Skip to content

Privacy

Privacy policy

Last updated: 26 September 2026

This policy explains what data we handle, what for, who we share it with and what you can ask of us. It describes what the product does today: if the product changes, we update this page first.

1. Who we are

Vexiia is a brand and product of Vecinos Vendemas Publicidad, whose registered office is at Vista de Momotombo B-25 L-8, Managua, Nicaragua. Phone +505 8240 0388.

For any privacy matter, write to privacidad@vexiia.com.

2. What Vexiia does

Vexiia lets a business connect its WhatsApp Business number through Meta's WhatsApp Business Platform (Cloud API), using the official Embedded Signup flow. The business can keep using the WhatsApp Business app on its phone; that is what Meta calls coexistence.

Once connected, an artificial intelligence agent replies to the business's contacts, books, reschedules and cancels appointments, and sends reminders using Meta-approved templates. Staff at the business can take over the conversation at any moment. The agent does not give diagnoses or medical advice: it only handles administrative information.

3. Who is accountable for which data

Not all data flowing through Vexiia has the same controller:

  • Data of the business that hires Vexiia — name, contact details, account users, billing: Vecinos Vendemas Publicidad is the controller.
  • Data of the business's contacts — the patients or end customers who write on WhatsApp: the business is the controller and Vecinos Vendemas Publicidad acts as processor, following its instructions.

4. What data we handle

From the business

  • Name and contact details.
  • Account users and their roles.
  • Meta identifiers: business portfolio ID, WhatsApp Business account ID and phone number ID.
  • Access tokens granted by the business, stored encrypted.
  • Service configuration.

From the business's contacts

  • WhatsApp number and profile name.
  • Message content, including any files sent.
  • Appointment details: date, time, service and practitioner.
  • Message delivery status.

Synced history

If the business authorises it during connection, we receive its contacts and the chat history from the WhatsApp Business app for up to the last 6 months. Groups are excluded. The business can decline to share that history and the service still works.

5. What we use it for

  • Providing the service: replying, booking, reminding and showing conversations to the business's staff.
  • Supporting the business.
  • Security and abuse prevention.
  • Billing.
  • Meeting legal obligations.

6. What we never do with your data

  • We do not sell data.
  • We do not use contacts' messages for advertising.
  • We do not use your data to train artificial intelligence models, neither our own nor anyone else's.

7. Who we share it with

To run the service we rely on providers that process data on our behalf:

  • Meta Platforms, as operator of the WhatsApp Business Platform.
  • Hostinger International Ltd., a Lithuanian company, providing two services: the virtual private server Vexiia runs on, and email for our domains. The Vexiia server is located in the United States. Hostinger may also keep, process or store data in Lithuania, the Netherlands, the United Kingdom and Cyprus.
  • Groq, Inc. (United States), provider of the artificial intelligence models. It processes the text of messages to generate the agent's replies.

We share data with no one else, except where the law requires it.

8. Transfers outside Nicaragua

Some of those providers are based outside Nicaragua, so your data is processed in other countries. Specifically, the server Vexiia runs on is in the United States, and the artificial intelligence models also run in the United States. In addition, Hostinger may keep, process or store data in Lithuania, the Netherlands, the United Kingdom and Cyprus. We work with providers that apply appropriate security measures.

9. Security

  • Encryption in transit via HTTPS and TLS.
  • Tokens and sensitive data encrypted at rest.
  • Role-based access restrictions.
  • Access logs.
  • Backups.

10. How long we keep it

  • Messages and appointments: while the business has an active account, and up to 30 days after cancellation. They are then deleted.
  • Backups: overwritten on a cycle of at most 30 days.
  • Billing data: four (4) years, the limitation period under Nicaraguan tax law. We cannot delete it sooner, even if you ask us to.

11. Your rights

Under Law No. 787, the Personal Data Protection Law of Nicaragua, you may exercise your rights of access, rectification, cancellation and objection.

If you are a patient or customer of a business that uses Vexiia, go to that business first: it is the controller of your data. We work with them to handle your request. You can also write to us at privacidad@vexiia.com.

If what you want is to have your data deleted, the step-by-step procedure is on the data deletion page.

If the business does not respond

You may write to the business and get no reply. Since we process that data on their behalf, we cannot simply decide in their place — but we will not leave you without a way forward either. This is what we do:

  1. We pass your request to the business without undue delay and follow it up.
  2. If 30 calendar days pass with no reply from the business, we tell you so in writing, explain where things stand, and point you to the competent data protection authority in Nicaragua.
  3. If by then the business's account is cancelled or inactive, your data enters our deletion periods anyway and is deleted, with no further authorisation needed.
  4. If the business were to give us an instruction that, in our view, breaches data protection law, we warn them in writing. That is an obligation we take on in the Data Processing Agreement.

12. Minors

The service is aimed at businesses. We do not knowingly collect data from minors as users of the platform. Data about under-age patients is managed by the clinic or business under its own responsibility.

13. This website: no cookies

Everything above concerns the Vexiia service. About vexiia.com, this website, the answer is short:

  • It uses no cookies, neither our own nor third-party ones.
  • It carries no analytics or measurement tools.
  • It embeds no third-party content: the typeface, images and styles are all served from our own domain.
  • There are no forms. Contact is by email or WhatsApp.

That is why you will not see a cookie banner: there is nothing to consent to. If we ever added any, we would update this policy before doing so.

14. Changes to this policy

If we change this policy, we update the "last updated" date shown above. If the change is significant, we notify the businesses using the service.

15. How to reach us

Vecinos Vendemas Publicidad
Registered office: Vista de Momotombo B-25 L-8, Managua, Nicaragua
Phone: +505 8240 0388
Privacy: privacidad@vexiia.com
Support: soporte@vexiia.com

The address above is the company's registered office. Our customer service office and the other channels are on Contact.