Privacy notice

Whose data this covers

Two cases must be distinguished, because Nimboo’s role differs in each.

• Data of our customers: the companies that license a Nimboo platform and the members of their team who use it. Nimboo is the controller of that data.
• Data of our customers’ prospects: people who submit their details through a campaign or message a developer on WhatsApp. The customer is the controller of that data; Nimboo acts solely as a processor, following their instructions.

What data is collected

From our customers and the members of their team:

• Name, email address, and contact phone number.
• Company details and tax information needed for invoicing.
• Platform access credentials, stored encrypted.
• Platform usage logs, for security and support purposes.

How it is used

Data is processed solely to provide the contracted service: granting platform access, providing support, issuing invoices, notifying service changes, and meeting legal and tax obligations.

It is not used for Nimboo’s own advertising without prior consent, not sold, and not shared with other customers.

Data from Meta platforms

When a customer connects their own Facebook, Instagram, or WhatsApp Business accounts to a Nimboo platform, the platform receives the data that connection authorizes: lead forms from their campaigns, messages sent to their accounts, and performance metrics for their ads.

That data belongs to the customer. Nimboo processes it exclusively to display it inside their own platform and to power the features they contracted, such as assigning leads to their agents or calculating their cost per lead.

• It is not sold or transferred to third parties.
• It is not used to train models or for any purpose other than the service.
• It is not combined with other customers’ data.
• The customer authorizes the connection from their own Meta account and can revoke it at any time, without involving Nimboo. Once revoked, the platform stops receiving new data.
• At the customer’s request, data received through that connection is deleted from Nimboo’s systems.

Transfers and service providers

Nimboo relies on infrastructure and service providers that process data on its behalf and under contract, including cloud hosting, payment processing, and transactional email delivery.

These providers may use the data only to provide their service to Nimboo. Beyond those cases, personal data is not transferred to third parties without consent, except where required by a competent authority.

Your rights

Any data subject may request access to, rectification of, cancellation of, or object to the processing of their personal data, and may withdraw consent, by writing to legal@nimboo.com.mx.

The request should state the data subject’s name, a means of replying, and a clear description of what is being requested. Nimboo responds within the periods set by applicable law.

If the data belongs to a prospect of a Nimboo customer, the request is routed to that customer, who is the controller of the data, and Nimboo assists them in handling it.

Retention and security

Data is retained for the duration of the contractual relationship and thereafter for as long as applicable tax and legal obligations require. After that period it is deleted or anonymized.

Nimboo applies administrative, technical, and physical safeguards to protect data against loss, misuse, and unauthorized access, including encryption in transit and per-user access control.

Changes to this notice

Any change to this notice is published at this same address, with the update date visible. Please review it periodically.

Contact

For any question about this notice or about the processing of personal data: legal@nimboo.com.mx. For commercial enquiries: info@nimboo.com.mx, phone +52 998 341 0371, Cancún, Quintana Roo, Mexico.