Comprehensive Privacy Notice

1. Data controller

Pedro Cano González, operating commercially as Design X AI, with operating address in Santiago de Querétaro, Querétaro, Mexico, is the controller of personal data collected directly through designxai.com.mx, its forms, WhatsApp and commercial relationships.

2. Personal data we may process

Depending on the interaction and the service requested, we may process:

• Identification and contact: name, email, phone, company, role and city.
• Business context: sector, need, timeline, contemplated investment, current processes and content you choose to share.
• Contractual and tax relationship: legal name, tax ID, fiscal address, invoicing details, contracts, proposals, payments and receipts. We do not store full bank card numbers.
• Project operations: users, owners, documents, permissions, communications, incidents and decisions required to deliver the service.
• Technical data: IP address, device, browser, pages visited, visit source, security logs and privacy preferences, where applicable.

3. Purposes of processing

Necessary purposes

• Responding to information and contact requests.
• Assessing needs and preparing diagnostics, proposals or contracts.
• Implementing, operating, maintaining and supporting contracted services.
• Managing projects, access, communications, invoicing and collections.
• Protecting site security, preventing abuse and meeting legal obligations.

Optional purposes

• Measuring site usage and improving pages, content and journeys.
• Measuring advertising campaigns and building audiences when authorized.
• Sending requested content, updates or commercial communications.

You can deny or withdraw authorization for optional purposes from the site's privacy panel or by writing to the email above. This will not affect services you have already requested that require processing for delivery.

4. Classification and automated assistance

Some forms or agents may organize a request by sector, urgency, timeline, investment or other declared criteria. This classification aims to route contact and prepare context. It does not by itself produce legal, medical or financial effects, nor automatic acceptance of a project. Relevant commercial decisions are reviewed by a person.

5. Processors, external services and transfers

We do not sell or rent personal data. To operate the site and deliver services, we may allow strictly necessary processing by providers of infrastructure, email, messaging, analytics, advertising, payments, security or technology processing, subject to their obligations and applicable instructions.

Some providers may process information outside Mexico. When necessary, we will seek to use contractual relationships and reasonable configurations to protect the information. We may also disclose data when there is a legal obligation, a well-founded authority request, or when necessary to exercise or defend rights.

6. ARCO rights, revocation and limitation

You may request access, rectification, cancellation of or objection to the processing of your personal data, as well as revoke consent or limit its use and disclosure.

Send your request via WhatsApp +52 720 603 3658 with:

1. Your name and a means to communicate the response.
2. A document or reasonable information to prove identity and, where applicable, representation.
3. The right you wish to exercise and a clear description of the data involved.
4. Elements that help locate the information or perform the correction.

We will handle the request within the periods set by applicable law. Exercising these rights is free, except reasonable reproduction or shipping costs where legally applicable.

7. Security, retention and minors

We apply reasonable administrative, technical and organizational measures to reduce risks of loss, alteration, unauthorized access or use. We keep information for as long as needed for the stated purposes, contractual, tax, security or rights-defense obligations; afterwards it is deleted, blocked or dissociated as appropriate.

This site is intended for persons able to request business services and does not seek to collect data directly from minors. In education projects, the client institution determines purposes and authorizations; Design X AI acts under the contract and documented instructions.

8. Cookies and changes to this notice

See our Cookie Policy to learn about the technologies used and change your preferences.

Substantial updates to this notice will be published at this same address, stating the modification date. Where necessary, we will use available contact means to inform of relevant changes.

This notice is prepared with reference to the Mexican Federal Law on the Protection of Personal Data Held by Private Parties. Contracts or projects involving additional processing may include specific annexes.