Personal Data Treatment Policy

ATC - Enterprise Process Automation, based in Mexico, is the data controller responsible for the personal data collected through this website, our applications, chatbots, forms, and any communication channel integrated with third-party platforms.

• Legal name: ATC - Automatización de Procesos Empresariales
• Contact email: Contacto@ctacx.com
• Phone: +52 6631144524
• Country: Mexico

We collect the following personal data, either directly provided by the user or through integrations with platforms such as Meta:

• Full name
• Email address
• Phone number
• Public social media profile data (name, profile picture, user ID) when you interact with our chatbots or pages on Facebook, Instagram, or WhatsApp
• Conversation history with our chatbots
• Browsing and behavior data on our website (cookies, IP address, browser type)
• Marketing campaign data (email opens, link clicks, SMS responses)
• Data voluntarily provided in contact forms

We use your personal data for the following purposes:

• Responding to inquiries and contact requests
• Providing contracted automation, chatbot, and multichannel marketing services
• Sending commercial and promotional communications (with your prior consent)
• Managing marketing campaigns via SMS, Email, and WhatsApp
• Operating and improving our chatbots on Meta platforms (Facebook Messenger, Instagram, WhatsApp)
• Statistical analysis and improvement of our services
• Complying with legal and regulatory obligations

The processing of your data is based on the following legal grounds:

• Consent: when you voluntarily provide your data or interact with our communication channels
• Contractual performance: when processing is necessary to deliver contracted services
• Legitimate interest: to improve our services and ensure the security of our platforms
• Legal compliance: when we are required by law to retain or share certain information

We may share your personal data with the following third parties, exclusively for the purposes described in this policy:

• Meta Platforms, Inc. (Facebook, Instagram, WhatsApp): for chatbot operation, message management, and advertising campaigns through their platforms
• Email marketing and SMS service providers
• Cloud infrastructure providers (AWS, Azure) for secure data storage
• Competent authorities when required by law

Our services integrate with Meta platforms to offer chatbots, customer service, and marketing campaigns. By interacting with us through these platforms, you agree that:

• Meta may share your public profile information and messages sent to our pages or bots with us
• We use the WhatsApp Business API, Facebook Messenger, and Instagram tools in accordance with Meta's policies
• Data received from Meta is processed in accordance with this policy and Meta's Platform Terms
• We do not sell or share data received from Meta with third parties for advertising purposes without your consent
• You can revoke access to your data at any time from your Meta account privacy settings
• We comply with Meta's Platform Data Policy and its data deletion requirements

Your data may be transferred and stored on servers located outside of Mexico, including the United States (where Meta's servers and cloud providers are located). These transfers are made with appropriate data protection safeguards in accordance with applicable legislation.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected:

• Active client data: during the business relationship and up to 5 years after its termination
• Lead and prospect data: up to 2 years from the last contact
• Marketing campaign data: up to 1 year after the campaign ends
• Chatbot conversation history: up to 1 year from the last interaction
• Legally required data: according to applicable legal timeframes

As a data subject, you have the right to:

• Access: know what personal data we hold about you and how we use it
• Rectification: request the correction of inaccurate or incomplete data
• Erasure: request the deletion of your data when it is no longer necessary
• Objection: object to the processing of your data for specific purposes
• Withdrawal of consent: withdraw your consent at any time
• Portability: receive your data in a structured and commonly used format

Our website uses cookies and similar technologies to improve your browsing experience and for analytical purposes:

• Essential cookies: necessary for the website to function
• Analytical cookies (Google Analytics): to understand how users use our site
• Meta Pixel: to measure the effectiveness of advertising campaigns on Facebook and Instagram
• Preference cookies: to remember your language and settings

We implement appropriate technical and organizational measures to protect your personal data:

• Data encryption in transit (HTTPS/TLS) and at rest
• Role-based access control for our systems
• Continuous security monitoring and threat detection
• Automatic backups and disaster recovery plans
• Regular staff training in data protection

We reserve the right to update this policy at any time. Significant changes will be notified through our website or by email. We recommend reviewing this page periodically to stay informed of any modifications.

To exercise your data rights, make inquiries about the processing of your data, or file a complaint, you can contact us through the means indicated at the bottom of this page. We will respond to your request within a maximum of 20 business days.