Privacy notice

1. Who is responsible for your data

Sergio Fernando González Aguirre, who operates the trade name “PixanAI”, taxpayer registration (RFC) GOAS870406H33, with registered address at 3 Oriente #2409, Col. Azcárate, C.P. 72501, Puebla, Puebla, México, is the data controller for the personal data you provide through this site or our contact channels.

You can reach us by phone at +52 222 532 7145, at hola@pixanai.com for anything, and at privacidad@pixanai.com for anything concerning your personal data.

When we act as processor. PixanAI builds and runs conversational assistants and custom systems for business clients. In those cases the personal data flowing through the assistant or the system belongs to the client who contracted it: that client is the controller, and PixanAI acts as processor, on their behalf and on their instructions, solely to deliver the service. This notice covers the data PixanAI is itself responsible for, which is the data of people who contact us and of our own clients.

2. What we collect

• From people who contact us: name, email address, phone or WhatsApp number, business name, and the message you send.
• From browsing: anonymous technical usage data such as pages visited and device type.

We do not collect sensitive personal data through this site. The contact form neither requests nor stores patient health information.

3. What we use it for

Primary purposes. These give rise to the relationship with you and are necessary to sustain it:

• Answering your inquiry and preparing a quote.
• Following up on the conversation you started.
• Delivering the service you contracted and supporting it.
• Meeting tax and contractual obligations.

Secondary purposes. These are not necessary to deliver the service:

• Improving the site and our materials from aggregate metrics.
• Sending you information about other PixanAI services.

You can object to the secondary purposes at any time by writing to privacidad@pixanai.com. Refusing is not grounds for us to deny you service, and it does not affect any relationship we already have with you.

We do not use your data for third-party advertising and we do not sell it to anyone, under any circumstances.

4. Transfers and processors

To operate we rely on technology providers that handle data on our behalf, as processors, and only to the extent their service requires:

• Server infrastructure and site hosting: Vercel Inc., in the United States.
• Contact form delivery: Web3Forms, outside Mexico.
• Database for the systems we run, hosted with cloud providers located outside Mexico.
• Artificial intelligence model provider, located outside Mexico, when the contracted service includes a conversational assistant.
• Messaging and payment processing, when the contracted service requires it.

This means your data may be stored and processed outside Mexican territory. These transfers are the ones necessary to deliver the service you requested and to meet obligations arising from the legal relationship between you and us, so under articles 36 and 37 of the LFPDPPP they do not require your consent. Beyond those cases, we disclose data only where a competent authority lawfully requires it. We do not sell or assign your data to third parties for their own purposes.

5. How we protect it

• Encryption in transit (HTTPS) and at rest.
• Access limited to staff who need it, with individual credentials.
• Regular backups and access logging.
• Secure deletion once the retention period ends.

Your patients’ or customers’ data. When you contract one of our systems — Kiin, for example — the data you enter remains yours: we act as processor, only on your instructions and only to deliver the service. That relationship is documented in the corresponding contract.

On other jurisdictions. We operate from Mexico under the LFPDPPP. We do not hold, and do not claim, HIPAA or GDPR certification. If your organization is subject to either regime, raise it before contracting and we will state in writing what we do and do not cover.

6. How long we keep it

Contact details from inquiries that do not become clients are kept for 12 months from the last contact and then deleted. Client data is kept for the duration of the relationship and afterwards for the period tax law requires.

7. Your rights

You may access your data, correct it if inaccurate, request its deletion, or object to its processing. You may also withdraw consent or limit the use of your data. To exercise any of these rights, write to us at privacidad@pixanai.com, or if you prefer through the contact form or on WhatsApp, stating your name, a contact method and what you are requesting, and note “Data rights” in the message. We reply within a maximum of 20 business days.

8. Cookies and traffic measurement

This site sets no cookies. None of our own, none from third parties, none for advertising or profiling. We store nothing in your browser’s local storage either. That is why you will not find a cookie banner here.

We do measure traffic, using Vercel Web Analytics, which is served from our own domain and works without cookies: it assigns you no persistent identifier. Each visit is recognized by a value derived from the request that is discarded after 24 hours — we cannot follow you from one day to the next, or from this site to any other.

For each page view we record the date and time, the path visited, the site you arrived from, campaign parameters in the address, your approximate location (country, region and city), the operating system, the browser and the device type. None of it is tied to your name, your email or your IP address: we read it in aggregate, to learn which pages get read — not who reads them.

Typefaces are served from our own domain: since 7 September 2026 the site no longer requests them from Google Fonts, so opening any page sends nothing to Google. The only third party that ever sees a request from you is Web3Forms, and only if you submit the contact form: as with any request to a server, it receives your IP address and is governed by its own privacy policy.

To be explicit for readers outside Mexico: this notice is written to Mexican law (LFPDPPP). We do not claim GDPR or UK GDPR compliance, and we are not established in the EU or the UK.

9. Changes to this notice

Any change will be published on this page, and the last-updated date shown at the top of this notice is what tells you which version you are reading. If the change is material, we will notify you through the contact details we hold.

10. Supervisory authority

If you believe your right to personal data protection has been infringed, you may approach the competent data protection authority in Mexico.