This translation is provided for convenience. The Spanish version is the binding one.
Short-form privacy notice. [RAZÓN SOCIAL], S.A.P.I. de C.V. ("waydot") processes your identification, contact, employment, tax and service-usage data to respond to your requests, give you access to the platform, invoice and provide support and, unless you object, to send you marketing information and improve our communications. You can exercise your ARCO rights and object to the secondary purposes by writing to [email protected]. The full privacy notice follows.
1. Identity and address of the controller
[RAZÓN SOCIAL], S.A.P.I. de C.V. ("waydot"), with its address for service of notices at [Calle y número, colonia, código postal, alcaldía o municipio, entidad federativa], México, is the controller of the personal data referred to in this notice, under the Mexican Federal Law on the Protection of Personal Data Held by Private Parties published in the Official Gazette of the Federation on March 20, 2025 ("LFPDPPP") and other applicable rules.
waydot's personal data department ([NOMBRE O ÁREA RESPONSABLE DE DATOS PERSONALES]) handles matters relating to this notice at [email protected].
2. Scope
This notice applies to individuals whose data we process on our own behalf:
- Visitors to https://waydot.mx and our blog.
- Prospects who request a briefing, a quote or marketing information.
- Administrators and Users of our customers' accounts, with respect to the data needed to create and manage their access.
- Billing, procurement and support contacts at our customers and suppliers.
Data processed on behalf of our customers. When a company uses waydot to manage its field staff (tickets, location during working hours, evidence, attendance, expenses, payroll and employee files), that company is the controller of that data and waydot acts only as processor, under the Data Processing Agreement. If you work for one of our customers, your employer's privacy notice applies to you and your requests should be sent to your employer. If you send them to us, we will forward them to your employer.
3. Personal data processed
| Data subject | Data | Source |
|---|---|---|
| Visitors | IP address, browser and device identifiers, pages visited, language, referring site, interactions with the site | Collected automatically, through the technologies described in section 10 |
| Prospects | Name, email, company, job title, size of operation, business goal, plan of interest, language | Directly from you, when you fill in a form or write to us |
| Administrators and Users | Name, email, phone, job title, optional profile photo, credentials (stored encrypted), authentication factors, device, operating system, IP address, access log | Directly from you or your company's administrator, and automatically when you use the platform |
| Billing contacts | Name, email, phone, legal name, RFC (tax ID), tax regime, tax postal code, CFDI use, payment history | Directly from you or your company |
| Support | Content of support requests, and any screenshots and recordings you choose to share | Directly from you |
Sensitive data. As controller, waydot does not request sensitive personal data. Please do not include it in forms or support requests.
Financial data. Card payments are processed directly by our payment provider. waydot does not receive or store your full card number and keeps only transaction reference data (last digits, card brand, date and amount).
4. Purposes of processing
Primary purposes, necessary for your legal relationship with us:
- Responding to requests for information, briefings, quotes and demos.
- Creating, managing and protecting accounts and workspaces, authenticating Users and preventing fraud and unauthorized access.
- Providing the Services purchased, including support and operational, security and change notices.
- Invoicing, collecting payment and issuing the corresponding CFDI, and meeting tax and accounting obligations.
- Complying with legal obligations and requests from competent authorities, and exercising or defending rights.
Secondary purposes, not necessary for that legal relationship:
- Sending newsletters, event invitations, product news and commercial offers.
- Conducting satisfaction surveys and market research.
- Analyzing use of the website to improve its content and our marketing communications.
5. Objecting to secondary purposes
If you do not want your data processed for some or all of the secondary purposes, email [email protected] with the subject line "Objection to secondary purposes". If your data was obtained directly from you, you may object before providing it or at any time afterwards. If it was obtained by other means, you have at least five business days to object before it is processed for those purposes. Objecting will not be grounds for refusing the services you request or purchase. You may also unsubscribe using the link included in every marketing email.
6. Disclosures to processors and transfers
Disclosures to processors. We share data with providers of cloud infrastructure, storage, email, payment processing, CFDI stamping, maps, notifications, analytics and support. These providers act as processors, follow our instructions and are contractually bound by confidentiality and security obligations. Some are located outside Mexico. The current list is published under Subprocessors. Disclosures to processors do not require your consent.
Transfers that do not require your consent, in the cases provided for by the LFPDPPP:
| Recipient | Purpose |
|---|---|
| Holding, subsidiary or affiliated companies under common control with waydot | Joint operation and administration of the services, under the same privacy policies |
| Competent authorities | Compliance with a law, request or court order |
| Acquirer or successor in a merger, spin-off, sale or restructuring of the business | Continuity of the relationship with you |
| Legal advisers, auditors and courts | Establishing, exercising or defending a right in legal proceedings |
waydot does not sell personal data or transfer it to third parties for their own marketing purposes.
7. ARCO rights
You have the right to access your personal data, to rectify it if it is inaccurate or incomplete, to cancel it if you consider that it is not required for the purposes stated or that it is being used for purposes you did not consent to, and to object to its processing for specific purposes.
To exercise these rights, send a request to [email protected] containing:
- Your name and a means of sending you our response.
- A copy of a valid official ID or, where applicable, documents evidencing the legal representation of anyone acting on your behalf.
- A clear description of the data concerned and of the right you wish to exercise.
- Any information that helps us locate the data and, for rectification requests, documents supporting the change.
We will respond within a maximum of 20 business days from receipt of the complete request and, if the request is granted, give effect to it within the 15 business days following our response. These periods may be extended once for an equal period where justified, and we will notify you if so. Exercising ARCO rights is free of charge; only justified shipping or reproduction costs may be charged.
If you consider that your request was not handled in accordance with the law, you may file a complaint with the data protection authority, which is currently Mexico's Ministry of Anti-Corruption and Good Governance (Secretaría Anticorrupción y Buen Gobierno).
8. Withdrawal of consent
You may withdraw any consent you have given us through the procedure described in section 7. Withdrawal has no retroactive effect. In some cases we will not be able to act on it immediately, because a legal obligation requires us to continue processing your data, or acting on it will mean we can no longer provide the service to you.
9. Limiting use or disclosure
In addition to the mechanisms above, you may:
- Ask to be added to our exclusion list by writing to [email protected], to stop receiving marketing communications.
- Register with the Public Registry to Avoid Advertising (REPEP) maintained by the Federal Consumer Protection Agency (Profeco).
- Set your browser to block cookies, as described in the Cookie Policy.
10. Cookies and tracking technologies
Our site uses cookies and similar technologies to remember your language and visual theme, maintain your session and, for statistical purposes, measure use of the site (pages visited, browsing time, clicks and scrolling, with form fields masked). These technologies collect browser identifiers, IP address, device type, language and page interactions. You can disable them in your browser. Details are set out in the Cookie Policy.
11. Security measures
waydot applies administrative, technical and physical security measures to protect your data against damage, loss, alteration, destruction or unauthorized use, access or processing, including encryption in transit and at rest, role-based access control, two-factor authentication, audit logs, backups and periodic reviews. If a security breach significantly affects your property or non-pecuniary rights, we will inform you without delay and provide the information required by law so that you can take appropriate action.
12. Retention period
Your data is kept for as long as it is needed for the purposes described and, after that, for the periods required by applicable tax, commercial and civil rules (for example, five years for tax records under the Federal Tax Code, or ten years for commercial correspondence and records under the Commercial Code) or the applicable limitation periods for legal claims. When those periods end, the data is blocked and then securely deleted.
13. Minors
Our services are intended for businesses and individuals over 18. waydot does not knowingly collect data from minors and, if it finds that it has done so, will delete that data.
14. Changes to this notice
This notice may be amended because of legal changes or changes in our services or practices. The current version will be published at https://waydot.mx/legal/privacy with its update date and, if the change is material, registered customers and Users will be notified by email.
Last updated: October 15, 2026.