Privacy notice

1. Who is responsible

The party responsible for processing your personal data is Luis Enrique López Hernández, operating under the trade name ALCore Intelligence, domiciled at Virgen del Carmen 180, Col. Virgencitas, C.P. 57300, Nezahualcóyotl, Estado de México, Mexico. For anything about this notice write to [email protected].

2. What we collect

We collect what the service needs and nothing more:

• About your account: your name, your e-mail address, your password (stored encrypted, never in the clear), your business's name and line of business, your phone number and the WhatsApp number you connect.
• From using the service: the conversations your customers have with your assistant on the channels you connect, your catalogue, your diary, your orders and the documents you upload.
• Technical: your IP address, your browser, and session and language cookies.
• Payment: the payment reference you report to us. We neither receive nor store card details.

We do not collect sensitive personal data. If your business receives it from its own customers (a clinic, for instance), you are the party responsible for it; see section 4.

3. What we use them for

We use your data for these primary purposes, the ones that make the service possible:

• Providing the service: letting your assistant answer on your behalf, book appointments and take orders on the channels you connect.
• Showing you your dashboard and your reports.
• Charging for your plan and confirming your payments.
• Supporting you when you ask.
• Keeping the service secure.

As a secondary purpose we e-mail you about changes and news about the product. You may refuse this purpose by writing to [email protected], without it affecting the service.

4. Your customers' data

The people who write to your business are its customers, not ours: your business is the party responsible for their personal data. ALCore Intelligence processes it as a processor, only to provide you the service and following your instructions.

Your business must have a privacy notice of its own for its customers.

5. Whom we share them with

We only share data with the providers the service needs in order to run, under contract and for these purposes:

• The artificial-intelligence model providers that generate the replies, currently Anthropic, in the United States. They receive the conversation content needed to answer.
• Meta (WhatsApp, Instagram, Messenger) and Telegram, according to the channels you connect.
• Google, if you connect your calendar.
• Google LLC and Meta Platforms, Inc., in the United States, to measure the audience and the campaigns of the public site www.botcore.com.mx, as section 6 describes.
• The provider that hosts the server and the backups.

We do not sell or rent personal data. These transfers are the ones the service requires, under the LFPDPPP.

6. Cookies and measurement technologies

In the console and the portal (app.botcore.com.mx) we use a session cookie, which keeps you signed in, and a language cookie, which remembers whether you prefer Spanish or English. There we use no advertising cookies and none that track you across sites. You can delete them from your browser; without the session one you will have to sign in again.

The public site www.botcore.com.mx uses Google Tag Manager to load three measurement tags: Google Analytics 4, Google Ads and the Meta Pixel (Facebook and Instagram). These tags place cookies and similar identifiers and collect usage data: the pages you visit, your approximate location derived from the IP address, your device and browser, where you came from and how you interact with the site. We use them to measure the audience and the results of campaigns.

That data is processed by Google LLC and Meta Platforms, Inc., in the United States, under their own terms, which involves a transfer outside Mexico. The console and the portal do not load these tags.

You can refuse or delete these cookies in your browser settings, and turn off Google's measurement with its own tools, such as the Google Analytics opt-out add-on, the ads settings of your Google account and the ad preferences of your Meta account. Refusing them does not affect your use of the service. To exercise your rights over this data, see section 8.

7. How long and how we keep them

We keep your data for as long as your account exists and, afterwards, for as long as the law requires.

The credentials and keys of the channels you connect are stored encrypted, access is separated per business, and the backups are encrypted.

You can ask for your account to be deleted as explained in section 8.

8. Your rights (ARCO) and how to exercise them

You have the right to access your personal data, to rectify it when it is inaccurate, to cancel it and to object to its processing, and to revoke the consent you gave us.

To exercise any of these rights write to [email protected] with your name, the account's e-mail address and what you are asking for. We answer within a maximum of 20 business days, as the law requires.

If you are not satisfied with our answer, you may take it to the authority responsible for personal data protection.

9. Changes to this notice

Changes to this notice are published on this page with the date it was updated. If the change affects how we use your data, we also tell you by e-mail.