Privacy Notice

Gnosix (hereinafter “Gnosix,” “we,” “us,” or “the company”), with its principal operations in Mexico City, Mexico, is responsible for collecting, using, storing, and protecting your personal data in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (“LFPDPPP,” under its Spanish acronym) and its Regulations.

This Privacy Notice explains how we process your personal data when you provide it through our website, direct communication channels, or any other official contact method.

We may collect the following categories of personal data:

• Full name or contact name
• Email address
• Telephone or WhatsApp number, when you provide it voluntarily
• Company name, job title, or organization
• Operational or business information shared during diagnostics, architecture, implementation, or support
• Website navigation and usage data, such as IP address, browser type, and pages visited
• Contact information voluntarily provided when accessing the Gnosix digital assistant, as described in Section 7

We do not deliberately collect sensitive personal data, such as ethnic origin, health status, religious beliefs, sexual orientation, or biometric data. If we receive sensitive data incidentally while providing services, we will treat it with heightened confidentiality and delete it when it is no longer necessary.

We use your personal data for purposes necessary to establish or perform our service relationship:

• Responding to contact, diagnostic, or project-evaluation requests
• Providing diagnostics, architecture, and artificial intelligence infrastructure implementation services
• Designing, developing, implementing, and operating AI systems
• Processing data within the specific scope of the contracted service
• Communicating, following up, coordinating, and managing projects
• Providing technical support, maintenance, and post-implementation optimization
• Billing, collection, and compliance with tax obligations

With your consent, we may also use your data for:

• Sending information about our services, updates, educational content, or events
• Continuously improving our processes, services, and website
• Preparing internal statistics and market studies using anonymized data
• Evaluating service quality

If you do not want us to use your data for these secondary purposes, you may tell us at any time through the official contact channels listed at the end of this notice. Refusing secondary processing will not prevent us from providing contracted services.

By providing your personal data through our website, WhatsApp, email, social media, or another communication channel, you consent to its processing as described in this Privacy Notice.

You may withdraw consent for secondary purposes at any time, without retroactive effect, by sending a request through our official channels.

Because of the nature of our services, you should know that:

• AI systems we implement may process business data only to perform the functions and tasks agreed in the service contract
• Some data may be processed by specialized infrastructure and AI-model providers, subject to their respective privacy policies and terms of use
• Data processed by AI tools is subject to the same security and confidentiality measures as other personal data
• You may request detailed information about which data AI systems process and for what purpose

Gnosix operates its own digital assistant on this website. It is designed to explain our services, answer initial questions, and guide you toward a useful next step. The following specific terms apply when you interact with the assistant:

Data collected by the assistant:

• The name and email address you provide before starting the chat, processed as contact data under this general notice.
• Temporary technical identifiers stored in your browser to authorize chat during the visit; they do not contain your email address.
• A pseudonymized reference to your connection used only to prevent abuse. We do not retain your IP address in plain text in the assistant security record.
• General usage events, such as opening the assistant, verifying access, starting a chat, and clicking the scheduling link. Associated analytics data does not include your name, email, or conversation content.

How your messages are processed:

• Messages are processed by external language-model providers under their respective privacy policies and terms of use. Their retention and improvement practices may vary. Do not enter sensitive data.
• In this version, visit history remains only in your browser and does not create new conversation records on our servers. Before sending it to the model, we automatically remove email addresses, telephone numbers, and common credential formats. This filter reduces accidental exposure but cannot detect every type of personal information; do not enter addresses, official identifiers, or other sensitive data.
• We use automated controls to detect and block manipulation or misuse. Blocked attempts may generate technical security records without your identity in plain text.

Purpose of processing:

• Responding to your questions and providing general information about Gnosix services.
• Assessing your interest and guiding you to schedule a review when there is a potential fit.
• Detecting and mitigating fraudulent or abusive use of the assistant.

Assistant-specific retention periods:

• Ordinary technical records used to prevent abuse are retained for 30 days.
• When a request is blocked for security reasons, the corresponding event may be retained for up to 180 days.

Your choices:

• You may reset or close the assistant at any time to erase that visit’s local history; this version does not store new chat transcripts on our servers.
• You may exercise your ARCO rights under Section 10 for data collected by the assistant by emailing contacto@gnosix.io.
• You may choose not to interact with the assistant; the website remains fully functional without it.

Personal data may be processed by external providers that are strictly necessary to deliver our services, within the following categories:

• Infrastructure, hosting, and data storage
• Processing through artificial-intelligence models
• Prospect registration and operational notifications
• Communication, analytics, and scheduling, only when you use those functions

These transfers occur only for the purposes described in this notice and within the scope of the relevant service. We do not sell, rent, or trade your personal data to third parties for unrelated purposes.

If a transfer is required for a different purpose, we will inform you and request your prior consent.

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, according to the following criteria:

• Contact and prospecting data: while necessary to respond to your request, follow up on a business relationship, or meet applicable legal obligations. You may request cancellation or object to processing through the ARCO rights described below.
• Project and implementation data: for the duration of the service and the agreed post-service support period
• Tax and billing data: as required by applicable tax law, for at least five years

When data is no longer necessary for these purposes, it will be deleted, blocked, or anonymized in accordance with applicable law and obligations.

Under the LFPDPPP, you have rights of Access, Rectification, Cancellation, and Objection regarding your personal data, including data processed by artificial intelligence systems. These are known as ARCO rights under their Spanish acronym.

You may exercise these rights by contacting us through an official channel and providing:

• Your full name and contact information
• A clear description of the right you wish to exercise
• Any document that helps us identify your data in our systems

We will respond to your request within 20 business days, as required by applicable law. If your request is granted, we will implement the corresponding action within the following 15 business days.

Our website may use cookies and similar technologies for functional and analytics purposes to improve the browsing experience and understand how the site is used.

General Assistant usage events do not include your identity or conversation content. Analytics services may process the page URL and basic technical context from the request. You may configure your browser to block or delete cookies at any time, although doing so may affect some website features.

Gnosix uses reasonable administrative, technical, and physical security measures to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing:

• Encryption of data during transmission
• Access controls based on functions and responsibilities
• Periodic infrastructure and systems security reviews
• Specific controls for data processed by AI systems
• Pseudonymization of technical identifiers used to prevent abuse
• Usage limits and automated detection of improper activity
• Web security controls across the domain
• Internal policies for handling confidential information

No security system is infallible. Gnosix cannot guarantee absolute security, but we commit to using reasonable diligence to protect personal data and to notify you of any security breach that could affect it.

Our services are intended for businesses and professionals. We do not knowingly collect personal data from minors. If we learn that we collected a minor’s data without the consent of a parent or legal guardian, we will delete it promptly.

Gnosix may amend this Privacy Notice to reflect changes in our practices, services, or applicable law. We will publish any amendment on this page together with the updated effective date.

We recommend reviewing this notice periodically. Continued use of our services or website after changes are published constitutes acceptance of those changes.

For questions, requests, or ARCO rights related to this notice, contact us through:

• Email: contacto@gnosix.io
• Official Gnosix social-media accounts on Instagram, X, YouTube, Facebook, and TikTok

Principal operations: Mexico City, Mexico.

Last updated: July 24, 2026.