Privacy Policy

This policy explains what personal data Zellia, a product of Presento LLC, processes, for what purpose, how long it is kept, and how you can ask us to delete it.

Who is responsible for your data

Zellia is a tool that other businesses use to serve their customers. That means there are two different parties involved, and it helps to know which is which:

• The business that contacted you —the school, the repair shop, the store— decides what data it collects from you and why. It is the data controller.
• Presento LLC operates Zellia on behalf of that business. We act as the data processor: we store and process the data following its instructions, and we do not use it for anything else.

Even so, you can exercise your rights directly with us. We will not send you back to the business that contacted you to file the request there.

What data we process and where it comes from

Data from Meta lead ad forms

When a business connects its Facebook or Instagram page to Zellia and runs an ad with a lead form, Meta delivers to us the data the person entered in that form. We receive only the fields the business configured in its own form.

Conversation messages

We store the messages exchanged between the person and the business on WhatsApp, so the conversation has continuity and a human agent can pick it up. This includes text, images and voice notes sent by either party.

What we do not do

• We do not sell, rent or transfer personal data to third parties.
• We do not use a business's customer data for our own advertising or anyone else's.
• We do not combine one business's data with another's. Isolation between businesses is enforced by the database.
• We do not use lead data to train artificial intelligence models.

How we protect it

• All traffic is encrypted with TLS, both to Meta's APIs and to the business's dashboard.
• Data is stored in a PostgreSQL database with per-business isolation enforced at the database level (row level security), not just by code convention.
• Access to the dashboard requires authentication and is limited to the people each business authorizes.
• Credentials and access tokens are kept out of the code, in server environment variables.
• Technical logs redact personal information.

Who it is shared with

The data in a conversation is visible to the advertising business and to the members of its team it grants access to. In addition, these providers are involved, each with a limited role:

• Meta Platforms — source of the messages and of the lead forms.
• Cloud infrastructure provider — hosting of the servers and the database.
• Language model providers — generate the assistant's reply from the message received, under paid API terms. The content sent is not used to train their models.

We do not transfer data to any other third party, except where required by law.

How long we keep it

Lead data and conversation history are kept for 24 months from the last contact, unless the responsible business sets a shorter period or you ask for deletion sooner. When the period ends, they are deleted from the database.

If a business stops using Zellia, its data is deleted within 90 days after the service ends.

Your rights

You can ask us, at any time and free of charge, to tell you what data we hold about you, to correct it, to delete it, or to stop processing it. You can also ask not to be messaged again: just reply “no me escribas más” (“stop messaging me”) in the conversation and the system permanently stops all messages to you.

To delete your data, follow the instructions on delete my data. We respond within 30 days of the request.

Children

Zellia is not directed to children under 13 and we do not knowingly collect their data. If we find that we have received data from a child, we delete it.

Changes to this policy

If we change this policy, we update the effective date shown at the top. Changes that substantially affect how your data is processed are announced in advance to the businesses that use Zellia.

This policy is also available in Spanish. Both versions have the same content.