Privacy Notice

1. Data Controller Identity

CodiceAgents, a legal entity in the process of incorporation in the United Mexican States (hereinafter "CodiceAgents" or "we"), with address for purposes of this notice in Toluca, State of Mexico, and emailsoporte@codiceagents.com, is responsible for processing the personal data we collect through the websitecodiceagents.com and the software platform app.codiceagents.com.

2. Data We Collect

2.1 Through the Landing Page

• Full name
• Email address
• Phone number
• Comments or questions freely provided

By submitting the form you give your express consent for us to contact you about product access. As evidence of that consent we record the date and the version of this Notice that you accepted (LFPDPPP art. 8). You may request deletion of this data at any time (see section 6).

2.2 Through the Platform (app.codiceagents.com)

• Registration data: Business name, email address, session identifiers.
• Business data: Services offered, schedules, team member profiles, client directory and their contact details.
• Usage and interaction data: Text commands, audio, or clicks sent to the AI agent, interface configuration, and appointment scheduling.
• Operational financial data: Recorded income, service costs, and derived metrics for generating financial reports.

2.3 Automatically Collected Data

• IP address, browser type, operating system, and performance metrics.
• Essential security and session cookies (see section 8).

3. Purposes of Processing

3.1 Primary Purposes (necessary for the service)

• Handle contact and demo requests submitted from the landing page.
• Create, operate, and manage your account or tenant profile on the Platform.
• Provide core functionality: natural language interpretation via AI to schedule appointments, manage clients, and calculate finances.
• Send transactional notifications (confirmations, password resets, security alerts).

3.2 Secondary Purposes

• Send commercial communications about CodiceAgents updates or new modules.
• Conduct aggregated statistical analysis (without identifying individual users) to improve software usability.

You may opt out of these secondary purposes by sending an email to soporte@codiceagents.com.

4. Data Processing via Artificial Intelligence

The core of CodiceAgents is its Agent-First architecture. For the system to understand your requests, data interacts with large-scale language models (LLMs). You acknowledge and accept that:

• Third-party transmission: The messages (prompts) you send to the agent are transmitted via programming interfaces (APIs) to external AI providers (e.g., providers routed through OpenRouter).
• Third-party policies: These providers act as sub-processors. The router we use (OpenRouter) does not retain prompts or responses by default: logging is opt-in and we do not enable it. We do not use your prompts to train our own models, nor do we share them for advertising purposes. Even so, underlying providers may retain information for limited periods for security, abuse prevention, or legal compliance (in several cases up to 30 days), and some models are only available by accepting their own retention.
• Strict restriction: For your safety and that of your clients, entering sensitive personal information (health data, full credit card numbers, passwords) into chat interactions with the AI is strictly prohibited.

5. Data Transfer to Third Parties

Your data is stored on secure infrastructure. We only share strictly necessary information with the following providers (sub-processors) to guarantee operation:

• Supabase: For database hosting, authentication system (Auth), and secure storage.
• Resend: For secure transactional email routing and delivery.
• Cloudflare: For DDoS protection, DNS management, support email routing, and static content delivery.
• AI providers: For the natural language processing described in section 4.

6. Your Rights (ARCO)

In accordance with the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), you have the right to know what data we hold (Access), request its correction (Rectification), ask that we delete it from our databases (Cancellation), or object to a specific use (Objection).

To exercise these rights, send an email to soporte@codiceagents.com with the subject "ARCO Rights Exercise." You must attach a copy of your official ID to validate your identity and clearly describe your request. We will respond within a maximum legal period of 20 business days.

7. Retention and Deletion

We retain your data while your account at app.codiceagents.com remains active. If you decide to close your account, your data and your business (tenant) data will be permanently deleted from our operational databases within 30 days, retaining only those records (e.g., SaaS payment receipts) that tax law requires us to keep for predetermined periods.

8. Cookies and Tracking Technologies

We use essential cookies. On the Landing Page, we use Cloudflare technical cookies for security (bot detection). On the Platform, we use web session cookies (JWT/Supabase) essential for keeping your account open and secure while you browse. We do not sell data to third-party advertising networks or use invasive trackers.

In addition, on the Landing Page we use self-hosted, aggregated web analytics (Umami) thatdoes not use cookies, does not record information that could identify you, and does not track you across websites. It only measures page views, referrer origin, browser, operating system, device type, and country, in order to understand general site usage and improve it.

9. Information Security

We implement encryption in transit (HTTPS/TLS) for all communications between your browser and our servers, as well as Row Level Security (RLS) policies in our database to ensure no other business (tenant) can access your information. However, you acknowledge that no system on the internet is 100% invulnerable.

10. Changes to This Notice

CodiceAgents reserves the right to update this Privacy Notice. Any substantial modifications will be notified through a visible notice within app.codiceagents.com or via email to the address associated with your account, prior to their effective date.