Comprehensive Privacy Notice

Vendilo.ai (“the Controller” or “the Service”), domiciled in Mexico, is responsible for the processing of your personal data in accordance with the LFPDPPP (Mexico), its Regulations and the applicable Guidelines. For any matter related to this Notice you can contact us at privacidad@vendilo.ai.

It applies to account holders (the businesses that contract the Service) and to the members of their team who use it. It is not intended to collect data from the business’s end customers.

We process only the data necessary to operate the Service:

• Identification and contact data: name, company name and email address of the person who registers.
• Account data: access credentials and assistant configuration.
• Billing data: the data necessary to process your subscription through Stripe (your full card details are handled directly by Stripe, not by Vendilo.ai).
• Business content: product catalog, prices, inventory, documents and knowledge that you upload.
• Usage data: processed messages and technical metrics to measure limits and performance.

We do not request sensitive personal data.

We do not collect the phone numbers, email addresses or physical addresses of your business’s end customers. The assistant is intended to query your catalog and knowledge; it does not build a database of your buyers’ contact details.

Primary purposes (necessary for the Service):

• Create and manage your account, authentication and usage limits according to your plan.
• Operate the assistant and answer questions about your catalog and knowledge.
• Process payments and subscriptions through Stripe.
• Provide support, maintain security and prevent abuse.

Secondary purposes (optional):

• Send you communications about news, improvements or promotions of the Service.

If you do not want your data to be processed for the secondary purposes, you can state so by sending an email to privacidad@vendilo.ai; your refusal will not be a reason to deny you the Service.

To operate the Service we use providers (data processors) that process the data solely in accordance with our instructions, including: hosting and infrastructure providers, Stripe for payment processing, and artificial intelligence model providers to generate the assistant’s answers. Some of these providers may be located outside Mexico. We do not sell your personal data nor transfer it to third parties for purposes other than operating the Service, unless required by law or with your consent.

If you choose to sign up or sign in with Google, Google shares your name and email address with us to create and authenticate your account. We do not access your Google password or any other information from your Google account.

Vendilo.ai’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We use that data only to authenticate you and operate your account; we do not sell it or use it for advertising.

You have the right to Access, Rectify and Cancel your personal data, as well as to Object to its processing (the ARCO rights under Mexican law), and to revoke the consent you have given us. To exercise them, send your request to privacidad@vendilo.ai indicating your name, the associated account and a clear description of the data and of the right you wish to exercise. We will respond within the time limits provided by the LFPDPPP (Mexico).

You can limit the use or disclosure of your data by requesting it at the email address above. You can also adjust non-essential cookies in accordance with our Cookie Policy.

The site uses cookies and similar technologies to operate, remember preferences and, if you consent, measure the use of the site. The details are in our Cookie Policy.

We apply reasonable technical, administrative and physical measures to protect the data against damage, loss, alteration or unauthorized access. Access to each business’s data is isolated per account (multi-tenant architecture).

We retain the information while your account is active or as necessary to provide the Service. If you close your account, we will delete or anonymize the associated information, except for what we must retain due to legal obligations.

We may update this Privacy Notice from time to time. If the changes are material, we will notify you through the Service or by email.

If you believe that your right to data protection has been violated, you may turn to the competent authority for personal data protection in Mexico.