FULL NOTICE · VERSION 2026-08-12

Privacy Notice

Preliminary document: legal information must be completed and professionally reviewed before publication. The full tax address is reserved for formal processes and invoicing; the public document shows only a general location.

[RAZÓN SOCIAL O NOMBRE LEGAL PENDIENTE], RFC [RFC PENDIENTE], con domicilio en Mexico City, México, is responsible for processing the personal data described in this notice.

1. Data processed

We may process name, email, address, phone number, verified WhatsApp number, account data, requests, tickets, purchases, invoicing, access logs, technical identifiers and evidence of consent. We do not request router passwords, private keys or full payment-card details in registration or tickets.

2. Required purposes

Create and protect accounts; verify identity and WhatsApp; handle support, sales and projects; process orders and payments; deliver configurations; manage tickets; issue invoices; prevent fraud and spam; and maintain security, auditing and legal compliance.

3. Optional purposes

With separate consent, we may send news, promotions or surveys. Refusal does not affect contracted services, and consent may be withdrawn through the privacy email address.

4. Providers and transfers

Necessary data may be disclosed to hosting, security, messaging/WhatsApp, Mercado Pago, distribution, shipping, invoicing and support providers subject to confidentiality and processing obligations. Domestic and international transfers will follow this notice, contracts and applicable law. We do not sell personal data.

5. Retention

We retain data only for the period necessary for the stated purposes, tax and contractual duties, security and the defense of rights. Verification codes expire within minutes and are stored as hashes; security logs are limited and reviewed periodically.

6. Security

We apply administrative, technical and physical safeguards proportionate to risk: TLS, encryption of sensitive fields, password hashing, role-based access control, least privilege, rate limits, encrypted backups, updates, monitoring and incident response. No mechanism eliminates all risk.

7. ARCO rights and withdrawal

The data subject may request access, rectification, cancellation or objection, limit use or disclosure, and withdraw consent by writing to privacidad@gxnetra.com. The request must allow identity verification and describe the right being exercised. It will be handled within the applicable legal time limits.

8. Cookies and abuse prevention

We use cookies required for sessions, security and preferences. Anti-spam tools may process IP address, browser and risk signals. Non-essential analytics or advertising will require the applicable consent mechanism.

9. Minors and international scope

The services are not directed to minors. If GXnetra offers goods or services to people in other jurisdictions, applicable international obligations will be followed, including the GDPR where its territorial scope applies; this may include additional rights and safeguards for transfers.

10. Changes and incidents

We will publish material changes and request renewed consent when required. Relevant breaches will be managed and reported according to law and the risk to individuals. Contact: privacidad@gxnetra.com. Last updated: 12 de agosto de 2026.