Privacy Notice

1. Identity and address of the controller

The controller of your personal data is CAPDESIS S.A. DE C.V. (“Capdesis”, “we”), with tax ID (RFC) CAP2110299Q0 and address at Guamuchil 118, Colonia Pedregal de Santo Domingo, Alcaldia Coyoacan, Mexico City, ZIP 04369, Mexico.

Privacy / ARCO contact:contacto@capdesis.com, WhatsApp +52 55 6186 9139, phone +52 55 5619 1018.

2. Legal framework

This notice is issued under Mexico’sFederal Law on Protection of Personal Data Held by Private Parties (LFPDPPP)published in the Diario Oficial de la Federación on March 20, 2025 and in force since March 21, 2025, which repeals the 2010 law of the same name, its Regulations and the guidelines of theSecretaria Anticorrupcion y Buen Gobierno, the competent authority after the extinction of INAI. We also follow reasonable transparency and security practices for websites and digital services.

3. Personal data we collect

3.1 Identification and contact data

When you contact us or use site forms, we may collect:

• Full name
• Email address
• Phone / WhatsApp
• Company or organization (if provided)
• Subject, message and, where applicable, estimated budget or project type

3.2 Browsing and technical data

• IP address and approximate network data
• Browser type, operating system and device
• Pages visited, referrers and time on site
• Language and theme preferences stored on your device
• Site chat messages (text you type), sent to our own proxy and then to an AI provider to generate the reply
• Anti-abuse verification tokens (e.g. Cloudflare Turnstile) when you submit a form or use chat

3.3 Sensitive data

We do not routinely request sensitive data (health, ideology, biometrics, etc.). Please do not send such data through public forms. If a contractual project requires special categories of data, it will be documented separately.

4. Purposes of processing

4.1 Primary purposes

• Respond to messages, quotes and contact requests
• Provide software development, automation or training services when contracts are in force
• Operate our own software / SaaS products (accounts, access, support and product billing)
• Issue electronic invoices (CFDI) and meet tax and commercial duties
• Prevent abuse, spam and fraud on site forms and APIs

4.2 Secondary purposes

• Improve the website, user experience and service quality
• Aggregated usage analytics (e.g. PostHog), when you accept non-essential cookies
• Commercial or informational messages about our products and services, where there is a legitimate basis or consent

You may object to secondary purposes at any time by writing tocontacto@capdesis.com.

5. Transfers and processors

We do not sell your personal data. We may share it with:

• Infrastructure and operations providers: hosting, transactional email, bot protection (e.g. Cloudflare), web analytics, error monitoring and an AI provider for the site chat (messages go through our own proxy), only as needed to run the site and services.
• Payment processors: a PCI DSS certified payment processor for web SaaS charges, and the App Store or Google Play for mobile purchases, only the data needed to process the charge.
• Authorities: when required by law or court order.
• Third parties with your consent or as needed to perform a contract with you.

6. Cookies and similar technologies

We use cookies and local storage. Categories, duration and consent management are described in theCookie Policy.

7. ARCO rights and withdrawal of consent

You may exercise rights of Access, Rectification, Cancellation and Objection (ARCO), and also:

• Withdraw consent where processing is based on consent
• Limit use or disclosure of your data
• Request information about transfers

To exercise these rights, email contacto@capdesis.com with: (i) full name and contact channel; (ii) a clear description of the request; (iii) documents proving identity or legal representation. We will respond within LFPDPPP timelines.

If you believe your request was not addressed, you may contact the Secretaria Anticorrupcion y Buen Gobierno, the competent Mexican authority for personal data protection.

8. Security measures

We apply reasonable technical and organizational measures (access control, HTTPS, form validation, rate limiting, among others). No system is 100% secure; please also protect your own devices and credentials.

9. Retention

We keep data as long as needed for the purposes in this notice and for legal obligations. Afterward, data is deleted or dissociated where applicable.

10. Minors

The corporate site is not directed at persons under 18. If you believe a minor sent us data, contact us for review and deletion where appropriate.

11. Third-party links and products

We may link to third-party sites or apps. Each third party has its own privacy policy.

The software-only surface at capdesis.com/en/software may have a complementary notice:Software privacy.

12. Changes

We may update this notice. The current version is published on this page with the “Last updated” date.

13. Contact

• Email: contacto@capdesis.com
• WhatsApp: +52 55 6186 9139
• Phone: +52 55 5619 1018
• Tax ID (RFC): CAP2110299Q0
• Address: Guamuchil 118, Colonia Pedregal de Santo Domingo, Alcaldia Coyoacan, Mexico City, ZIP 04369, Mexico