Privacy Notice

Last updated: June 28, 2026 · This is an English translation of our Aviso de Privacidad; the Spanish version prevails in case of any discrepancy.

1. Identity and address of the Data Controller

LNL AI Agency (“VozClinic,” “we,” “us”) is responsible for processing your personal data in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and the Privacy Notice Guidelines.

2. Personal data we collect

We collect personal data directly from you when you complete a form on our site (waitlist, book a demo), contact us by email or WhatsApp, or engage our services. Depending on the case, this may include:

• Identification and contact data: first and last name, email address, phone / WhatsApp number.
• Clinic data: clinic name, city, clinic type, management system, message volume, and other operational information you share with us.
• Service-usage data: messages and requests that our AI receptionist (Sofía) handles over WhatsApp on behalf of your clinic, including patient data for scheduling purposes (name, contact, reason for the appointment).

We do not intentionally collect special categories of sensitive data through the site. When our service processes patient data on behalf of a clinic, we act as a processor, under that clinic’s instructions and privacy notice.

3. Purposes of processing

Primary purposes (necessary)

• Respond to your requests for information, demos, and support.
• Manage the waitlist and let you know when the service is available for your clinic.
• Provide the bilingual AI receptionist service: answer messages, book appointments, and follow up over WhatsApp.
• Billing, compliance with legal obligations, and administration of the contractual relationship.

Secondary purposes (optional)

• Send you marketing communications, product news, and related content.
• Produce statistics and improve our services.

If you do not want your data processed for the secondary purposes, you may say so at any time by writing to hola@vozclinic.com. Your refusal will not be grounds to deny you the services you request.

4. Transfers and processors

To operate, we rely on providers that process data on our behalf (processors), such as WhatsApp messaging services (Meta Platforms), cloud hosting and infrastructure, transactional email, and calendar and CRM tools. Some of these providers may be located in the United States or other countries, so your data may be processed outside Mexico under contracts requiring confidentiality and equivalent security measures.

We do not transfer your personal data to third parties for purposes other than those described here without your consent, except in the cases provided for in Article 37 of the LFPDPPP (for example, requirements from a competent authority).

5. WhatsApp Business Platform (Meta) data handling

VozClinic operates on the WhatsApp Business Platform provided by Meta Platforms, Inc. (“Meta”). When a clinic connects its WhatsApp Business account to VozClinic through Meta’s Embedded Signup flow, and when our AI receptionist (Sofía) handles conversations, we process the following WhatsApp data:

• Business-account data: the clinic’s WhatsApp Business Account ID, phone number ID(s), display name, and the access tokens Meta issues so we can send and receive messages on the clinic’s behalf.
• Message content and metadata: the text, media, templates, and interactive messages exchanged between the clinic and its patients, along with timestamps, message IDs, and delivery / read status.
• Contact data: the phone number and WhatsApp profile name of the people who message the clinic.

We use WhatsApp data solely to provide the messaging and AI-receptionist service — receiving messages, generating replies, booking appointments, sending reminders, and escalating to the clinic’s team. We do not use WhatsApp data for advertising, and we do not sell or rent it.

Because the service runs on Meta’s infrastructure, your use of WhatsApp is also governed by Meta’s own terms and policies, including the WhatsApp Business Messaging Policy and the Meta Privacy Policy. Access tokens and business-account credentials obtained through Embedded Signup are stored securely, used only to operate the integration, and revoked when a clinic disconnects its account or ends the service.

6. Text messaging (SMS)

If you provide a mobile phone number and opt in, VozClinic and the clinics we serve may send you text messages (SMS) related to the service — for example, appointment confirmations, reminders, and replies to questions or requests you send us.

We do not sell, rent, or share your mobile phone number or your SMS opt-in consent with any third parties or affiliates for their own marketing or promotional purposes. Your mobile information is used only to provide the messaging service you requested, and is disclosed only to the service providers that help us deliver those messages (such as our messaging and telephony platform), under confidentiality obligations.

Message frequency varies and depends on how you interact with the service — for example, the appointments you schedule and the questions you ask. Message and data rates may apply, according to your mobile carrier and plan.

You can opt out of text messages at any time by replying STOP to any message; reply HELP for help. You may also contact us at hola@vozclinic.com.

7. Cross-border patients

When data of patients from the United States is processed, we seek to comply with applicable Mexican regulations and to honor the confidentiality commitments inherent to health information. The clinic using VozClinic is responsible for obtaining its patients’ consent under its own privacy notice.

8. Your ARCO rights

You have the right to Access your personal data, Rectify it when inaccurate, Cancel it when you believe it is not needed, and Object to its processing (ARCO rights). You may also revoke your consent or limit the use or disclosure of your data.

To exercise any of these rights, send a request to hola@vozclinic.com including:

• Your name and a means of contact for our response.
• A copy of an official ID proving your identity (or legal representation, where applicable).
• A clear description of the data and the right you wish to exercise.

We will respond within the timeframes set by the LFPDPPP.

9. Revoking consent

You may revoke the consent you have given us to process your data at any time by writing to hola@vozclinic.com. In some cases, revocation may mean we can no longer provide the service to you.

10. Data deletion and retention

You can ask us to delete your personal data — including data we process through the WhatsApp Business Platform — at any time.

How to request deletion: email hola@vozclinic.com with the subject line “Data deletion” from the email or WhatsApp number associated with your account, and tell us which data you want removed. You may also message us on WhatsApp. We confirm and complete verified deletion requests within 30 days, except where we must retain certain data to meet a legal, tax, or security obligation.

When a clinic disconnects its WhatsApp Business account or ends the service, we delete or de-identify the associated access tokens and conversation data within 90 days, unless a longer period is required by law. We retain personal data only for as long as needed to fulfill the purposes described in this notice.

These deletion instructions are permanently available at vozclinic.com/privacy#data-deletion.

11. Cookies and tracking technologies

Our site may use cookies and similar technologies to remember your preferences, measure site usage, and improve your experience. You can disable cookies in your browser settings; some features may be affected.

12. Security measures

We implement reasonable administrative, technical, and physical security measures to protect your personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing.

13. Changes to this Privacy Notice

We may update this Privacy Notice to reflect changes in our practices or in applicable law. The current version will always be available at vozclinic.com/privacy, with its last-updated date.

14. Consent

By providing us your personal data by any means, you acknowledge that you have read and understood this Privacy Notice and consent to the processing of your data for the purposes described here.