Privacy Policy | Aliosha System

In compliance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), as well as the General Data Protection Regulation (GDPR) of the European Union and the California Consumer Privacy Act (CCPA) in the United States, we provide you with this Privacy Policy.

1. Data Controller

Carlos A. Galvez Díaz Barriga and Gabriel Gutiérrez Guerra, with address in Mexico City, Mexico, are responsible for the processing of your personal data.

2. Data Collected

We collect the following data when you register:

First name, last name
Email address
Phone number
Date of birth
Password hash
User type (admin, client, user, project_manager)
User image
City and country
Position
Notification preferences
Supabase UUID identifier

We do not collect sensitive data.

3. Processing Purposes

Primary purposes:

Account creation and management.
Access and collaboration on projects.
Role and permission administration.

Secondary purposes:

Platform usage analysis (Posthog).
Service experience improvements.

4. Data Transfer

Your data may be processed by third parties outside of Mexico, including:

Supabase (hosting and database).
Posthog (analytics).

These transfers are carried out with appropriate security measures and solely to fulfill the mentioned purposes.

5. ARCO Rights

You have the right to Access, Rectify, Cancel, or Object to the processing of your data. To exercise these rights, send an email to: contact@alioshasystem.com with your request.

6. Consent Revocation

You can revoke your consent and delete your account from your profile. This will erase your user data from our database.

7. Security

Your passwords are stored in encrypted form (hash). Only authorized personnel of the Controllers can access the information.

8. Data Retention

Your data will be retained as long as you have an active account. Once deleted, it will be permanently erased unless required by law.

9. Cookies

The Site uses cookies for its operation and for analytics (Posthog). You can disable them from your browser.

10. Changes to this Policy

This policy may be modified to adapt to legal or technical changes. We will notify you by posting the new version on the Site.

11. International Users

EU (GDPR): Processing is based on your consent and contract execution.
U.S. (CCPA): You can request that your data not be sold or transferred to third parties other than those mentioned, and you will not receive discriminatory treatment for exercising your privacy rights.