NewAigent Privacy Notice
What data the platform handles, why, who it is shared with, and how to exercise your rights.
Executive privacy and compliance summary
This notice explains what data NewAigent handles, how an artificial intelligence assistant takes part, who we share information with and how to exercise your rights.
1. Who is responsible for your data
Responsible PartiesThis notice applies to the NewAigent platform, which lets businesses run their store, scheduling, CRM and a messaging assistant.
NewAigent is responsible for the data of business accounts (their administrators) and for billing.
For the data of each business's customers (appointments, orders and conversations), the business is the responsible party and NewAigent acts as a processor: it handles the data on the business's behalf and under its instructions. Each business publishes its own privacy notice on its site.
2. Data we handle
Personal DataWe handle only the data needed to provide the service:
- Account and identity: name, e-mail, phone (WhatsApp), owner or responsible person, and a password protected with a hash (bcrypt).
- Business data: catalog, prices, opening hours, logo and images, and the address of the premises with its coordinates when chosen with Google Maps.
- Data of the business's customers: name, phone and e-mail; appointments (service, date, time, reason, status, reminders and confirmations); pet name and species at veterinary clinics; orders and delivery addresses.
- WhatsApp conversations: message content, phone number, the name WhatsApp shows, and the date and time of each message.
- Health data, only at health businesses: clinical notes from the professional and answers to an intake questionnaire (age, weight, height, allergies, medications and history). See the health data section.
- Service usage: message counts and AI assistant consumption to measure the plan, IP address, browser type and session cookies.
We never store full card numbers or security codes. Payments are processed directly by the payment gateways (Stripe, Conekta and PayPal).
3. Health data (sensitive data)
Sensitive DataA health business may record health data of its patients. This is sensitive data.
The business, as the responsible party, must obtain its patients' express consent before handling it. The platform includes the consent box in the booking flow.
NewAigent handles this data only to provide the service to the business. It does not use it for advertising or to train its own models.
4. What we use your data for
PurposesMain purposes, needed for the service:
- Creating and managing business accounts, billing and support.
- Running each business's scheduling, reminders, confirmations and WhatsApp assistant, and the Newy AI copilot.
- Publishing to social networks what the business schedules.
- Automatic cancellation: when a business asks to confirm appointments, those not confirmed before the deadline are cancelled and the slot is freed, with a notice to the customer.
- Preventing fraud, unauthorized access and abuse of the platform.
We use data in aggregate form to measure and improve the service. If you do not want your data used for this purpose, write to privacidad@newaigent.com; refusing does not affect the service.
5. Artificial intelligence assistant
AIThe WhatsApp assistant and the Newy AI copilot use third-party language models to write replies. To answer, we send the provider the text of the conversation and the business data that is needed, such as services, prices, hours and the appointments of the customer who writes.
We use paid models and configure our model provider to exclude providers that store messages or may use them to train their models. Even so, each provider has its own terms and we cannot guarantee that it does not keep information for short periods for technical or legal reasons.
NewAigent does not use customers' data to train its own models.
AI can make mistakes. The business is responsible for reviewing the information it publishes and can pause the assistant to attend to you personally.
The assistant does not make decisions with legal effects on you, except the automatic cancellation of an unconfirmed appointment, described in the purposes section.
Newy AI does not receive the text of WhatsApp conversations or clinical notes.
6. Providers and transfers
Third PartiesWe do not sell or rent personal data. We share data with the providers that make the service possible:
• Payments: Stripe, Conekta and PayPal.
• Hosting and database: Vercel and Supabase (United States).
• Automation servers and the WhatsApp connection: Amazon Web Services.
• Image storage: Cloudinary.
• Language models: OpenRouter and the model providers it uses, for example Google and OpenAI.
• WhatsApp: Meta Platforms, through the number the business connects.
• Calendars: Google Calendar and Microsoft Outlook, when the business connects them. Events are created with the customer's name, the service, the date and their e-mail.
• Address search: Google Maps, when an address is typed.
• Social networks: Meta (Facebook and Instagram), for the posts the business schedules.
Some of these providers are outside Mexico, mainly in the United States. These transfers are necessary to provide the service; by accepting this notice you consent to them.
7. Security and separation between businesses
SecurityWe apply these measures, although no system can be completely secure:
• Passwords are stored with a hash (bcrypt), never as readable text.
• Communication between your browser and the platform uses HTTPS (TLS).
• Each business is logically separated: database queries and the assistant's tools are filtered by the business identifier of the session.
• Integration credentials (Google, Microsoft, Meta and WhatsApp) are kept in our database with restricted access.
If a breach significantly affects your rights, we will let you know.
8. Retention
PeriodsWe keep data while the account is active and for the time needed for the purposes of this notice and for legal and tax obligations. When it ends, the business can ask for its data to be handed over or deleted.
10. Your rights
Your RightsUnder Mexican law on the protection of personal data held by private parties, you can:
• Access the data we hold about you.
• Correct it if it is inaccurate or incomplete.
• Delete it, when there is no legal obligation to keep it.
• Object to its processing or withdraw the consent you gave, including consent for sensitive data.
To exercise these rights write to privacidad@newaigent.com. If you are a customer of a business, you can also contact the business itself.
We will reply within the periods set by law. If you believe your right was not honored, you can go to the competent data protection authority.
11. Changes and contact
ContactWe may update this notice because of changes in the law or in the service. Important changes are announced on this page or with a prominent notice in the dashboard.
For questions about this notice write to privacidad@newaigent.com or visit https://newaigent.com.
Looking for our Terms of Service?
Review our contractual agreements, software licenses, payment policies, and SLA commitments.