Comprehensive Privacy Notice

waseller.mx — Last updated: May 23, 2026 · Version 1.0

In compliance with articles 15, 16 and 17 of the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP, Mexico) and its reform in force since March 2025, the following Privacy Notice is made available to the Data Subject.

1. Identity and address of the data controller

• Data controller: JAVIER ISMAEL NABTE AKE, individual under the Simplified Trust Regime (RESICO)
• Commercial brand: waseller.mx
• Address: Mérida, Yucatán, Mexico, ZIP 97314
• Tax ID (RFC): NAAJ970805KB6
• Privacy officer email: hi@waseller.mx

2. Personal data we collect

To provide the Service, waseller collects the following data:

Identification data:

• Full name
• Email address
• Mobile phone number (including the WhatsApp number you connect)
• Business name and Tax ID (if you contract as a legal entity)

Billing data:

• Tax address
• Payment method (processed by Stripe; waseller does NOT store the full card number)

Service usage data:

• Conversations, messages and media you send/receive through WhatsApp connected to waseller
• Contacts synced from your WhatsApp Business
• Activity logs, IP address, browser, operating system
• Bot configurations, templates, workflows

3. Sensitive personal data

waseller does not intentionally collect sensitive data (racial origin, health status, genetic information, religious beliefs, political or union affiliation, sexual preference). If the User, their agents or their contacts transmit sensitive data through WhatsApp conversations, such data will be treated with strict confidentiality and retained only for the period necessary to provide the Service.

4. Purposes of processing

Primary purposes (necessary for the Service — no additional consent required):

• Create, authenticate and manage the User's account
• Provision and maintain the contracted WhatsApp numbers
• Process payments and issue invoices/CFDI
• Store and display the User's conversations in their dashboard
• Operate the CRM, the bot builder and the n8n integrations
• Handle support requests
• Comply with legal obligations (tax, regulatory)

Secondary purposes (require express consent — you may object without affecting the Service):

• Sending promotional communications about new plans, discounts and waseller events
• Satisfaction surveys and product improvement
• Aggregated, anonymized statistics for market research

If you do NOT want your data processed for secondary purposes, send an email to hi@waseller.mxwith the subject "Objection to secondary purposes".

5. Data transfers

To provide the Service, waseller transfers data to the following third parties, all subject to their own privacy policies:

Some of these transfers involve sending data to the United States of America or other countries. By accepting this Notice, you grant express consent to such transfers, which are carried out under adequate contractual and technical safeguards.

You may object to non-essential transfers by emailing hi@waseller.mx. Some transfers (Stripe, WasenderApi, Supabase) are indispensable to provide the Service; objecting to them entails cancelling the subscription.

6. Mechanisms to exercise ARCO rights

Pursuant to articles 22 to 36 of the LFPDPPP, the Data Subject has the right to:

• Access: know what data we hold about you and how we use it
• Rectification: correct inaccurate or incomplete data
• Cancellation: request the deletion of your data
• Objection: object to specific processing

Procedure:

1. Send a request to hi@waseller.mx with the subject "ARCO Request"
2. Attach: full name, registered email, valid official ID, and a clear, precise description of the right you are exercising
3. waseller will respond within a maximum of 20 (twenty) business days from receipt of the complete request
4. Effectiveness will occur within the 15 (fifteen) business days following a favorable response

Exercising ARCO rights is free; only justified shipping or reproduction costs will be charged if the Data Subject requests copies in physical format.

If the response is unsatisfactory, the Data Subject may turn to INAI (Mexico's National Institute for Transparency, Access to Information and Personal Data Protection) — www.inai.org.mx.

7. Use of cookies, web beacons and similar technologies

waseller.mx uses first- and third-party cookies to:

• Maintain authenticated sessions (strictly necessary)
• Analyze dashboard usage (Google Analytics or equivalent — optional)
• Remember User preferences

Non-essential cookies can be disabled from your browser or from the consent banner. Some features may not work correctly without essential cookies.

8. Procedure to communicate changes to this notice

Any modification to this Notice will be communicated via:

• Email to the registered address
• Prominent notice in the dashboard
• Publication on waseller.mx/legal with the update date

Continued use of the Service after the modifications take effect constitutes acceptance. If you disagree, you may cancel the subscription and exercise ARCO rights over your data.

9. Data retention

Data is retained throughout the contractual relationship and for a subsequent period of up to 5 (five) years for tax and legal compliance purposes, unless applicable law requires a longer term.

After account termination, non-essential data may be deleted within up to 90 (ninety) calendar days, keeping only what is legally required.

10. Penalties for misuse of data by the User

A User who uses waseller to process personal data of third parties (their own customers, WhatsApp contacts, etc.) acts as an independent Data Controller or Data Processorwith respect to such data, and must comply with the LFPDPPP on their own. waseller acts as Processor of the User's data, not of the data of the User's end contacts.

The User acknowledges that breaches of the LFPDPPP may result in penalties of up to 320,000 days of minimum wage (Art. 64 LFPDPPP) and, where applicable, criminal liability.

Contact: For any questions or to exercise your rights, write to us at hi@waseller.mx