Privacy Notice

Last updated: September 30, 2026

Data controller: MIA OMNIA, S.A.S. ("MIA Omnia"), Lago de Chapultepec 400, Col. Capital Sur, C.P. 76246, Querétaro, Qro., Mexico. Contact: christian@miaomnia.com.

MIA Omnia operates MIA Comercial (comercial.miaomnia.com), a sales assistant that helps businesses serve their customers on WhatsApp, and the miaomnia.com website. This notice explains what information we process, what for, and how we protect it. The Spanish version is the one that governs in Mexico.

Who can use MIA

Only people the MIA administrator adds with their Google email can sign in to the app. Each business only sees its own information. MIA Comercial is a service for businesses and people over 18.

Information we use

• Your Google name and email, to identify you when you sign in.
• Your business's WhatsApp messages, which you connect voluntarily, to organize them, summarize them and suggest replies.
• The information about your business that you enter in the app (what you sell, prices, hours).
• If you connect your Google account: your Google Calendar and your Google Contacts, as explained below.

Necessary purposes: giving you access, providing the MIA Comercial service and supporting you. Optional purposes: none. We do not use your data for advertising and we do not sell it.

Your business's customers' data

When you connect your WhatsApp, MIA processes on your business's behalf the name, number, messages, voice notes, images and documents of the people who write to you. In that relationship your business is the controller of that data and MIA Omnia acts as a processor: we only use it to provide the service, following your instructions.

Waitlists (miaomnia.com)

If you join a waitlist we process: your name, your business name and type, number of salespeople, WhatsApp, email, phone type and anything you write in the optional field. We use them only to review your request and contact you by WhatsApp or email about the beta or the launch of the product you chose. We will not send you advertising for other products without asking. We do not collect sensitive data; please don't write any in the free-text field. We keep this data until 12 months after the product launches or until you ask us to delete it, whichever comes first.

Use of Google data

If you choose to connect your Google account, MIA requests these permissions:

• Google Calendar (events): to check whether you have a free time slot when a customer proposes an appointment, and to create, move or cancel in your calendar the appointments you approve in MIA.
• Google Contacts: to show the name under which you already saved a customer and, when you ask, to save a new contact in your account.

We do not read or store other events or contacts beyond what these features need, we do not sell this information and we do not use it for advertising. We do not use Google data to develop, improve or train generalized artificial intelligence or machine learning models, and we do not allow our providers to do so.

Who we share Google user data with

We only transfer Google user data to the following providers, solely to deliver the features described above and under data processing and confidentiality agreements:

• Supabase Inc. (United States): database where we store references to the appointments you create, the names of the contacts you use in MIA, and your Google authorization (encrypted).
• Vercel Inc. (United States): hosts the web app; data only passes through it to be displayed on your screen.
• Our automation server (operated by MIA Omnia): creates, moves or cancels in your Google Calendar the appointments you approve, and checks your free time slots.
• OpenAI (business API, pay-as-you-go plan): receives only the time of a proposed appointment, whether that time is free or busy, the title of the appointment already scheduled at that time (if any), and the contact's name, to draft the suggested reply. Under contract, OpenAI does not use data sent through its API to train its models.

We do not share Google user data with anyone else. No person reads your Google data unless you ask us to (for example, for support), for security reasons, or when required by law.

MIA Comercial's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

You can revoke access at any time at myaccount.google.com/permissions. Once revoked, MIA immediately stops accessing your Google account.

Artificial intelligence

To draft suggestions, MIA sends conversation text to artificial intelligence providers under contracts that do not allow them to use that data to train their models. MIA never sends messages to your customers without your approval, except for automatic replies that you turn on and configure yourself. The rules you teach MIA are only used in your account.

Providers and location

We use hosting and database providers, WhatsApp messaging providers (Kapso and Meta) and artificial intelligence providers (for example, OpenAI), some with servers in the United States. They process data only under our instructions and with confidentiality obligations.

Security and retention

We protect information, including Google user data, with these measures:

• Encryption in transit (HTTPS/TLS) on every connection and encryption at rest (AES-256) in the database.
• Google authorizations (access tokens) are stored in an encrypted server-side vault; they never reach the browser or the phone.
• Per-business isolation: each business can only see its own information, and each salesperson only the chats assigned to them, enforced by security rules in the database itself.
• Photos and files are kept in private storage, served through temporary links that expire after one hour and are only issued to authorized users.
• Secret keys are kept in a vault, internal connections are password-protected, and WhatsApp messages are verified by signature.
• We only request the minimum Google permissions needed for each feature.
• Administrative access is limited to the MIA Omnia team and is logged.
• Each conversation is visible only to the user it belongs to: the company's owner and managers do not read their salespeople's chats. Only the MIA Omnia support team may review a message to fix a problem, and every review is logged.

Anything you delete stays in the trash for 30 days and is then removed. When the service ends we delete your business's information within 90 days at the latest, unless the law requires us to keep something.

Cookies and analytics

miaomnia.com only stores one cookie to remember the language you choose and uses Vercel Web Analytics, which uses no cookies and does not identify people (aggregate visit statistics only).

Your rights and withdrawing consent

You can access, correct, delete or object to the use of your data, limit its use or withdraw your consent by writing to christian@miaomnia.com with your name, the data or right involved and a copy of your ID (or your representative's). We will reply within 20 days and, where appropriate, carry it out within the following 15 days. If you are a customer of a business that uses MIA, you can also contact that business directly.

Minors

MIA Comercial and our waitlists are not directed to people under 18 and we do not knowingly collect their data.

Changes to this notice

We will post any change on this page with its update date and, if it is important, we will let you know by email or inside the app.

Contact

For any question about this notice: christian@miaomnia.com.