Privacy notice

Who is responsible for your data

SellPointy, S.A. de C.V. [[⚠️ PROVISIONAL — cambiar]] (“SellPointy”, “we”), located at [[address]], is responsible for processing your personal data. For any privacy matter, write to [[privacy email]].

What we collect

If you write to us from the website: your name, email, country, the plan you are interested in and, if you provide them, your type of business and your message. If you create an account: your name, email and password (stored encrypted; we cannot read it), your business details, and what you enter while using SellPointy: products, sales, purchases, stock, suppliers and your own customers' details. What we do NOT collect: we use no advertising or tracking cookies. To learn whether the website works we count events — a click, a form sent — without storing your IP address, your browser or anything that identifies you. We collect no sensitive personal data through the website.

What we use it for

Necessary purposes: answering your request; creating and running your account; billing and recording your payments; supporting you; telling you about changes to the service or to these documents; and meeting legal obligations. Optional purpose: writing to you about SellPointy news. We only do so if you agreed, and you can refuse or change your mind at any time by writing to [[privacy email]] or using the unsubscribe link in each email. Refusing does not affect the service.

Who we share it with

We do not sell or rent your data. Your information is stored on servers located in Mexico City. To provide the service we rely on providers that process it on our behalf and under a duty of confidentiality: server hosting (Vultr, in Mexico), daily backups (Cloudflare), email delivery (Resend) and application error monitoring (Sentry). The last three operate outside Mexico, mainly in the United States; by using SellPointy you consent to that transfer, which is necessary for the service to work and for your information to be backed up. We may also disclose data when a competent authority lawfully requires it.

The shared product catalog

SellPointy maintains a common catalog of barcodes with the product name — the one printed on the package — so any business can add a product just by scanning it. When you type the name of a product whose barcode is not yet in that catalog, that name and its barcode may be added to it and suggested to other businesses. That is all that is shared. Never part of the catalog, and never shared: your prices, costs, sales, stock, suppliers, customers, or anything that identifies your business. The catalog does not say who contributed each name.

Your rights

You may access your data, correct it, delete it or object to its use, and withdraw your consent. Write to [[privacy email]] with your name, your account email and what you need. We reply within 20 business days, and where the request applies we carry it out within the following 15 business days. If you feel we did not handle it properly, you may contact the data protection authority in your country.

How long we keep it

Your account data, for as long as you have the account and for as long afterwards as tax law requires. If you wrote to us and never created an account, 24 months, after which it is deleted automatically.

If you live in Canada

In addition: we only send you commercial messages if you gave your express consent, and we keep a record of when and what you agreed to; every email includes a way to unsubscribe, which we honor within 10 business days. The person responsible for the protection of personal information is [[name]], [[privacy email]]. Your data may be processed outside Canada and outside your province.

Minors

SellPointy is for businesses. It is not directed at anyone under 18, and we do not knowingly collect their data.

Changes

If we change this notice we publish the new version here with its date. If the change is significant, we tell you by email before it takes effect.