Privacy Policy
Last updated: November 2025
At Aibla Fertility, your privacy is paramount. This policy explains how we collect, use and protect your personal data in compliance with GDPR and LOPDGDD.
1. Data Controller
Name: AIBLA INTELLIGENCE, S.L.
CIF: B22510713
Address: Parque Científico de Alicante, Campus Oeste, Universidad de Alicante (Alicante, Spain) 03005
Email: info@aibla.io
Website: https://aibla.io
2. Scope and purpose of this policy
This policy governs the processing of personal data carried out by Aibla in connection with:
- The use of our AI-based automation and communication services for fertility clinics.
- Lead qualification, appointment management and care of potential patients.
- Integration with Meta platforms (including WhatsApp Business Platform and other Meta Platforms Ireland Ltd. APIs).
3. Data we process
1Platform Data (Business Solution Data)
Provided by Meta: WhatsApp Business account identifiers (WABA ID), phone number identifiers, access tokens, company names and configuration, message templates and technical metadata.
2Potential patient data
Users who interact with the clinic through WhatsApp or other channels: name, phone number, age, relevant medical history (without diagnosis), messages and other information necessary to manage leads, appointments and patient care, in accordance with the law and with the corresponding consent.
3Client data (fertility clinics)
Contact information, billing, access credentials and account configuration.
4Technical and analytical data
Logs, IP addresses, usage events and browsing data for security, performance and service improvement purposes (where applicable, in anonymised or aggregated form).
4. Purposes of processing
Provision of the contracted service
Facilitating the sending and receiving of communications via WhatsApp Business, lead qualification and appointment management on behalf of fertility clinics.
Technical and administrative management
Linking and managing WhatsApp Business accounts (WABA), phone numbers and message templates.
Support and service improvement
Maintenance, incident resolution, monitoring and continuous improvement of functionalities.
Regulatory and contractual compliance
Obligations arising from GDPR, Meta's terms and other applicable frameworks.
Important: We do not use data provided by Meta for advertising or remarketing purposes, nor to build profiles outside the contracted service.
5. Legal basis
With the client clinic to provide the service.
GDPR and terms of integrated platforms, including Meta.
In ensuring the security, traceability and correct provision of the service.
Where required (subscriptions to commercial communications).
6. Data retention
- •Meta platform data: For the duration of the service and up to 90 days after cancellation, after which it will be deleted or anonymised, unless legal retention obligations apply.
- •Technical logs and security: May be retained for longer periods when strictly necessary for security, audit or compliance.
- •Marketing (newsletter): Until unsubscribe request.
7. Processors and recipients
To provide the service, Aibla engages technology providers who act as processors under contract and in accordance with GDPR:
AWS
Hosting and databases
Supabase
Backend and encrypted authentication
Render.com
Service deployment
These providers only process data for the provision of the service and in accordance with our instructions. Data is not transferred to third parties outside the service without an applicable legal basis or consent.
8. International transfers
Where remote support access from the United States or other countries outside the EEA is provided by processors or sub-processors, the Standard Contractual Clauses approved by the European Commission and additional security measures will apply.
Where possible, data is hosted in data centres located in the European Union (for example, Ireland).
9. Use of AI and compliance with Meta's terms
Aibla uses AI as an ancillary feature for lead qualification, appointment management and communication automation on behalf of verified clinics. We do not offer a general-purpose AI for free conversation via WhatsApp.
In compliance with the WhatsApp Business Platform terms (Meta, October 2025), Aibla does not allow Business Solution Data (including anonymous, aggregated or derived data) to be used to create, develop, train or improve third-party AI systems or models.
Aibla may perform fine-tuning of exclusive and private Aibla AI models using data from the service, provided this does not result in Business Solution Data being used to train or improve other AI models, whether Aibla's own or third-party.
10. Rights of data subjects
You may exercise your rights at any time:
By writing to info@aibla.io
You may also file a complaint with the Spanish Data Protection Agency (AEPD).
11. Security
We apply appropriate technical and organisational measures to protect the confidentiality, integrity and availability of data:
🔐 Encryption
In transit and at rest
👥 Access control
Role-based (RBAC)
📊 Monitoring
Continuous logging and auditing
🔍 Testing
Periodic security testing
12. Cookies and analytics
We may use technical and, where applicable, analytics cookies to improve the experience and performance of the service. For more information, please see our Cookie Policy.
13. Changes to this policy
We may update this policy at any time. The current version will be available on this website and may be notified through additional channels when the change is significant.