Privacy Policy

Last updated: May 2026

In compliance with Articles 6, 15, 16, and other applicable provisions of the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and other binding provisions, ConverzIA ("ConverzIA", "we", "our", or "the Platform"), with virtual address at www.converzia.mx, makes this Privacy Policy available to data subjects. For any privacy inquiries, contact us at contacto@converzia.mx.

Google API Data

ConverzIA's use and transfer of information received from Google APIs to any other application will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

What we access: When you connect Google Calendar, ConverzIA accesses: (a) your free/busy schedule to find available appointment slots for AI-powered booking via WhatsApp; (b) your calendar events to create appointments on your behalf, search for class sessions, and update event descriptions with booking details; (c) your Google account email address to identify which account is connected.

How we use it: Google Calendar data is used exclusively to provide the calendar features of the ConverzIA platform that you explicitly enable. We do not use this data for advertising, marketing, or any purpose unrelated to the service you requested.

Storage: Access tokens and refresh tokens obtained from Google are stored in encrypted form using AES-256-CBC encryption. Calendar event data is not persistently stored — it is fetched in real time when needed to display your schedule or check availability.

Sharing: We do not sell, share, or transfer Google API data to third parties, except as strictly necessary to provide the service (e.g., our own database server infrastructure). We do not transfer this data to any advertising platform or data broker.

Deletion: When you disconnect your Google Calendar integration from the Calendars settings page, or when you cancel your ConverzIA account, all stored tokens and associated data are permanently deleted from our systems. You can also revoke access at any time directly from your Google Account security settings.

1. Identity and Contact

ConverzIA is responsible for the processing of your personal data.

Contact email: contacto@converzia.mx

2. Data We Collect

ConverzIA, through its integrations with Facebook, Instagram, WhatsApp, Google Calendar, and other related services, collects and processes the following personal data:

• Identification data: name, username, associated email address, account and/or page identifiers (app-scoped IDs).
• Digital interaction data: messages sent to Instagram or WhatsApp pages and accounts, comments, likes, and reactions.
• Electronic data: page and account metrics and insights, reach, impressions, interactions, and visits.
• Lead data: information provided through contact forms or advertising campaigns.
• Technical credentials: access tokens and permissions required to manage pages, accounts, and integrations (including Google Calendar tokens, stored encrypted as described above).

3. Purposes of Processing

Personal data will be processed for the following purposes:

Primary purposes (necessary):

1. Enable the operation of the ConverzIA CRM with AI integration.
2. Manage messages and conversations with customers and prospects on behalf of our users.
3. Classify and organize digital interactions in a centralized environment.
4. Generate reports, metrics, and insights related to campaign performance and customer service.
5. Schedule reminders, appointments, and tasks related to prospect follow-up.
6. Comply with contractual, legal, and regulatory obligations.

Secondary purposes (optional):

1. Improve service quality through statistical analysis.
2. Training and improvement of artificial intelligence algorithms to provide more accurate responses.

You may opt out of secondary purposes at any time using the procedure described in Section 8 (Your Rights).

4. Data Transfers

Your data may be shared in the following cases:

• Technology service providers: only when strictly necessary to provide hosting, security, maintenance, or integration services (e.g., AWS, Google Cloud, Zapier, or others).
• Competent authorities: in compliance with legal requirements, court orders, or applicable regulations.
• International transfers: where services outside Mexico are used, transfers will be made in accordance with Articles 36 and 37 of the LFPDPPP and always under adequate protection measures.

ConverzIA does not sell or commercialize personal data to third parties.

5. Data Retention

• Messages and conversations: up to 24 months after the last interaction.
• Leads: up to 12 months after collection.
• Access tokens: until the user revokes permissions or deletes the integration.
• Metrics and insights: up to 36 months in aggregate form.

Once the applicable period expires, data will be securely deleted or anonymized.

6. Data Security

ConverzIA implements administrative, technical, and physical security measures to protect personal data against damage, loss, alteration, destruction, misuse, unauthorized access, or disclosure, including:

• Encryption in transit (HTTPS/TLS).
• Encryption at rest on servers.
• Access controls with reinforced authentication.
• Activity monitoring and periodic audits.

7. Minors and Sensitive Data

Our services are not directed at minors under 13 years of age (or 16 years depending on the applicable jurisdiction). ConverzIA does not intentionally collect sensitive personal data; in the event that a data subject voluntarily provides data of that nature, it will be processed only with express consent and under reinforced security measures.

8. Your Rights (ARCO)

Under the LFPDPPP, you have the right to:

• Access: know what data we hold and how we use it.
• Rectification: request correction of your data when it is inaccurate or incomplete.
• Cancellation: request deletion of your data when you consider it is no longer required for the stated purposes.
• Opposition: object to the use of your data for specific purposes.

To exercise these rights, send a request to contacto@converzia.mx including:

1. Your full name and contact details.
2. A document verifying your identity or legal representation.
3. A clear description of the data regarding which you wish to exercise your right.
4. The specific right you wish to exercise.

ConverzIA will respond within a maximum of 20 business days in accordance with Article 32 of the LFPDPPP.

9. Consent Revocation

You may revoke the consent you have granted at any time by sending an email to contacto@converzia.mx. Please note that revocation may make it impossible to continue providing our services.

10. Limiting Use or Disclosure

You may limit the use or disclosure of your personal data by registering with Mexico's Public Registry to Avoid Advertising (REPEP) managed by PROFECO, or by requesting it directly from ConverzIA at the email address above.

11. Data Deletion

In addition to the rights described above, ConverzIA provides an automated deletion procedure through:

• www.converzia.mx/eliminar-datos
• Requests sent to contacto@converzia.mx
• Data Deletion Callback as required by Meta.

12. Changes to This Policy

ConverzIA may modify this Privacy Policy to reflect legal, regulatory, security, or operational changes to the Platform. Such modifications will be communicated by publication at www.converzia.mx/privacidad.

13. Data Protection Authority

If you believe your right to personal data protection has been violated, you may file a complaint with Mexico's National Institute for Transparency, Access to Information and Personal Data Protection (INAI): www.inai.org.mx.

Contact

For any questions or requests related to this Privacy Policy: contacto@converzia.mx