Privacy Policy

How Heka, the messaging assistant operated under humansys.ai, handles personal data.

Who we are

Humansys, S.C., San Francisco 238, Altos, Col. Del Valle, Benito Juárez, C.P. 03100, Mexico City, Mexico (“Humansys”) operates Heka under the humansys.ai brand, a messaging assistant for schools and businesses that handles conversations over WhatsApp. Schools and businesses that use Heka (“Customers”) are the controllers of their contacts’ data; Humansys processes it on their behalf. Humansys is the controller for website visitors and for its Customers’ representatives.

Data we process

WhatsApp phone number and profile name; message content and media with timestamps; details people share in conversation (such as name, student or child details, scheduling preferences); operational data (contact stage, templates sent, delivery status); and minimal technical logs. We do not request sensitive data.

Why we process it

To reply on a Customer’s behalf, schedule and remind appointments, send approved follow-up templates, let Customer staff take over any conversation, and keep the service secure. We do not sell personal data or use it for third-party advertising.

Artificial intelligence

Automated replies are generated with third-party language models. Customer staff can review and intervene in any conversation. Our model providers do not use this data to train their models.

Recipients

Meta (WhatsApp Business Platform); Anthropic and OpenRouter (language models); Fly.io (hosting); Cloudflare (file storage and network); Sentry (error monitoring). Some providers operate outside Mexico; we share only what is needed to deliver the service.

Retention

Conversations are kept 24 months after the last message unless the Customer instructs otherwise or deletion is requested. Technical logs are kept 90 days.

Security

Encryption in transit, per-customer data isolation, per-customer credentials and restricted staff access.

Your rights

You may contact the school you messaged, or Humansys at [email protected], to access, correct, delete or object to the processing of your data. Reply “STOP” or block the number to stop receiving messages. See Data deletion.

Last updated: October 8, 2026.