Privacy Policy

Last Updated: July 22, 2026

1. Introduction This Privacy Policy explains how Neesites Limited (“we”, “us”, “our”) collects, uses, and protects your information when you use our Xeofi.com service (“Service”).

2. Important Notice About Client Data Xeofi.com is a service provider platform. We do not collect or process end-client data — this data is collected and managed by our users (Internet Service Providers) through their use of our system. Our users are responsible for their own privacy policies and data collection practices regarding their clients. This includes obtaining valid consent from their customers before sending them messages via WhatsApp, SMS, or any other messaging channel enabled through the Service.

3. Data We Collect

3.1 Account Information

  • Company name and registration details
  • Contact person’s name and email address
  • Billing information
  • Service configuration preferences

3.2 Technical Information

  • IP addresses
  • Server Resource Limits

3.3 Messaging Data When you use our messaging integrations (WhatsApp, SMS) to contact your customers, we process:

  • Customer phone numbers, as provided by you
  • Message content and delivery/read status
  • Provider account identifiers (e.g., WhatsApp Business Account ID, SMS gateway credentials)

This data is transmitted to the relevant third-party provider (Meta’s WhatsApp Business Platform, or your configured SMS gateway) solely to deliver your messages. We act as a processor on your behalf and do not use this data for any other purpose.

4. How We Use Your Data We use your data to:

  • Provide and maintain our service
  • Process payments
  • Send service notifications
  • Provide technical support
  • Improve our services
  • Send service updates
  • Send marketing communications (with consent)
  • Facilitate WhatsApp and SMS messaging between you and your customers, including sending, delivering, and tracking status of messages you initiate

5. Data Storage and Security

5.1 Data Storage

  • Our services are hosted on Africa Data Centers’ NB01 facility (Nairobi)
  • Physical and technical security is provided by our hosting provider
  • We implement additional application-level security measures

5.2 Security Measures

  • Encryption of data in transit and at rest
  • Regular security updates
  • Access control and authentication
  • Regular backups

5.3 Hosting Options

  • Self-hosted: You maintain full control of your data
  • Partial hosting: We only store company information
  • Full hosting: Data is stored on our selected hosting providers

6. Third-Party Messaging Providers Our messaging integrations rely on third-party platforms to deliver messages:

You are solely responsible for ensuring lawful basis and, where required, opt-in consent before messaging customers through any channel, and for honoring opt-out requests. We may suspend any messaging integration found to be used for unsolicited messages or in violation of the relevant provider’s policies.

7. Data Retention

  • Account data: Retained while account is active
  • Financial records: 7 years (as required by law)
  • Marketing data: 2 years
  • Technical logs: 90 days
  • Messaging content and delivery logs (WhatsApp, SMS): 12 months, after which they are purged unless a longer period is required by law

8. Your Rights You have the right to:

  • Access your data
  • Correct inaccurate data
  • Request data deletion
  • Restrict processing
  • Object to processing
  • Data portability
  • Withdraw marketing consent
  • Request deletion of messaging logs associated with your account, subject to Section 7

9. Marketing Communications

  • We only send marketing with consent
  • Opt-out available in all marketing emails
  • Service-related communications not affected

10. Changes to Privacy Policy We may update this policy and will notify you of any changes via:

  • Email notification
  • Service announcement
  • Website notice

11. Contact Us For privacy-related inquiries: Email: info@xeofi.com