Privacy Notice

Draft under legal review. This is not legal advice.

In compliance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), Alfredo Márquez Gutiérrez, a sole proprietor registered in Mexico, with address at Av. Eugenio Garza Sada s/n, Int. 216, Col. Cerro Gordo, C.P. 37129, León, Guanajuato, México and tax ID MAGA860609GZ7, makes this Privacy Notice available to you.

1. Controller and processor

For the data of prospects who contact us (for example, through the access-request form), Ixegora acts as the data controller.

For the data client organizations load into the platform (employees, students, staff and the content of reports), the client organization is the controller and Ixegora acts solely as processor, handling the data per their instructions.

2. Data we process

From prospects: organization name, contact name, email, phone, approximate number of users and any message you send us.

From platform users: the identification and contact data the organization loads, plus the content of reports. In Companies mode the report retains no data directly identifying the person submitting it; see section 4.

3. Purposes

Prospect data is used to contact you, confirm your plan, onboard your organization and coordinate payment.

Platform data is processed to provide the report-management service per the client organization's instructions.

4. Anonymity in Companies mode

By design, the platform does not link anonymous reports to the identity of the person submitting them: their name, account and email are not stored alongside the report. Towards the organization's administrators this separation is irreversible and no function of the product can undo it.

For the sole purpose of detecting repeat reports from the same source, the report may retain a technical pseudonym derived from the account through a cryptographic function. Under applicable law that data is pseudonymized rather than anonymous information: Ixegora holds custody of the key that generates it and therefore we do not claim that re-identification is technically impossible for us.

We undertake not to use that key to re-identify a person, nor to allow a third party to do so, except upon a duly founded request from a competent authority. The key is kept separate from the database and its use is restricted.

5. Minors' data (Schools mode)

Processing of data of minor students is carried out on behalf of and under the responsibility of the school, which must hold parental or guardian consent as required by applicable law.

Ixegora applies heightened confidentiality measures to this data and processes it solely for the care and follow-up purposes defined by the school.

6. Transfers and providers

To operate the service we rely on infrastructure providers (for example, cloud hosting) that act as sub-processors and are contractually bound to protect the data. We do not sell or trade personal data.

7. Security

We apply technical and organizational measures to protect data, including per-organization isolation, encryption in transit and role-based access control. No system is infallible, but we work continuously to reduce risk.

8. Retention

We retain data for the duration of the service relationship and for applicable legal periods. Prospect data is retained while interest in the service exists or until you request its deletion.

9. Your rights

You have the right to access, rectify, cancel or object to the processing of your data, and to withdraw consent (ARCO rights). If you are in the EU, GDPR rights also apply to you.

To exercise these rights, write to privacidad@ixegora.com. If the data belongs to your employer or school, we will route your request to the relevant controller.

10. Cookies

We use essential cookies for the operation of the site and platform, plus a first-party attribution cookie (non-essential) that records which channel you arrived from on the public site. We do not use advertising or third-party tracking cookies. See our Cookie Policy for details.

11. Changes

We may update this notice. We will publish the current version with its update date on this site.

12. Contact

Data controller: Alfredo Márquez Gutiérrez. Email: privacidad@ixegora.com. Address: Av. Eugenio Garza Sada s/n, Int. 216, Col. Cerro Gordo, C.P. 37129, León, Guanajuato, México.