1. Data Controller Identification
Synfonix ("we", "our", or "the platform") is the entity responsible for the processing and protection of your personal data, operating from Mérida, Yucatán, Mexico.
We are committed to safeguarding your privacy in accordance with the Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and applicable international privacy standards.
For any questions, clarifications, or requests concerning this privacy policy, you can contact our privacy officer at: privacidad@synfonix.net.
2. Personal Data We Collect
To provide digital invitations, attendance management, and guest concierge services, we collect the following categories of data:
3. Purposes of Processing
Primary purposes (strictly necessary to deliver the service):
Secondary purposes:
We do not use your personal information for third-party marketing, advertising networks, or unauthorized profiling.
4. WhatsApp Cloud API & Third-Party Service Providers
Synfonix integrates the official WhatsApp Cloud API provided by Meta Platforms, Inc. ("Meta"). All communications exchanged via WhatsApp are additionally governed by the WhatsApp Business Terms of Service and Meta Privacy Policies.
Your messaging data is routed through Meta's secure servers solely to facilitate message delivery and enable bidirectional communication with our automated concierge assistant.
Cloud and Infrastructure Providers: To guarantee high availability, security, and low latency, Synfonix uses enterprise-grade hosting services (including Vercel for web delivery, Supabase / PostgreSQL with Row-Level Security, and Upstash for rate-limiting).
Artificial Intelligence Models: We utilize language models to understand and answer guest event questions. These models do not retain or train public foundational models on your personal data.
WhatsApp Business Cloud API
Messages are never used for third-party public AI training and travel encrypted.
5. Data Transfers & Sharing
Synfonix does not sell, lease, or share personal information with third parties for unapproved purposes.
The only authorized disclosures and data transfers are:
6. Security Measures & Data Retention
We implement technical, organizational, and physical security measures designed to protect your personal data against accidental loss, unauthorized access, alteration, or unlawful destruction.
Security safeguards include mandatory encryption in transit (HTTPS/TLS) and at rest, database row-level security isolation (RLS), and continuous system anomaly monitoring.
Retention Period: Guest data is retained throughout the preparation and completion of the designated event, and subsequently purged or securely archived in accordance with planner service agreements and legal retention mandates.
7. ARCO Rights & User Data Deletion Instructions
Under the LFPDPPP and international data privacy regulations, you have the right to Access your personal data in our possession, Rectify any inaccurate records, Cancel (delete) your data from our systems, and Object to specific processing activities (ARCO rights).
User Data Deletion & Modification Instructions:
To exercise your rights or request immediate deletion of your phone number and records:
We will review and resolve your request within 20 (twenty) business days of receipt.
Official ARCO contact channel:
privacidad@synfonix.net9. Changes to this Privacy Policy
Synfonix reserves the right to amend or update this privacy notice to comply with legal developments, platform enhancements, or developer guidelines from integrated platforms (such as Meta for Developers).
Substantive changes will be published directly on this page (https://synfonix.net/privacy), with the updated effective date reflected at the top of the policy.
Questions about your data or deletion requests?
Reach out directly and our team will process your request in full compliance with the law.
