Privacy notice · Renvias

1. Data controller

CAMBIAR_RAZON_SOCIAL, located at CAMBIAR_DOMICILIO_FISCAL, is responsible for the personal data collected through Renvias, a platform that receives, stores and forwards the webhooks of your platforms (WhatsApp, Messenger, Instagram, Telegram, Mercado Libre, Openpay and others). This notice is issued under the Mexican Federal Law on the Protection of Personal Data Held by Private Parties.

2. Data we collect

Account data: first and last name, email, phone, company, country, time zone and profile picture.
Configuration data: the identifiers you register (for example phone_number_id, page or account id), their platform and the addresses (webhooks) you want to forward to.
Received content: the json and headers platforms send to Renvias for your identifiers, with their forwarding status and number of attempts. This content may include data about your own customers; you are responsible for holding it lawfully.
Billing data: amount and status of your top-ups. Payments are processed by Stripe; Renvias does not store your card details.
Technical data: IP address, browser, access date and an activity log within the platform.

3. How we use your data

Required purposes: create and manage your account and workspaces; receive and store what platforms send for your identifiers; forward it to your webhooks and retry when it fails; show you what was received and its statistics; give access to your team; process credit top-ups; send service notices; provide support; and keep the platform secure.
We do not use your data or the received content for any other purpose and we do not sell it.

4. Who we share your data with

The addresses (webhooks) you configure receive your identifiers' content on your instruction.
Stripe, to process top-up payments.
Infrastructure, storage and email providers that help us run the service and are bound to protect your information.
Competent authorities, when required by law.

5. Your rights

You may access, rectify, cancel or object to the processing of your data, and withdraw your consent, by writing to [email protected] with your name, your account email and your request. We will reply within 20 business days.

6. Data deletion

You can delete your account from System > Profile > Delete account, or request it by writing to [email protected]. When deleted, your identifiers and forwarding urls are removed, access is revoked and your data is erased or anonymized within 30 days, except data we must keep by law.

7. Retention

We keep your data while your account is active and for as long as needed to meet legal, tax or security obligations. Received content is kept so it can be forwarded, retried and shown in your history and statistics.

8. Security

We use encrypted connections (HTTPS), passwords are stored hashed, API keys are stored as hashes and access to each workspace and its content is limited to its members.

9. Cookies

We only use our own cookies to keep your session and remember your language and theme (light or dark). We do not use advertising cookies.

10. Changes to this notice

Any change to this notice will be published on this page with its update date. If you have questions, write to [email protected].