Privacy notice

[Legal entity name], with address at [full address, Mexico], is responsible for processing your personal data (the "Controller"). Contact for privacy matters: [privacy contact email].

When you use ISSA for your own customers, you are the controller of your customers’ data and we process it on your behalf under the Data Processing Addendum.

For account holders and visitors of this site:

• Identification and contact: name, email address, phone number, business name.
• Account and billing: password (stored hashed), organization, plan, tax details you provide to receive invoices.
• Usage and device: IP address, browser type, pages visited, security logs.
• Demo: the business description, products and optional email you type into the live demo.

We do not ask for sensitive personal data. Please do not include it in the demo or in the information you give your assistant. Messages from your customers may contain such data; they are handled as described in the Data Processing Addendum.

Primary purposes, needed to provide the service:

• Create and manage your account, authenticate you and keep it secure.
• Provide the assistant, inbox, alerts and follow-ups you configure.
• Bill you and issue invoices.
• Answer your support requests and the demo you asked for.

Product announcements, service improvement statistics and marketing communications. You can refuse them at any time by writing to the privacy contact or using the unsubscribe link; refusing does not affect the service.

We share data only with providers that help us run the service (hosting, email delivery, payments, AI model providers and messaging infrastructure) and with authorities when the law requires it. Providers act under our instructions and confidentiality duties. Data may be processed outside Mexico; we require equivalent protection.

You can access, rectify, cancel or oppose the processing of your data, revoke your consent and limit its use or disclosure. Send a request to [privacy contact email] with your name, a way to reach you, the right you want to exercise, a description of the data involved and a copy of an official ID. We will answer within the legal term.

Inside the product, account owners can export their data and schedule its deletion from the settings.

We use only the cookies needed to keep you signed in and remember your language. We do not use advertising cookies.

We keep data while your account is active and for the period needed to meet legal obligations. After you delete your organization, data is removed according to the schedule shown in the product.

We will publish any change on this page and update its version. If a change affects your rights we will notify you by email.

If you believe your rights were violated, you can go to the authority responsible for personal data protection in Mexico.