Privacy Notice

• Name: BITXY TECHNOLOGIES S.A.S
• Platform: BitxyOS (app.bitxyos.com)
• Country of operation: México
• Privacy email: contact@bitxyos.com

BITXY TECHNOLOGIES S.A.S acts as the data controller for the personal data of its users (account holders). Regarding data of our users' clients stored in the CRM, the business user acts as independent controller and BITXY TECHNOLOGIES S.A.S as data processor.

We collect and process the following types of personal data:

Sensitive data

Bitxy OS does not request or require sensitive personal data (health, religion, political opinions, etc.) from its users. If by the nature of your business you store sensitive data of your clients in the CRM, you are responsible for obtaining express consent and processing it in accordance with applicable regulations.

Primary purposes (required for the service)

• Create and manage your user account on the platform.
• Provide, operate and improve Bitxy OS modules (CRM, Marketing, Media Lab, Team Work, AI Agents).
• Process payments, issue invoices and manage subscriptions.
• Provide technical support and handle requests.
• Ensure platform security and prevent fraud.
• Comply with legal and regulatory obligations.

Secondary purposes (optional)

• Send marketing communications about new features, plans and Bitxy OS updates. You can unsubscribe at any time via the link in each email.
• Conduct satisfaction surveys and usage analysis to improve the product.
• Invite you to beta programs for new features.

If you do not want your data to be used for secondary purposes, you can notify us at any time by writing to contact@bitxyos.com.

AI providers that process data

• OpenAI (ChatGPT / GPT-4): Receives prompts and context needed to generate copies, lead analysis, bot responses and recommendations. OpenAI has its own privacy policy. For API accounts (such as Bitxy OS), OpenAI does not use data for model training by default.
• FAL.ai: Receives briefs and prompts for image and video generation in the Media Lab module. FAL.ai processes these requests on its servers. Outputs (images/videos) are stored in your account library in Bitxy OS.

Data minimization

Bitxy OS sends to AI models only the information necessary to complete the requested task. We do not send personally identifiable data of your clients to AI models, unless you expressly include it in your prompt.

BitxyOS does not sell personal data to third parties. It may share it only in the following cases:

• Service providers: Companies that help us operate the platform (hosting, databases, payment processors, email services) under confidentiality and data protection agreements.
• AI providers: As described in Section 4, for processing artificial intelligence features.
• Legal obligation: When required by competent authorities in accordance with the law.
• Rights protection: To protect the rights, property or safety of Bitxy OS, its users or third parties.
• Merger or acquisition: If Bitxy OS is acquired or merged, data may be transferred to the new owner, who must respect this Privacy Notice or notify you of changes.

International data transfers (e.g., to OpenAI or FAL.ai servers in the US) are carried out under legally accepted transfer mechanisms.

The contacts, leads and customer data you store in Bitxy OS CRM belong exclusively to you. Bitxy OS acts as data processor of this data, processing it solely to provide you the service.

Your responsibilities as controller of your customers' data

• Have valid legal bases (consent, contractual relationship, etc.) to store and process your customers' data.
• Inform your customers that their data may be managed through SaaS platforms like Bitxy OS.
• Handle ARCO rights requests that your own customers submit to you regarding their data.
• Not store in the CRM data you have no legal right to process.

When your relationship with Bitxy OS ends, you will have 30 days to export all your customers' data. After that period, the data is deleted from the servers.

Bitxy OS implements technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure:

• Encryption in transit: All communications between your browser and our servers use TLS/SSL (HTTPS).
• Encryption at rest: Sensitive data (passwords, access tokens) is stored with robust encryption.
• Daily backups: Automatic backups are performed to ensure data availability and integrity.
• Access control: Access to data is limited to employees with a justified need, via multi-factor authentication.
• Monitoring: Intrusion detection systems and real-time monitoring of suspicious activity.
• Periodic audits: Security reviews to identify and fix vulnerabilities.

In the event of a security breach affecting your data, Bitxy OS will notify you within 72 hours of discovery, in accordance with applicable regulations.

We retain personal data only for as long as necessary to fulfil the purposes described in this Notice:

• Active account data: While the account is active and for an additional 30-day period after cancellation.
• Billing data: 5 years in accordance with applicable tax and accounting requirements.
• Security logs: 90 days for fraud and incident detection.
• CRM customer data: Deleted within 30 days of cancellation or express request.
• AI-generated content: Stored in your library until you delete it or up to 30 days after account cancellation.

Deletion upon request

You may request full deletion of your data by emailing contact@bitxyos.com. The process is completed within a maximum of 15 business days. Only data that the law requires us to keep will be retained.

Under the LFPDPPP, you have the right to Access, Rectify, Cancel and Object to the processing of your personal data (ARCO rights):

Right to portability

You have the right to export all your data in a standard format (CSV, JSON) from your account admin panel at any time.

How to exercise your rights

Send your request to contact@bitxyos.com indicating: full name, contact details, a clear description of the right you wish to exercise and identity documentation if required. We will respond within a maximum of 20 business days in accordance with the LFPDPPP.

Bitxy OS uses cookies and similar technologies to improve your experience:

• Essential cookies: Required for basic platform functionality (session, authentication). Cannot be disabled.
• Analytics cookies: Help us understand how the platform is used (pages visited, session time). Can be disabled.
• Third-party cookies: Google reCAPTCHA uses cookies to verify you are not a bot on forms.

You can manage cookie preferences from your browser settings. Note that disabling essential cookies may affect platform functionality.

Bitxy OS may update this Privacy Notice to reflect changes in the platform, applicable legislation or our practices. Material changes will be notified by email and/or via a prominent notice on the platform at least 15 days in advance.

We recommend reviewing this Notice periodically. The "Last updated" date at the top indicates when it was last revised.

For any query, exercise of rights or complaint related to the processing of your personal data:

• Email: contact@bitxyos.com
• Privacy Officer: Legal Team, BITXY TECHNOLOGIES S.A.S
• Response time: Maximum 20 business days for ARCO requests