Privacy Policy

K11 Technologies SAS (“K11”, “we”, “us”, or “our”) operates Nexus, a business messaging and marketing platform that provides access to the WhatsApp Business Platform through the Meta Cloud API. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Nexus platform.

By using Nexus, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access or use our platform.

K11 Technologies SAS is a software development company incorporated in Colombia, with registered address at Cr 66 # 76-26 In 1 Ap 501, Bogotá, Cundinamarca, Colombia. We provide technology solutions to businesses, including the Nexus platform for business messaging and marketing automation.

For questions about this Privacy Policy, you may contact us at:

• Email: privacy@k11.technology
• Website: https://k11.technology
• Phone: +573104469058

We collect information that you provide directly to us, information we collect automatically through your use of the platform, and information from third-party services.

3.1 Information you provide:

• Business name, legal name, and registration details
• Contact information: name, email address, phone number
• WhatsApp Business Account (WABA) credentials and phone numbers
• Message templates and campaign content
• Billing information (processed securely through payment providers)

3.2 Information collected automatically:

• Log data: IP addresses, browser type, pages visited, time stamps
• Usage data: features used, campaigns sent, delivery metrics
• Message metadata: delivery status, read receipts, response rates
• Device information: operating system, browser version

3.3 Information from third parties:

• Meta (Facebook) WhatsApp Business Platform: message delivery status, account health metrics, and quality ratings
• Payment processors: transaction confirmations and billing status

We use the information we collect to:

• Provide, operate, and maintain the Nexus platform
• Process and deliver WhatsApp messages on your behalf through the Meta Cloud API
• Manage your WhatsApp Business Account and message templates
• Monitor message delivery, quality scores, and account health
• Process billing and payments for platform services
• Send administrative communications, updates, and security alerts
• Provide customer support and respond to your inquiries
• Analyze usage patterns to improve platform features
• Comply with legal obligations and Meta’s WhatsApp Business Platform policies

We process your personal data based on the following legal grounds:

• Contract performance: processing necessary to provide the Nexus platform services you have contracted
• Legitimate interests: improving our platform, preventing fraud, and ensuring platform security
• Legal obligation: complying with applicable laws and Meta’s platform policies
• Consent: where you have explicitly provided consent for specific processing activities

Nexus operates as a Tech Provider on the Meta WhatsApp Business Platform. When you use Nexus to send WhatsApp messages:

• Messages are transmitted through Meta’s Cloud API infrastructure
• Meta processes message content and metadata in accordance with their own Privacy Policy
• Your WhatsApp Business Account is connected to K11’s Meta Tech Provider account via Embedded Signup
• End-user message data is subject to Meta’s WhatsApp Terms of Service

We act as a data processor on your behalf for messages sent through the platform. You remain the data controller for your customers’ personal data contained in messages.

We do not sell your personal information. We may share your information with:

• Meta Platforms Inc.: to provide WhatsApp Business Platform services through the Cloud API
• Payment processors: to process billing transactions securely
• Cloud infrastructure providers: AWS (Amazon Web Services) for platform hosting
• Legal authorities: when required by law, court order, or governmental regulation
• Business transfers: in connection with a merger, acquisition, or sale of assets

All third-party service providers are contractually required to protect your information and use it only for the purposes for which it was disclosed.

We retain your information for as long as your account is active or as needed to provide you services. Specifically:

• Account information: retained for the duration of the contractual relationship plus 5 years
• Message logs and metadata: retained for 90 days for delivery reporting purposes
• Billing records: retained for 7 years to comply with fiscal regulations
• Usage analytics: retained in aggregated, anonymized form indefinitely

You may request deletion of your personal data at any time, subject to legal retention requirements.

We implement appropriate technical and organizational measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption in transit using TLS 1.3 for all data communications
• AWS infrastructure security with VPC isolation and security groups
• Access controls and authentication for platform access
• Regular security monitoring and CloudWatch alerting
• No storage of WhatsApp message content beyond delivery confirmation

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: request a copy of the personal data we hold about you
• Rectification: request correction of inaccurate or incomplete data
• Erasure: request deletion of your personal data (“right to be forgotten”)
• Restriction: request that we limit processing of your data
• Portability: request your data in a structured, machine-readable format
• Objection: object to processing based on legitimate interests

To exercise any of these rights, please contact us at privacy@k11.technology. We will respond to your request within 30 days.

The Nexus platform uses cookies and similar tracking technologies to maintain session state and improve user experience. You may control cookie settings through your browser. Disabling certain cookies may affect platform functionality.

Your information may be transferred to and processed in countries other than Colombia, including the United States, where Meta and AWS infrastructure is located. We ensure appropriate safeguards are in place for such transfers in accordance with applicable data protection laws.

Nexus is a business platform intended for use by companies and their authorized representatives. We do not knowingly collect personal information from individuals under the age of 18. If you believe we have inadvertently collected such information, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the effective date. We encourage you to review this Privacy Policy periodically.

If you have any questions about this Privacy Policy or our data practices, please contact us: