emails | United States |
| Sign in with Google, if you choose it, and a viewing's Google Calendar event, if the member hosting it opens that link | Global | |
| Calendly | Booking sales calls from this site, if you use it | United States |
| YouTube (Google) | The demo video on this site, if you press play | Global |
Beyond them, we only share data when a law or a competent authority requires it, or when the agency instructs us to. If we add or change a provider that processes end-client data, we update this table.
International transfers
Some providers process data outside Argentina, mainly in Brazil and the United States. We choose providers with contractual data protection commitments and appropriate security measures, and we only transfer what the service needs, in accordance with Argentine Law 25,326 and the rules of the Agency for Access to Public Information.
How long we keep it
- Agency and end-client data: for as long as the agency's service is active. From the console, the agency can export its listings as CSV, and ask us for a copy of its clients, leads, viewings and team.
- When an agency cancels the service, we delete its data within 30 days, except what we must keep to meet a legal obligation.
- The context the agent builds for each chat is a copy of the profile and recent messages, and it is deleted when the chat closes. The history and profile notes remain: the team can correct or delete the notes; we delete the history at the agency's request.
- Console accounts: removing someone from the team revokes their access immediately; their name and email are kept so the history still shows what they did, and they can ask us to delete their account.
- AI model usage records: kept for billing even if the conversation is deleted, without message content.
- Sales contact emails: as long as needed to reply and follow up on the enquiry.
Your rights
You can request access to, correction, update or deletion of your data, and object to its processing, by writing to santino.fajardo@tangoagent.app. We answer access requests within 10 calendar days and correction or deletion requests within 5 business days, as Argentine Law 25,326 requires.
If you are an agency's end client, the agency is the controller of your data: you can ask the agency or us, and we will forward it. From the console the team can correct your contact details and delete the notes in your profile; full deletion of your history is done by us at the agency's request.
As required by Argentine law: the data subject may exercise the right of access free of charge at intervals of no less than six months, unless a legitimate interest is shown under article 14, subsection 3 of Law 25,326. The Agency for Access to Public Information, as the supervisory authority of Law 25,326, handles complaints from anyone whose data protection rights have been affected.
If you live in another country, you may also have rights under your local law, such as the GDPR in the European Union. Write to us and we will respond under whichever applies.
Security
We protect data with per-agency isolation, role-based access control, encryption in transit and sealed credentials, among other measures. The details are on our Security page.
Minors
The service is designed for agencies and their adult clients, and we do not seek to collect data from anyone under 18. If an agency finds it has chatted with a minor, it can ask us to delete that data.
Changes to this policy
If we change anything significant, we notify agencies by email or in the console before it takes effect, and we update the date on this page.
Contact
For any privacy question or to exercise your rights, write to us at santino.fajardo@tangoagent.app.