Integral Privacy Notice · Last updated: October 25, 2026

Your information, handled clearly and carefully.

This notice explains how Conversia MX processes personal data when you visit our website, request information, purchase our services, or use a workspace we operate. This notice does not replace the privacy notices our business customers must provide to their own customers and contacts.

1. Information we may process

• Inquiries and prospects: name, business, role, email, phone/WhatsApp, language, message contents, business needs, and information you provide when requesting a consultation or demo.
• Customers and platform users: contact and account details, organization, user roles, preferences, support records, integration configuration, and activity needed to operate and secure the account.
• Our customers’ customer communications: messages, contact details, files, and context that a business customer chooses to process through connected channels. Conversia MX may process this information on that customer’s behalf and under its instructions.
• Transaction information: purchased service, billing details, and payment status. Payment-card details are handled by the payment provider; please do not send card data by WhatsApp or email.
• Technical information: IP address, browser/device type, access logs, timestamps, and security events generated when the site or platform is used.

We do not seek to collect sensitive personal data. Do not send medical, financial, biometric, children’s, or other sensitive information through forms, chats, or demos. If a project requires that processing, it must be approved in writing with appropriate instructions, legal basis, controls, and notices before activation.

2. Purposes

Necessary purposes: respond to inquiries; prepare quotes and demos; create and manage accounts and workspaces; configure, provide, maintain, and support services; route and organize conversations under customer instructions; manage payments and accounting duties; verify permissions; secure systems and prevent abuse; and respond to valid legal requests.

Optional purposes: send Conversia MX news, content, or marketing information. You can object or withdraw consent by emailing conversiaMEX@proton.me. Essential services are not conditional on accepting promotional messages.

3. Processing for business customers

When a business connects its channels and uploads contact information, that business generally decides why and how those data are used. In that context, Conversia MX acts as a service provider/processor and processes information under the contracted service and the customer’s documented instructions. The customer is responsible for its notices, permissions, consents, legal bases, data minimization, and requests from its own contacts. Service agreements may further define these roles and control if there is a conflict.

4. Providers, communications, and transfers

We may share the minimum information needed with providers that host, secure, or operate the service, for example infrastructure and database providers (Cloudflare and Supabase), messaging and business accounts (Meta/WhatsApp), automation or support tools (Botpress, Airtable, and Zapier), payment processing (Stripe), scheduling (Calendly), and email/productivity (Google), depending on the project and enabled tools. Not every service uses every provider. We may also disclose information to authorities when required by a valid legal obligation.

Some providers may process information outside Mexico under their applicable contracts and safeguards. We do not sell personal data or share it for third-party behavioral advertising. Each provider may have its own privacy notice and terms.

5. Cookies and local storage

The website and platform may use local storage or essential technologies to maintain sign-in sessions, remember preferences, and protect the service. Hosting and security providers may create technical logs. If we add non-essential analytics or tracking-based advertising, we will update this notice and provide relevant controls before enabling it.

6. Retention and deletion

We retain data only as long as needed for the purposes described, the contract, legal duties, security, and dispute resolution. The specific period depends on the information and is documented in the applicable agreement or configuration. When a service ends, customer information is returned or exported and deleted or de-identified as agreed, except for legally required retention, limited backup cycles, or information needed to address liabilities. Backups are removed under their technical cycle.

7. Privacy rights and choices

You may request access, correction, deletion, or objection (ARCO rights under Mexican law), withdraw consent where applicable, or limit use/disclosure by emailing conversiaMEX@proton.me with the subject “Privacy — ARCO request.” Include your name, a reply method, the right you wish to exercise, a clear description of the data, and details that help us locate it. We may verify your identity or authority before acting. We respond within the time limits required by applicable law; where Mexican law applies, we communicate our decision within the statutory period and, if granted, implement it within the applicable statutory period. If you are a contact of one of our business customers, you may also send your request to that business, which determines the use of its records.

8. Security and incidents

We apply reasonable administrative, technical, and organizational safeguards based on the information and risks. No system or transmission can guarantee absolute security. If a breach under our control significantly affects your rights, we will notify you as required by applicable law and cooperate with the responsible customer where we process data on its behalf.

9. Changes

We will post the current notice on this page and update the date. Where a material change affects processing or the law requires it, we will communicate it through an appropriate channel and obtain consent where required.

10. Contact

For privacy questions or ARCO requests: conversiaMEX@proton.me. Controller and notice address: as stated at the beginning of this notice.