Personal data processing policy

1. Data controller

• Controller: ServiXio S.A.S.

• Identification: NIT 902.117.841-3

• City: Medellín, Colombia

• Address: [PENDING: address]

• Email for personal data matters: info@servixioapp.com

• Websites: https://www.servixioapp.com · https://app.servixioapp.com

2. What data we process

• Data of the businesses that use ServiXio: name, email, business details, plan and payments.

• Data of the people who write to those businesses through their channels (website chat, WhatsApp, social media or email): name, number or email, language and the conversation.

• Portal usage data needed for it to work and stay secure.

3. What we use it for

• Providing the service: answering questions and guiding people to a purchase or appointment.

• Sending promotions and marketing messages, only to people who expressly agreed.

• Billing, invoicing and support.

• Meeting legal obligations and keeping the service secure.

4. Your consent

We process your data with your prior, express and informed consent, and we keep proof of when and how you gave it.

Answering a message you sent us is not marketing. To send you promotions we ask for a separate permission, which you can withdraw anytime.

5. Your rights

• Access, update and correct your data.

• Ask for proof of the consent you gave.

• Know how we use your data.

• Withdraw consent and ask us to delete your data, unless a legal duty requires keeping it.

• File complaints with Colombia's Superintendence of Industry and Commerce (SIC).

• Access your data free of charge.

6. How to exercise them

Write to info@servixioapp.com. Inquiries are answered within 10 business days and claims within 15 business days, under Colombian Law 1581 of 2012.

To stop receiving promotions you can also reply "stop" in any conversation or use the unsubscribe link in every email.

7. Businesses that use ServiXio

When a business uses ServiXio to serve its customers, that business is the controller of its customers' data and ServiXio processes it on its behalf, following its instructions and this policy.

8. Who we share data with

Only providers we need to run the service: Supabase (database), Vercel (hosting), OpenRouter and the AI providers the portal uses, PayPal (payments) and Hostinger (email). Some are outside Colombia, so international data transfers may occur. We never sell your data.

9. How long we keep it

While you are an active customer or contact. After 2 years without activity we delete or anonymize it (period pending legal confirmation), unless the law requires keeping it.

10. Sensitive data and minors

We do not ask for sensitive data or data about minors. If a conversation touches a delicate topic, the assistant hands it to a person on the team.

11. Security

We use reasonable technical and organizational measures to protect data: restricted access, encrypted connections and activity logs.