Privacy Notice
Last updated: October 31, 2026
In this document
Data controller
#ENALTA, Mexican tax ID (RFC) MOGJ931021J41 ("ENALTA", "we", "us"), is responsible for processing your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations. For anything related to your data, email us at hello@enalta.cloud or message our sales WhatsApp number shown on this site.
Data we collect
#Identification and contact data you give us directly: name, email, phone or WhatsApp, company and industry, and anything you include when you contact us, request a quote, create an account or complete your service questionnaire. For invoicing, tax data: RFC, legal name, tax regime, postal code and CFDI use. Card payments are processed by Stripe; ENALTA never stores your full card number. We also collect technical and browsing data (pages visited, device, approximate location, traffic source and campaign identifiers such as gclid or UTM parameters). We do not collect sensitive personal data.
Primary purposes
#We use your data to: answer your requests and quotes; contract, deliver, configure and support the services you purchase (including websites and AI agents for WhatsApp); process payments and renewals; issue your invoices (CFDI); manage your account and call bookings; and send you notices about your service. These purposes are necessary for your relationship with us.
Secondary purposes
#With your consent, we also use browsing data to: measure the performance of the site and of our advertising campaigns (for example, which Google ad brought you and whether you purchased), show you ENALTA ads on Google services (remarketing) and send you marketing information about our services. You can opt out at any time by emailing hello@enalta.cloud or by rejecting advertising cookies in the site notice; opting out does not affect the services you purchase.
Cookies and tracking technologies
#We use strictly necessary local storage (language, theme, your cookie-notice choice and the source of your visit so we can attribute your request). We also use Google Analytics 4 and the Google Ads tag (services of Google LLC), which may set cookies such as _ga, _ga_*, _gcl_au and similar for up to 24 months to measure visits and conversions and, if you accept, for personalised advertising. We use Google Consent Mode: if you reject cookies, Google does not use advertising cookies in your browser. You can change your choice by clearing this site's data in your browser, install the Google Analytics opt-out add-on (https://tools.google.com/dlpage/gaoptout) or manage your ads at https://adssettings.google.com.
Transfers and processors
#To operate, we share data with providers that process it on our behalf under security safeguards: Supabase (database and authentication), Netlify (hosting), Stripe (payments), Facturapi (CFDI stamping with the SAT), Resend (transactional email), Google (analytics and advertising) and Meta / WhatsApp Business Platform (AI agent messaging). Some process data outside Mexico. The SAT (Mexican tax authority) also receives your tax data when we issue an invoice, as required by law. We do not sell your personal data or transfer it to third parties for their own purposes without your consent, except where the law allows.
Retention and security
#We keep your data only as long as needed for the purposes described and to meet legal obligations (for example, tax records are kept for the periods required by law). We apply reasonable administrative, technical and physical safeguards to protect your data against damage, loss, alteration or unauthorised access.
ARCO rights and withdrawal of consent
#You have the right to Access, Rectify and Cancel your data or Object to its processing (ARCO rights), and to withdraw your consent or limit the use or disclosure of your data. To exercise them, email hello@enalta.cloud with your name, a way to reply to you, a copy of your ID (or your representative's), a clear description of the data and the right you want to exercise, and any document that helps locate it. We will reply within 20 business days and, if applicable, carry it out within the following 15 business days. If you believe your rights have been violated, you may contact the competent data-protection authority.
Changes to this notice
#We may update this privacy notice due to legal changes or changes in our services or practices. The current version will always be published on this page with its update date.