Privacy Policy

1. Information We Collect

1.1 Information You Provide

• Name and contact information (email, phone)
• Company information (name, address, tax identification)
• Account credentials (username, encrypted password)
• Billing and payment data

1.2 Information We Collect Automatically

• Platform usage data (features used, time of use)
• Device information (browser, operating system, IP)
• Cookies and similar technologies
• Activity logs

1.3 Information from Third Parties

• Data from your connected channels (Instagram, Messenger)
• Information from integrated payment services
• Electronic invoicing data (FEL, where applicable)

2. How We Use Your Information

We use your information to:

• Provide the service: Manage your account, process transactions, and enable features
• Improve the platform: Analyze usage, develop new features, and optimize performance
• Communicate with you: Send updates, service notifications, and technical support
• Meet legal obligations: Invoicing, tax reports, and regulatory compliance
• Security: Prevent fraud, detect abuse, and protect the platform

3. Sharing Information

We do not sell your personal information. We only share data with:

• Service providers: Companies that help us operate (hosting, payments, analytics)
• Connected platforms: Meta (Instagram, Messenger), when you authorize the integration
• Tax authorities: Where required by the client's local legislation (e.g. Guatemala's SAT for FEL)
• Legal compliance: If required by law or court order

4. Data Security

We implement security measures to protect your information:

• Data encryption in transit (TLS/SSL) and at rest (AES-256)
• Two-factor authentication (2FA) available
• Role-based access controls
• Regular security audits
• Encrypted automatic backups

5. Your Rights

You have the right to:

• Access: Request a copy of your personal data
• Rectify: Correct inaccurate or incomplete information
• Delete: Request deletion of your account and data (subject to legal obligations)
• Export: Obtain your data in a portable format
• Object: Reject certain uses of your information
• Revoke consent: Withdraw previously granted permissions

To exercise these rights, contact us at: privacy@numib.com

6. Data Retention

We retain different types of data for different periods:

• Account and profile data: While your account is active. Deleted within 30 business days of a deletion request.
• Instagram and Messenger messages (Meta API data): According to your plan tier (7, 30, 90 or 365 days). Deleted immediately upon account disconnection or explicit deletion request.
• Tax and billing records: As required by the client's applicable legislation (e.g. 5 years for FEL in Guatemala).
• Security logs: Maximum 90 days.

You can request account deletion at any time at numib.com/en/data-deletion.

7. Cookies and Similar Technologies

We use cookies to:

• Keep your session active
• Remember your preferences
• Analyze platform usage
• Improve user experience

You can configure your browser to reject cookies, although this may limit some functionality.

8. Meta Platform Data

NUMIB integrates with Meta's official APIs for Instagram and Facebook Messenger. This section specifically describes how we handle data received through those APIs.

Data we receive from Meta

• Direct message content (text) from Instagram and Messenger
• Sender name and username
• Meta user identifiers (Page and Instagram account IDs)
• Message timestamps

How we use this data

Data received from Meta APIs is used solely to display your customers' messages in the NUMIB unified inbox and allow you to respond. We do not use message content for advertising, third-party AI model training, or any purpose outside of providing the service.

Deletion of Meta data

Data received from Meta APIs is deleted from our systems when: (a) you disconnect your Instagram or Messenger account from NUMIB, (b) you delete your NUMIB account, or (c) you submit a deletion request to privacy@numib.com. See our data deletion page for detailed instructions.

Compliance with Meta Platform Terms

NUMIB's use of information received from Meta APIs complies with the Meta Platform Terms and Meta's Developer Policies. Data obtained from Meta is not sold, transferred, or used outside the context of providing the service to our customers.

9. Minors

NUMIB is not intended for individuals under 18 years of age. We do not knowingly collect personal data from minors. If we become aware that we have collected data from a minor, we will delete it promptly. If you are a parent or guardian and believe your child has provided us with information, please contact us at privacy@numib.com.

10. Changes to This Policy

We may update this policy occasionally. We will notify you of significant changes by email or through a notice on the platform. Continued use of the service after changes constitutes your acceptance of the updated policy.

11. Contact

For questions about this policy or the handling of your data: