Privacy Notice

Last updated: 2026-08-03

ABAKU ("we"), reachable at hola@abaku.mx, is responsible for the personal data collected through abaku.mx, the ABAKU ecosystem (SMS, LMS, Plugins and Academy) and our customer-service channels. This notice explains what we collect, why, and the rights you hold, under the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and any other applicable rules.

ABAKU is responsible for the personal data described in this notice. For anything related to your data, including exercising your rights, write to hola@abaku.mx.

This notice covers abaku.mx and its subdomains, the ABAKU ecosystem products, and our service channels (web chat, WhatsApp, email and voice calls).

Identification and contact data: name, email address, phone/WhatsApp number, institution and role, when you provide them in forms or conversations.

Conversation content: messages you exchange with us on the website chat, WhatsApp, email and voice calls — including automatic transcripts of voice calls and files you send us.

Technical data: IP address, approximate location derived from it, browser and device type, pages visited, and identifiers stored in your browser (see Cookies). We store a hash of your IP address, not the address itself, for our own visit statistics.

Billing data of institutional customers, when contracting our services.

We do not ask you for sensitive personal data through these channels. Please do not send us health, ideological, financial or biometric information through the chat.

Our sales and support channels are operated by automated systems based on artificial intelligence, supervised by our team. This notice constitutes the declaration of that use: by chatting, writing or calling through our channels you interact with an automated system. Given this declaration, the system is not required to announce it at every single interaction. For contracted services, the use of AI is additionally declared in the privacy agreement accompanying each contract.

You may request human attention at any time, simply by asking for it in the conversation or writing to hola@abaku.mx. We do not condition service on accepting automated attention.

No decision producing legal effects on you or significantly affecting you is taken automatically. Quotes, contracts, cancellations, refunds and any decision on your account are reviewed and approved by a person.

Conversations are stored and may be reviewed by our team to supervise quality, adjust the assistants and resolve your case.

The assistants keep a "memory" of relevant facts you share (e.g., your name, preferences, pending matters) to give you continuity across channels and sessions. You may ask us to delete that memory.

Voice calls are processed in real time by an AI provider and transcribed; the transcript is stored with your conversation history. Calls are not answered by default: they happen only when you accept or schedule one. If a call is recorded or transcribed, you are told at the start of the session.

Product features that use AI (for example, summaries or suggestions inside the platform) are described in the corresponding product and always leave the final decision to a person.

Primary purposes: answering questions, providing support and follow-up, quoting and selling our services, scheduling calls or demos, keeping conversation continuity, invoicing, and complying with legal obligations.

Secondary purposes, which you may object to without affecting your service: service-quality analysis, product improvement, aggregated statistics, and sending you news about ABAKU. Every marketing email includes a one-click unsubscribe link.

To object to secondary purposes, write to hola@abaku.mx stating so; no justification is needed.

AI providers (e.g., OpenAI, Anthropic, Google or equivalent): receive conversation content to generate the assistant's responses, and call audio to converse and transcribe. They act as processors under contract; we do not authorize them to use your data to train their own models or for their own purposes.

Meta Platforms (WhatsApp Business API): message delivery when you write to us on WhatsApp, subject to WhatsApp's own terms.

Hosting, email and payment-processing infrastructure providers, for storage, delivery and collection.

Some of these providers are located outside Mexico, so your data may be processed abroad under contractual terms requiring protection equivalent to this notice.

We do not sell or rent your personal data. No transfers requiring your consent are made without obtaining it.

When an educational institution uses the ABAKU platform, data of its students and staff is processed on behalf and under the instructions of the institution, which remains the data controller. This notice covers data collected directly by ABAKU.

ABAKU does not decide what data an institution requests from its students, nor for how long it keeps it: that is defined by the institution in its own privacy notice.

Data of minors is processed only within that relationship and under the responsibility of the institution and of whoever holds parental authority or guardianship. We do not knowingly collect data of minors directly through our commercial channels.

We use our own cookies/local storage to: remember your language and theme, keep your chat-conversation token so the assistant recognizes you when you return, and measure visits with a hashed identifier. We do not use advertising or third-party tracking cookies.

You can clear them from your browser at any time; the site keeps working and the chat will simply forget the local session.

Sensitive credentials are stored encrypted; access to conversations is restricted to authorized personnel and traceable.

Retention: conversations and their transcripts are kept while the relationship or the case is open and up to 24 months afterwards; billing data is kept for the period tax law requires; visit statistics are kept in aggregated or pseudonymized form. After that, data is deleted or anonymized.

No system is infallible. If a security breach materially affecting your data occurs, we will notify you without undue delay.

You may access, rectify, cancel or object (ARCO), limit the use of your data, or revoke your consent by writing to hola@abaku.mx with your name, the right you wish to exercise, the channel where you interacted with us and a means of contact. We may ask you to prove your identity.

We will respond within 20 business days and, where appropriate, make it effective within the following 15 days. Exercising these rights is free of charge.

If your data lives inside an institution's platform, we will forward your request to that institution, which is the controller.

If you believe your rights have been violated, you may contact the INAI (www.inai.org.mx) or the authority that replaces it.

We may update this notice; the current version will always be available at abaku.mx/privacy with its update date. Substantial changes will be announced on the site and, where we have your address, by email.

ABAKU · hola@abaku.mx · abaku.mx