Privacy Policy

NEXTBOTSOLUTIONS, S.A.S. de C.V. ("we", "us", "our") is a company registered in El Salvador under NIT 0624-250626-102-9, with registered address at Avenida 3, Casa 43 E, Ciudad Dorada, Km 14 y medio Carretera a Comalapa, Santo Tomás, Distrito de Santo Tomás, Municipio de San Salvador Sur, El Salvador.

We are the data controller for the personal data described in this policy. That means we decide what is collected and why, and we are the party you hold responsible for it.

We also build and operate WhatsApp assistants for other businesses. Where an assistant is deployed under another company's name and phone number, that company is the controller and we act as its processor, handling data only on its documented instructions. This policy covers the assistants we run under our own name. If you are talking to an assistant branded as another business, that business's own privacy policy governs your data, and requests about it should go to them.

Contact for privacy matters: info@nextbotsolution.com, or write to us at the address above.

We handle personal data on two separate surfaces, and they work very differently. Each is described on its own below so you can see exactly what applies to you.

• The website at https://www.nextbotsolution.com, where the only personal data we receive is what you type into the contact form.
• The WhatsApp assistant, where we receive your phone number, your messages, and any appointment details you give it.

If you have only visited the website and never messaged us, only Section 3 applies to you.

The website has one form. When you submit it, we receive:

• Your name (required)
• Your email address (required)
• Your phone number (optional)
• The service you are interested in (optional)
• The message you write (required)
• Which language version of the site you were reading, so we reply in the right one

That submission is sent to our email provider and delivered to our inbox. It is not written to any database. We do not store it anywhere else, and there is no account for you to create.

To keep automated spam out, the form includes a field hidden from human visitors and records the moment the form appeared on your screen. If the hidden field is filled in, or if the form is submitted within three seconds of loading, we discard the submission. Neither value is stored, logged, or included in the email we receive.

Your language preference is saved in your own browser under the key nbs-locale, so the site opens in the language you chose last time. It never leaves your device and we cannot read it. Clearing your browser storage removes it.

The website sets no cookies. It runs no analytics, no advertising or tracking pixels, no session recording, and no profiling. Fonts are served from our own servers, so simply reading a page sends no request to any third party.

As with any website, our hosting provider records standard server logs, including the IP address and browser user agent of each request. Those logs are generated by the hosting platform for security and reliability, not by us, and we do not use them to build a profile of you.

When you message our assistant on WhatsApp, or when it replies to you, we receive and store:

• Your WhatsApp phone number and the profile name you have set
• The content of your messages, including text and any images, documents, audio, or location you choose to send
• Our replies to you, and the delivery status of each message
• Appointment details you provide, such as the date and time you want, and any changes or cancellations
• Conversation state, such as whether a member of our team has taken over from the assistant

We keep a conversation history so the assistant remembers your earlier messages and does not ask you the same thing twice. Authorised members of our team can read these conversations in order to help you, to check the assistant answered correctly, and to fix it when it does not.

Please do not send sensitive information through WhatsApp. That includes clinical or health details, identity document numbers, card or bank details, and passwords. The assistant does not need any of it to book an appointment, and Salvadoran law requires written consent before sensitive data may be processed. If you send it anyway, we will delete it when we notice it.

Messages travel through WhatsApp, which is operated by Meta. WhatsApp's own handling of your data is governed by its privacy policy, not by this one. Today we send and receive through a third party messaging gateway rather than through Meta's official Business Platform; that gateway is named in Section 7, and we will update this policy if we move to a direct connection.

You can stop the assistant messaging you at any time. See Section 10.

We use personal data only for the purposes below, and only on one of these bases.

We do not sell your personal data. We do not share it with advertisers, and we do not use it to build advertising profiles.

The assistant's replies are generated by a large language model. To produce a reply, the content of your message and the recent history of your conversation are sent to Google's Gemini API, which returns suggested text and, where relevant, a booking action.

The assistant decides which of a fixed set of actions to take: answer a question, book an appointment, reschedule one, cancel one, look one up, or hand the conversation to a person. It makes no decision that produces a legal effect for you and no decision about credit, employment, insurance, eligibility, or pricing.

You can ask to speak to a person at any time, and a member of our team can take over the conversation at any point. Automated replies can be wrong. Do not rely on one for an urgent, medical, legal, or financial decision.

We share personal data only with the service providers below, only to the extent each one needs it, and only so we can run the service. Each is bound to process data on our instructions and to keep it secure.

Beyond these, we disclose personal data only to professional advisers bound by confidentiality, or to an authority where the law requires it. If our business is ever sold or reorganised, personal data may transfer with it, and we will tell you before that happens.

Several of the providers in Section 7 operate outside El Salvador, mainly in the United States and the European Union. This means your data is transferred abroad when you use our services.

Salvadoran law permits these transfers where the destination offers an adequate level of protection or where contractual safeguards are in place. We rely on the data processing terms and standard contractual clauses each provider offers, and we choose providers that publish a security and privacy commitment we can point to.

We keep personal data only as long as the purpose it was collected for requires, and then we delete it or make it permanently anonymous.

If you ask us to delete your data, we act on it as described in Section 10 rather than waiting for these periods to run out.

Under the Salvadoran Personal Data Protection Law you hold the rights known as ARCO-POL. You can exercise any of them free of charge:

• Access: ask what personal data we hold about you and get a copy of it
• Rectification: have inaccurate or incomplete data corrected
• Cancellation: have your data deleted when we have no legal reason to keep it
• Opposition: object to us processing your data for a particular purpose
• Portability: receive your data in a structured, commonly used format
• Oblivion: ask us to erase data that is no longer necessary for the purpose it was collected for
• Limitation: ask us to restrict processing while a request or a dispute is resolved

To exercise any of these, use the form below, email info@nextbotsolution.com from the address you contacted us with, or send the word DELETE (or BORRAR) to the assistant on WhatsApp from the number you used. We will confirm receipt and respond within 30 calendar days. We may need to verify your identity first, and we will not ask you for more information than that verification requires.

To stop receiving messages from the assistant, reply STOP or BAJA to any message, or block our number in WhatsApp. We will act on it promptly. If you have an appointment already booked, we may still send you the messages needed to confirm or cancel it.

Where we rely on your consent, you can withdraw it at any time. Withdrawing consent does not make our earlier processing unlawful.

If you think we have handled your data badly, please tell us first so we can put it right. You also have the right to complain to the Agencia de Ciberseguridad del Estado (ACE) in El Salvador, which supervises this law. If you live in another country, you may also be able to raise the matter with your own local data protection authority.

We take technical and organisational measures proportionate to the risk, including encrypted connections for all traffic to the website and to our providers, credentials held in a managed secret store rather than in code, and access limited to the members of our team who need it to do their work.

No system is completely secure and we will not claim otherwise. If a breach affects your personal data, we will notify the Agencia de Ciberseguridad del Estado and the people affected within 72 hours of becoming aware of it, as Salvadoran law requires.

This website sets no cookies at all. There is no consent banner because there is nothing to consent to.

The only thing stored in your browser is the language preference described in Section 3, which is strictly functional and stays on your device.

Our services are meant for adults. We do not direct them at children under 18 and we do not knowingly collect personal data from them.

If you believe a child has given us personal data, contact us at info@nextbotsolution.com and we will delete it.

We may update this policy as our services change. The date at the top of the page is always the date of the version you are reading.

If a change materially affects how we handle your data, we will say so on the website and, where it is appropriate, tell you directly.

For any question about this policy or about your data, reach us at:

NEXTBOTSOLUTIONS, S.A.S. de C.V., Avenida 3, Casa 43 E, Ciudad Dorada, Km 14 y medio Carretera a Comalapa, Santo Tomás, Distrito de Santo Tomás, Municipio de San Salvador Sur, El Salvador. NIT 0624-250626-102-9. Email info@nextbotsolution.com. Phone +503 6223 8513.