Privacy notice

Data controller and address

Strategic Sloth LLC, registered in Wyoming, United States, is the data controller (responsable) for the personal data you give us as a client. Address: 1021 E Lincolnway, 526, Cheyenne, WY 82001, United States. Privacy contact: privacy@strategicsloth.com.

This is the English version of our aviso de privacidad integral under Mexico's Ley Federal de Protección de Datos Personales en Posesión de los Particulares. It covers the 24/7 auto-reply assistant service. The website as a whole has its own privacy policy.

Personal data we collect

• Contact: name, email and phone.
• Business: name, type, address, Google Maps link, website, Instagram, hours and languages.
• Staff: WhatsApp numbers of staff who will receive alerts.
• Assistant content: FAQ answers, prices, booking rules and policies.
• Meta data: the WhatsApp Business account ID and phone number ID returned by Meta's signup, and an access token from Meta if you connect through Embedded Signup.
• Billing: order and billing data from Stripe (customer ID, plan and payment status). We never see full card numbers.

We do not ask for sensitive personal data. Please do not include it in the form.

Purposes

Primary purposes (needed for the service):

• Provide and support the service.
• Set up the assistant.
• Send confirmations and alerts.
• Billing and accounting.
• Meet legal obligations.

Secondary purposes: only an optional newsletter, if you give separate consent. You can refuse from the start or at any time, and this does not affect the service.

We do not sell your data. We do not use it for marketing without your separate consent.

Your business's customer data

The assistant processes messages your customers send and receive, and writes leads to your own Google Sheet.

For that data, your business is the controller and we act as a processor (encargado), on your business's behalf and only to provide the service. Your business should tell its customers about this processing in its own privacy notice.

Processors and transfers

We use these providers, which process data on our behalf to run the service:

• Stripe: payments.
• Resend: email.
• Upstash: database.
• Vercel: hosting of the forms and API.
• Meta: WhatsApp.
• Google: Google Sheets.

Several are in the United States, so your data may be processed outside Mexico. We only share data with other third parties when the law requires or allows it without your consent, or with your consent.

Retention

• Onboarding and service data are kept for the duration of the service plus 12 months after it ends. They are then deleted or anonymized.
• Billing and tax records are kept as long as tax law requires: 5 years under the Código Fiscal de la Federación.
• Draft onboarding data that was never submitted is deleted after 6 months.

ARCO rights and withdrawing consent

You can exercise your rights of access, rectification, cancellation and objection (ARCO rights), and withdraw your consent, by emailing privacy@strategicsloth.com.

Please include:

• Your name and a way to reply to you.
• A document proving your identity or, if applicable, your representative's.
• Which right you want to exercise and for which data.

We will answer within 20 business days. Withdrawal does not affect processing already done, and may stop us from providing the service if it concerns a primary purpose.

If you believe your data protection rights were affected, you can go to the competent personal data protection authority.

How to limit use or disclosure

You can ask us at any time, at privacy@strategicsloth.com, to stop using your data for the newsletter or any secondary purpose. You can also unsubscribe with the link in each newsletter.

Local storage, cookies and changes

The forms use your browser's local storage to save your progress. You can clear it in your browser settings. Site analytics follow the main privacy policy and are off by default.

If we change this notice, we will publish the new version on this page with its date and, for important changes, tell you by email.