Messages we process for our customers

Who we are

Lastnod is a service published by Eric Mehdi Mollenthiel, sole proprietor (entrepreneur individuel), trading as Mollenthiel Studio (French business number SIREN 795 225 226), 103 avenue Lacassagne, 69003 Lyon, France. Contact: team@lastnod.com.

1. Our role

Lastnod is software that a business, our customer, uses to have AI agents work for its activity. When the business connects its own WhatsApp Business number (or a Discord server, a Telegram group, a Slack workspace, a LinkedIn account), its agents read the messages it receives and reply to them through our messaging gateway, a service we host.

For these messages, the business customer is the data controller; we act as its processor, only on its instructions, under the data processing agreement we have with it (Article 28 GDPR). If you wrote to the WhatsApp number of a business that uses Lastnod, that business decides how your messages are used: please contact it first.

2. What we receive

• For an incoming message: the person's WhatsApp number, their WhatsApp profile name, the text of the message (or the caption of a photo, video or document), its date and its identifier. Photos, videos, voice messages and files are not retrieved: the agent is only told that such content was sent.
• For a message sent by the business's agent: it goes through the gateway to WhatsApp; we do not keep its text.
• For a file an agent sends (image, PDF, document): it only passes through the gateway, in a temporary copy deleted as soon as it is handed to the messaging service; the log keeps neither its name nor its content.
• For a message an agent sends on Telegram: we keep, for 48 hours, its Telegram identifier, the conversation it was sent to and its sending and deletion dates, so that the agent can delete it if it made a mistake. Never its text or file.
• The business's WhatsApp Business number and the access to its account, stored encrypted.

3. How long and where

• The text of an incoming message waits, encrypted, in a short queue until it is delivered to the business's agent. It is deleted from the gateway as soon as it is delivered, or after 48 hours if it is never read. The gateway keeps no conversation history.
• The number and profile name of a person who wrote are used to deliver replies and to respect WhatsApp's 24-hour window; they are forgotten 90 days after that person's last message.
• The number of a person an agent wrote to is kept for up to 90 days, without the text, to deliver their reply.
• The identifier of a message an agent sent on Telegram is removed after 48 hours, the time Telegram allows a bot to delete its message. An agent can only delete messages the gateway sent for its business, never another person's message.
• The gateway's technical log (which service, which action, when, which result) is kept for 90 days. It contains no message text, number or name.
• The gateway is backed up every night, encrypted. A message still in the queue at that time, or the identifier of a sent message, may appear in a backup, which is deleted within 30 days.
• When the business disconnects WhatsApp or removes a number, the gateway immediately deletes the pending messages for that number and the people attached to it, and stops receiving messages from its WhatsApp account.
• Our servers and their backups are located in France, at OVHcloud.

Once delivered to the agent, a message becomes part of the business's workspace (a conversation, a task, a note) and stays there for as long as the business decides; it can delete it at any time. When its contract ends, its workspace is deleted under our terms.

4. Who can access them

• The business customer's agents and users, only for the numbers and places it has connected. No other customer has access.
• The business's own AI subscription (currently Claude, by Anthropic), which its agent uses to understand the message and prepare the reply, under the business's own contract with that provider.
• Our hosting provider, OVHcloud (OVH SAS, France), which rents us our servers.
• No one else. On our side, technical access to the gateway is used to run it, never to read messages, except at the business's request, for the security of the service, or when required by law.

We do not sell, rent or pass these messages to anyone else, and we do not use them for advertising or profiling.

5. WhatsApp and Meta

The WhatsApp service is provided by Meta. The business connects its own number and WhatsApp Business account on Meta's page; it remains solely responsible for them, under the WhatsApp terms it accepts with Meta. Messages go through Meta's WhatsApp Business Platform, which processes them under its own terms and privacy policy (whatsapp.com/legal). Messages that Meta charges for are billed by Meta directly to the business, on its WhatsApp account; we neither advance nor re-invoice them.

6. No AI training

We do not use any message or post that passes through the gateway to train or improve an AI model.

7. Requesting deletion of your messages

• You wrote to a business that uses Lastnod: contact that business, or email us at team@lastnod.com with your number and the business you wrote to. We forward your request to that business within two business days and, on its instruction, delete whatever is still in the gateway for your number. You will receive an answer within one month at most.
• You are the business customer: disconnect WhatsApp from your workspace, delete there the messages your agents stored, or email us at team@lastnod.com.

You may also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

8. Changes

This page may change with the service or the law; its last update date is shown at the top.