Privacy Policy

Yeison AI S.R.L. is the controller of the personal data collected through the Yeison AI platform.

2.1 Data provided by the user

• Registration: full name, email address, phone number, password.
• Company: name, industry, size, website, description.
• Products: catalog, prices, images, descriptions.
• Sales process: scripts, FAQs, objections, closing techniques.
• Payment: billing data (we do not store credit card data directly; it is processed by our payment provider).

2.2 Data generated by usage

• Conversations between agents and the platform user's clients.
• Agent performance metrics (messages sent, response rates, conversions).
• Access logs: IP address, browser, device, pages visited, timestamps.
• Dashboard actions: configurations modified, agents created, etc.

2.3 Third-party data

• If you use "Sign in with Google", we will receive your name and email from Google.
• When connecting WhatsApp Business via Meta, we will receive identifiers from your WABA account.

We use your data to:

• Provide you with the contracted service (create, operate, and manage AI sales agents).
• Manage your account, subscription, and payments.
• Send you service communications (invoices, alerts, important updates).
• Improve the AI models and service quality (using anonymized data).
• Comply with legal and regulatory obligations.
• Prevent fraud and ensure platform security.
• Send you our own marketing communications (you can opt out at any time).

We process your data under the following legal bases:

• Performance of a contract: to provide the service you have contracted from us.
• Consent: for marketing communications and AI model improvements.
• Legitimate interest: for security, fraud prevention, and statistical analysis.
• Legal obligation: to comply with tax and regulatory requirements.

Yeison AI uses the official WhatsApp Business API provided by Meta Platforms, Inc. This section specifically describes how data originating from WhatsApp conversations is treated.

5.1 Data collected through WhatsApp

When utilizing the sales agent via the WhatsApp Business API, the following may be collected:

• Phone number of contacts initiating a conversation with the agent.
• Content of text messages sent to the agent (queries, requests, purchase details).
• Message metadata: date, time, delivery, and read status.
• WhatsApp Business account identifiers (WABA ID, Phone Number ID).
• Information voluntarily provided by users during the conversation (name, address, product preferences, etc.).

5.2 How this data is used

• To operate the AI sales agent and generate automated responses on behalf of the platform user.
• To display conversation history on the Yeison AI user's control panel.
• To calculate agent performance metrics (processed messages, response times, conversion rates).
• To improve service quality through anonymized analysis.

We do not use WhatsApp conversation data for advertising, sales to third parties, or any purpose other than operating the contracted service.

5.3 Responsibility for customer data

The Yeison AI user (company or professional) acts as the data controller for their own customers' personal data received via WhatsApp. Yeison AI acts as the data processor on behalf of the user.

The user is responsible for informing their customers about the use of automated AI agents and obtaining the necessary consents in accordance with applicable laws.

5.4 Data sharing with Meta

To enable the WhatsApp Business integration, we share with Meta Platforms, Inc. the technical data necessary for the registration and operation of the WABA (WhatsApp Business Account) account, including account identifiers and access tokens. Meta processes this data according to its own policies:

• WhatsApp Privacy Policy
• Meta Data Policy

5.5 Conversation data retention

WhatsApp messages and conversation data are stored in encrypted form (AES-256 at rest, TLS 1.3 in transit) for a maximum of 12 months from the date of each conversation. After this period, they are automatically deleted, unless there is a legal obligation to conserve them or an express request from the platform user.

5.6 Rights of end users (agent's customers)

People who interact with the sales agent via WhatsApp can exercise their rights to access, rectify, or delete their data by directly contacting the agent's operator (the Yeison AI user) or by writing to privacidad@yeison.ai.

We share data only in the following cases:

• Infrastructure providers: cloud servers, databases, CDN — under confidentiality and data processing agreements.
• AI providers: third-party language models to generate agent responses. Data is transmitted securely and is not used to train models without your consent.
• Meta / WhatsApp: see section 5 for full details.
• Payment gateway: billing data necessary to process charges.
• Authorities: when required by law, court order, or competent authority.

We do not sell, rent, or lease your personal data to third parties for commercial purposes.

Some of our providers (cloud servers, AI APIs) may be located outside of Bolivia. In these cases, we ensure that transfers are carried out with appropriate safeguards: standard contractual clauses, security certifications (ISO 27001, SOC 2), or equivalent internationally recognized mechanisms.

We retain your data for the following periods:

• Account data: while the account is active, plus 90 days after cancellation for potential recovery.
• Agent conversations (WhatsApp and other channels): 12 months from the date of the conversation, unless the user requests early deletion.
• Access logs: 6 months.
• Billing data: 5 years for tax obligations.
• Anonymized data: indefinitely for statistics and research.

We implement appropriate technical and organizational measures, including:

• Encryption in transit (TLS 1.3) and at rest (AES-256).
• Two-factor authentication available for all accounts.
• Restricted data access by roles and need-to-know basis.
• Continuous security monitoring and intrusion alerts.
• Automated encrypted backups with 30-day retention.
• Periodic security reviews and penetration testing.

As a personal data subject, you have the right to:

• Access: request a copy of the personal data we hold about you.
• Rectification: correct inaccurate or incomplete data.
• Erasure: request the deletion of your data ("right to be forgotten"), when there is no legal obligation to retain it.
• Portability: receive your data in a structured, commonly used format.
• Object: object to processing based on legitimate interest or direct marketing.
• Restriction: request that we restrict the processing of your data under certain circumstances.
• Withdraw consent: at any time, for consent-based processing, without affecting the lawfulness of prior processing.

To exercise any of these rights, send a request to privacidad@yeison.ai with your name, registered email, and a description of the request. We will respond within a maximum of 30 business days.

We use cookies and similar technologies to:

• Essential cookies: keep your session active and ensure security.
• Analytics cookies: understand how users interact with the platform to improve it (anonymized data).
• Preferences cookies: remember your settings (language, theme).

You can manage or reject non-essential cookies from your browser settings. For more details, consult our Cookie Policy.

Yeison AI is a service exclusively directed at companies and professionals over 18 years of age. We do not intentionally collect data from minors. If we detect that a minor has provided personal data, we will delete it immediately.

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notification on the dashboard, with at least 15 days' notice. Continued use of the service after changes are posted implies acceptance of the new policy.

For any questions, requests, or complaints related to personal data protection: