Comprehensive Privacy Notice

Last updated: September 22, 2026

Leer este documento en español

1. Data Controller

Asistian, S.A.P.I. de C.V. (“Asistian”), located at Bulevar Morelos 307, second floor, Hermosillo, Sonora, Mexico, is responsible for personal data obtained directly from prospects, customers, and users to manage the commercial relationship and operate its own services.

When a business uses Asistian to serve its contacts or end customers, that business determines the purposes of processing, and Asistian acts as its service provider or processor under its instructions, where applicable.

2. Scope

This Notice applies to Asistian’s website, registration, Platform, support, commercial communications, and integrations. It does not replace the privacy notices each Customer must provide to its contacts, employees, or end customers.

3. Data We Process

Depending on the relationship and features used, we may process:

  • identification and contact information, including name, company, role, email, telephone number, and profiles;

  • account, authentication, role, permission, and configuration data;

  • commercial, tax, and payment information; payment providers process full card numbers, which Asistian does not store;

  • conversations, contacts, files, notes, appointments, tickets, tasks, pipelines, and settings managed by the Customer in the Platform;

  • technical and usage information, including IP address, device, browser, access logs, events, errors, and performance metrics;

  • tokens, identifiers, and metadata required for authorized integrations;

  • recordings or transcripts when the user enables a feature that requires them and receives the applicable disclosure or consent.

The Platform may contain sensitive personal data that a Customer or its contacts choose to provide. Asistian does not generally require this data as a condition of the Service. The Customer must minimize its collection, maintain a valid legal basis, and configure appropriate safeguards.

4. Purposes

Primary Purposes

We use data to:

  • create, authenticate, and administer accounts;

  • provide purchased inbox, CRM, scheduling, tickets, tasks, automations, AI, and integrations;

  • send and receive requested communications;

  • process payments, issue receipts, and administer subscriptions;

  • provide support, security, fraud prevention, diagnostics, and continuity;

  • comply with legal obligations and respond to individual rights requests;

  • produce aggregated or anonymized metrics to operate and improve the Service.

Secondary Purposes

With authorization or as permitted by law, we may send Asistian news, content, surveys, and offers. Individuals may object or unsubscribe through the link in the message or by emailing hola@asistian.com without affecting the purchased Service.

5. Artificial Intelligence

When a Customer enables AI features, relevant content may be sent to model providers to produce requested responses, classifications, summaries, extractions, actions, or other output. The amount and type of information depend on the Customer’s configuration.

Asistian does not use Customer Data to train its own general-purpose models. Providers process information under their business/API terms, data controls, and applicable contractual obligations. Customers must avoid sending unnecessary data and provide end-user disclosures where required.

6. Meta and Messaging Channels

When WhatsApp Business, Instagram, or Messenger is connected, Asistian processes identifiers, profiles, messages, files, delivery status, templates, and metadata required to operate the integration. Meta and its companies may process the information under their own terms and policies.

The Customer manages its Meta assets, permissions, numbers, verification, templates, and payment method. It must obtain required consent or opt-in and provide its privacy notice to recipients.

7. Google API Services

When a user connects Google Workspace, Asistian requests only permissions displayed on the OAuth screen and necessary for enabled features. These may include:

  • gmail.send: send email drafted, approved, or generated under user instructions;

  • calendar.readonly: view calendars and availability;

  • calendar.events: create, update, or cancel events;

  • openid, userinfo.email, and userinfo.profile: authenticate and identify the user.

Asistian does not use gmail.send to read, modify, archive, or delete existing messages. Google data is used only to provide or improve visible features requested by the user.

Asistian’s use and transfer of information received from Google APIs complies with the Google API Services User Data Policy, including Limited Use requirements. The information is not sold, used for advertising, or used to determine credit eligibility. Human access is not permitted unless the user affirmatively consents to specific data access, access is necessary for security or legal compliance, or the information is aggregated and anonymized for internal operations.

Google data is not used to train general-purpose AI models. If a visible feature requested by the user requires automated processing, the permissions, disclosures, and controls required by Google will apply.

Users may revoke access under Settings → Integrations or at myaccount.google.com/permissions. When an integration is disconnected, Asistian revokes or deletes tokens under its technical processes; valid records created in the Platform are retained under the applicable retention rules.

8. Payments

Stripe or other providers process payment and fraud-prevention data. Asistian receives customer identifiers, subscription status, amounts, invoices, last digits, and information needed for reconciliation and support, but does not store full card numbers or security codes.

9. Service Providers and International Processing

To provide the Service, we may disclose or permit processing by providers of:

  • Meta services, including WhatsApp Business, Instagram, and Messenger;

  • Google authentication, Gmail, and Calendar;

  • OpenAI or other enabled providers for AI functions;

  • Amazon Web Services and other infrastructure, hosting, and backup services;

  • Twilio or other communications services;

  • Stripe and other payment, billing, or fraud-prevention services;

  • monitoring, support, operational analytics, and security.

These providers process information under applicable contracts, instructions, and safeguards. Some operate outside Mexico. We may also disclose data to authorities where legally required or as part of a merger, acquisition, or business sale with appropriate safeguards.

We do not sell personal data.

10. Cookies and Similar Technologies

The website and Platform may use cookies required for sessions, security, preferences, and operation, as well as analytics or measurement cookies when enabled. Nonessential cookies will be managed through available consent options. Users may also configure their browsers, although blocking required cookies can prevent certain features from working.

11. Security

Asistian maintains reasonable administrative, technical, and physical safeguards appropriate to the nature of the information and processing risks. No system is completely secure. We therefore also use access controls, logging, monitoring, backups, and incident-response procedures and require users to protect their credentials.

12. Retention and Deletion

We retain data during the contractual relationship and as necessary to provide the Service, respond to requests, protect the Platform, and meet legal, tax, accounting, or defense obligations.

After cancellation, Customer Data may remain available for export for 30 days. It is then deleted or anonymized from active systems under operational procedures; backup copies are removed when their cycles complete. Certain receipts and records may be retained for legally required periods.

13. Individual Rights and Consent Withdrawal

Individuals may request access, correction, deletion, or objection, withdraw consent, or restrict use and disclosure of their personal data.

A request must be sent to hola@asistian.com and include the individual’s name, a method for delivering the response, a clear description of the requested right and relevant data, and proof of identity and authority where applicable. We may request reasonably necessary additional information.

We will respond within the periods required by applicable law. When Asistian acts as a Customer’s processor, we will direct the request to the appropriate controller.

14. Children

Asistian is a business service and is not directed to children. If we learn that we directly received a child’s data without the required authorization or legal basis, we will take reasonable steps to delete it. Customers that serve children must implement applicable notices, consent, and safeguards.

15. Changes to This Notice

We may update this Notice for legal, technological, or Service changes. We will publish the current version and date at asistian.com/privacy-notice. Material changes will be communicated through reasonable means, and consent will be requested where required.

16. Contact

For privacy questions or requests:

Asistian, S.A.P.I. de C.V.
Bulevar Morelos 307, second floor, Hermosillo, Sonora, Mexico
hola@asistian.com · +52 800 461 1234