Legal

Privacy policy

Last updated: November 4, 2026

This policy explains what data Helelai keeps when you use helelai.com, Menvi and Menu QR, what we use it for, who we share it with and how you can ask us to show, correct or delete it. We wrote it to comply with Colombia's Law 1581 of 2012 and its decrees.

1. Who is responsible for your data

HelelaiColombia

For any question or request about your data: helelaiadmin@gmail.com or WhatsApp +57 301 345 9155.

2. What data we keep

Your Helelai account: name, business name, email, phone (if you give it), language and your password, stored encrypted. We never store the password itself.
Your Menvi agents: what you tell us about your business (services, prices, hours, barbers, payment methods) and the instructions written from it.
Your connected WhatsApp: the number and the messages the agent receives and sends, including voice notes turned into text. The conversations you see in your dashboard are kept for 30 days.
Appointments, reservations and orders: the person's name or number, the service, the date and the status.
Payments: the status of each monthly plan, the amounts and the dates. Your card goes to Mercado Pago; Helelai never sees it.
Menu QR: your menu's content, the owner's email and, if you upload them, the photo or PDF you asked us to digitize.
Technical data: your IP address turned into a code that can't be reversed (to stop abuse) and two cookies: avx_s, which keeps you signed in for 30 days, and hl_n, with your first name to greet you on the site. Your browser also keeps a few of your preferences, such as the language or a copy of what you're editing.

3. What we use it for

To provide the service: your agent answers your WhatsApp, books appointments and takes orders with what you taught it.
To charge your monthly plan and show you your payments.
To send you service emails: your account, your password, your purchases and important notices.
To help you when you write to us.
To keep things secure: limit attempts, detect abuse and protect your account.

We don't sell your data or use it to show you other companies' ads.

4. Your business's customers

When someone writes to your business's WhatsApp, your business is responsible for that data and Helelai processes it only on your behalf, so your agent can answer. It's up to you to tell your customers they're talking to an automated assistant and to get their consent when the law requires it. If one of your customers writes to us, we help them and let you know.

Your agent's conversations are visible only to your account in the dashboard. Nobody at Helelai reads them unless you ask us to, to help you with a problem.

5. Who we share it with

Only with the providers we need for the service to work, and only what's needed:

Cloudflare: hosts helelai.com and its database.
Hostinger: hosts the server where the agents run.
Google (Gemini): the artificial intelligence that reads messages, listens to voice notes and writes the replies.
Meta (WhatsApp): the channel the messages travel through.
Mercado Pago: processes payments.
Resend: sends our emails.

Some of these providers keep data outside Colombia, for example in the United States. By accepting this policy you authorize that transfer, which we make only to provide the service. We also hand over data to an authority when the law requires it.

6. How long we keep it

Dashboard conversations: 30 days.
Your account, your agents and your menu: for as long as you have them. If you delete them or ask us to, they're deleted.
Payment records: as long as accounting and tax rules require.

7. Your rights

Under Law 1581 of 2012, you can:

Know, update and correct your data.
Ask for proof of the consent you gave us.
Know how we use your data.
Withdraw your consent and ask us to delete your data, when we're not legally required to keep it.
Look up your data for free.
Complain to Colombia's Superintendence of Industry and Commerce (SIC) if you think we're not complying.

8. How to exercise them or ask us to delete your data

Write to helelaiadmin@gmail.com or WhatsApp +57 301 345 9155 from your account's email or number and tell us what you need. We answer questions within 10 business days at most and complaints within 15 business days at most. If we need more time, we'll tell you why before the deadline.

To delete your account and everything in it (agents, conversations, appointments, orders and menus), ask through either channel. We cancel your monthly plans first so there are no more charges.

9. How we protect it

Everything travels encrypted (HTTPS). Passwords and access keys are stored encrypted. Each account sees only its own data, and we test that with every change. No system is perfect: if a security problem ever affects your data, we'll let you know.

10. Minors

Helelai is a service for businesses. You must be of legal age to have an account.

11. Changes to this policy

If we change something important, we'll email you before it applies. The date at the top shows the last change.