Overview
This Policy describes how TLJ Tech Systems and Development, LLC handles information in connection with Mira, a Cockpit AI agent subscribed to separately (the “Application”). The Application is installed in your Bitrix24 account and connects your company's official WhatsApp number (Meta's WhatsApp Business Cloud API, including Coexistence with the WhatsApp Business app) and WhatsApp Business lines connected by QR code to Contact Center Open Channels. Beyond customer conversations, it offers sending templates and messages from the CRM, automation robots, Journey (an AI chatbot built from visual blocks) and WhatsApp marketing Campaigns. Each feature only processes data when it is subscribed and in use in your account.
You — the owner of the Bitrix24 account and of the WhatsApp Business account — are the controller of the CRM and conversation data. TLJ Apps acts as a processor: it handles that data on your behalf, following the configuration you set in the Application.
Data the Application Processes
| Data | Purpose | Retention |
|---|---|---|
| Contacts, phone numbers, deals, leads and Open Channel chats from your Bitrix24 | Identify the customer in the conversation, send messages from the card, build campaign audiences and run Journey's CRM blocks | Read on demand, at the moment of use. They remain stored in your Bitrix24 |
| WhatsApp messages and media exchanged with your customers | Carry each message between Meta and the Bitrix24 Open Channel, in both directions | The conversation stays in your Bitrix24. Media links are signed and expire; on the QR code line servers, media files are kept for 24 hours |
| Send logs and delivery statuses (sent, delivered, read, failed) | Show the status in conversations and campaigns, work out costs and investigate failures | Up to 90 days |
| Campaigns: audience, message variations, tracked links, clicks, cost estimate and revenue from won deals | Run the campaign at the set pace and show the results | For as long as the campaign exists; send logs follow the 90-day limit |
| Journey flows, with the texts and company knowledge you enter in them, and the state of each conversation in the flow | Run the chatbot and let the AI agent answer with your company's knowledge | Flows, for as long as they exist in the Application; conversation state, while the conversation is running in the flow |
| AI usage counters (number of credits consumed, without message content) | Track the credits included in the plan and additional credits | For as long as the Application is installed |
| “Do not contact” list | Prevent new campaign sends to people who asked not to receive messages | For as long as the Application is installed or until you remove the number from the list |
| Meta access tokens and Bitrix24 OAuth tokens | Send and receive messages through Meta and read and write in your account, including in scheduled routines | For as long as the Application is installed; deleted on uninstall |
| Settings, connected numbers, templates, Meta costs and subscription status (Stripe identifiers) | Make the Application work the way you configured it and enable the features you subscribed to | For as long as the Application is installed |
Artificial Intelligence
Journey's AI agent block uses language models run on Cloudflare's infrastructure (Workers AI). To produce an answer, the Application sends the model the customer's message, the recent part of the conversation and the company knowledge you entered in the flow.
- According to Cloudflare's documentation, content sent to Workers AI is not used to train models or to improve Cloudflare or third-party services.
- We do not use your data or your customers' data to train models of our own.
- AI usage counters record only the number of credits consumed, without message content.
- Artificial intelligence answers are produced by a statistical model, which can be wrong. Review the flows and the knowledge you entered, and keep the option to transfer the conversation to a person.
What the Application Writes to Your Bitrix24
Mira is not read-only. Depending on the features subscribed and the configuration you make, it can:
- Deliver messages received on WhatsApp to Bitrix24 Open Channels and send your team's replies to WhatsApp.
- Send templates and messages to your customers from the CRM card, automation robots, Journey and campaigns.
- Create and update contacts, deals and leads, when a Journey CRM block or a robot is configured to do so.
- Transfer and close conversations in the Contact Center, according to the flows and robots you configure.
WhatsApp Business Lines by QR Code
Lines connected by QR code do not use Meta's official API. They run on TLJ-operated servers at Amazon Web Services (AWS Lightsail, São Paulo region), reached through Cloudflare Tunnel. Messages pass through those servers on the way to Bitrix24, and media files are kept on them for 24 hours.
Unofficial use of WhatsApp is subject to WhatsApp's terms and may lead to restrictions on, or blocking of, the number. By connecting a line by QR code, you accept that risk.
What We Do Not Do
- We do not sell, rent or transfer data to third parties.
- We do not use your data or your customers' data for our own advertising or for other customers.
- We do not keep a copy of your CRM or of the conversation history. What we store is listed in the table above.
- We do not mix data from different accounts: each installation has its data kept separate.
- We have no access to card data: payments are processed entirely by Stripe.
Where Data Lives
The Application runs on Cloudflare's network (Cloudflare Workers). Tokens, settings, flows, campaign data and send logs are stored in Cloudflare databases (Workers KV and D1). QR code lines run on the servers described above. Traffic is always encrypted in transit (HTTPS/TLS).
Third-Party Services
- Bitrix24: your CRM, source of the data and destination of the conversations and of the changes made by the Application.
- Meta Platforms (WhatsApp Business Platform): sending and receiving messages for the official number, templates and message charges, directly on your WhatsApp Business account.
- Cloudflare: hosting, storage (Workers KV and D1), the access tunnel to the QR code line servers and artificial intelligence inference (Workers AI).
- Amazon Web Services: servers for WhatsApp Business lines by QR code, in the São Paulo region.
- Stripe: processes subscription payments. Payment details are provided by you directly to Stripe, subject to Stripe's privacy policy (stripe.com/privacy).
Your Rights
Because CRM data and conversations live in your Bitrix24, data subject requests for access, correction or deletion are fulfilled by you, directly in the CRM. For what is under our custody — tokens, settings, flows, campaign data and send logs — you may request access or deletion at any time at contato@tlj.net.br. The Brazilian LGPD (Law 13.709/2018) and, where applicable, the GDPR apply.
Data Deletion
Uninstalling the Application from your Bitrix24 account deletes the access tokens and stops sending and receiving messages and the scheduled routines. To also erase the settings, flows, campaign data and send logs we hold, write to our contact — we respond within 30 days. The conversations and the changes the Application made to your CRM remain in your account, under your control.
Security
All calls use HTTPS. Meta access tokens and Bitrix24 OAuth tokens are stored encrypted at rest by Cloudflare, are reachable only by the Application and are never shown in the interface. Events received from Meta and Bitrix24 are validated before being processed, and media links are signed and expire.
Changes to This Policy
We may update this Policy to reflect changes in the Application or in applicable law. The update date at the top of this page indicates the current version.
Contact
Privacy questions: contato@tlj.net.br — TLJ Tech Systems and Development, LLC.