Commerxia ("we", "us", or "our") operates JEFA (https://www.hirejefa.com), an AI-powered operations platform for marketing agencies. This Privacy Policy explains how we collect, use, and protect information when you use our platform, including when you connect third-party services such as Meta Ads.
1. Information We Collect
We collect the following categories of information:
- Account information: name, email address, and agency details provided during registration.
- Client data: information about your agency's clients that you enter into the platform (names, industry, contact details).
- Third-party integration data: when you connect integrations such as Meta Ads, Google Ads, or Google Analytics, we access data from those platforms on your behalf and solely for the purpose of generating reports and insights within JEFA. See Section 3 for details on Meta data specifically.
- Usage data: log data, IP addresses, browser type, and pages visited, used to operate and improve the service.
2. How We Use Your Information
- To provide, operate, and improve the JEFA platform.
- To generate performance reports, AI-powered summaries, and operational recommendations for your agency clients.
- To authenticate you and maintain your account security.
- To send transactional notifications related to your account and operations.
- To comply with legal obligations.
We do not sell your data or your clients' data to third parties. We do not use data obtained through third-party APIs (including Meta) for advertising or for training AI models without explicit consent.
3. Meta Platform Data
JEFA integrates with the Meta Business API to retrieve advertising performance data (campaigns, ad accounts, spend, reach, impressions, clicks, and related metrics). This integration is subject to Meta's Platform Terms and Developer Policies.
- What we access: Ad account IDs, campaign names and status, ad performance metrics (spend, impressions, clicks, CTR, CPM, CPC, reach, frequency, conversions), and business account information.
- How we use it: Exclusively to display performance reports and AI-generated summaries within JEFA for the agency that authorized the connection. We never use Meta data for any purpose beyond operating the service for the authorizing user.
- Storage: Meta performance data is fetched on demand at report generation time and is not stored long-term in our database. OAuth access tokens are stored securely and encrypted.
- Sharing: Meta data is not shared with any third party other than as necessary to operate JEFA (e.g., our hosting provider).
- Deletion: You can disconnect your Meta account at any time from the Connections page within JEFA. This revokes our access and removes your stored token. You may also revoke access directly from your Facebook Business Integrations settings.
4. WhatsApp Business Platform Data
Agencies using JEFA can operate an AI assistant on a business phone number belonging to one of their own clients, through the WhatsApp Business Platform. The business that owns the number is the controller of that data; Commerxiaprocesses it on that business's behalf, and only to provide the service.
The WhatsApp Business Platform integration is provided by Bloop Digital, which is the registered Meta Tech Provider for JEFA. A client's WhatsApp Business Account is connected to Bloop Digital's Meta application, and Bloop Digital and Commerxia both act as processors for the business that owns the number. Message fees are billed by Meta to that business directly.
- What we process:the WhatsApp phone number and profile name of people who message the business, the content of those messages (including voice notes and images), qualification data the assistant records, conversation metadata, and the advertisement a conversation originated from. With the business's authorization we also receive up to six months of prior chat history, used to recognize existing customers and to prepare the assistant's approved information.
- Automated assistance and disclosure: replies may be generated by an AI assistant. The assistant identifies itself as such in its first message, and a person can ask to speak with a human at any time.
- Processors: message content is processed by Anthropic (the AI model) and, for voice notes, by Deepgram (transcription). Phone numbers are not sent to the AI model. Infrastructure is provided by Supabase and Vercel. Some of these providers process data outside Argentina, under contractual safeguards.
- Retention: message content and qualification data are retained for up to 12 months after the last interaction; media files for 90 days; the chat-history sample for 30 days; raw webhook payloads for 14 days. Opt-out records are kept as long as needed to honour them.
- Opting out: anyone can reply asking not to receive further messages and the assistant will stop contacting them.
- Deletion: requests to delete the data of a person who messaged a business are handled through that business or its agency, and we provide the tools to execute them. You may also write to nico@commerxia.com.
- We never use WhatsApp message content for advertising, sell it, or use it to train AI models.
5. Data Retention
We retain your account and client data for as long as your account is active. If you delete your account, we will delete or anonymize your personal data within 30 days, except where retention is required by law. OAuth tokens for third-party integrations are deleted immediately upon disconnection.
6. Data Security
We use industry-standard security measures including encryption at rest and in transit, access controls, and regular security reviews. OAuth tokens are stored encrypted and never exposed in plaintext. However, no system is perfectly secure and we cannot guarantee absolute security.
7. Third-Party Services
JEFA integrates with third-party platforms. Their use of data is governed by their own privacy policies:
8. Your Rights
You have the right to:
- Access the personal data we hold about you.
- Request correction of inaccurate data.
- Request deletion of your data ("right to be forgotten").
- Withdraw consent for third-party integrations at any time.
- Export your data in a portable format.
To exercise any of these rights, email us at nico@commerxia.com. We will respond within 30 days.
9. Data Deletion Requests
To request deletion of all data associated with your account, send an email to nico@commerxia.com with the subject line "Data Deletion Request" and your registered email address. We will confirm deletion within 30 days. You may also delete your account directly from the platform settings.
For Meta-specific data deletion: disconnecting your Meta integration from the Connections page immediately revokes our access token. Any cached report data associated with your Meta accounts will be deleted within 7 days.
10. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of material changes by email or by displaying a notice in the platform. Continued use of JEFA after changes constitutes acceptance of the updated policy.