Privacy notice
Aviso de privacidad. This page is an outline. It cannot be finished until the legal entity exists, and it must be drafted by counsel.
Not in force
What follows records what the notice has to contain and what this site actually collects. The binding wording must be drafted by counsel against the named entity. Neither the contact form nor any account sign-up should be published while this is still true.
The responsible party
An aviso de privacidad names a responsable and a domicilio. The responsable is named here; the domicilio is not, and the gap is described below rather than glossed over.
- Responsable: Eduardo Damian Saucedo Montemayor, persona física con actividad empresarial
- RFC: SAME991214TD0
- Contact for privacy requests: contact@kinetiro.com
The domicilio is missing, and that is a real gap
An aviso de privacidad is required to state both a responsable and a domicilio. The responsable is named above. The domicilio is not published, by the founder's instruction, so this notice does not yet meet that requirement.
That is a decision he has taken and is carrying, not something the build is waiting on — and it is written here rather than left to be noticed, because a privacy notice that quietly omits a required field is the wrong kind of quiet.
What the notice must contain
The formal content requirements under the Mexican federal data protection law:
- The identity and address of the responsible party.
- The personal data collected, by category.
- The purposes of the processing, separated into those necessary for the relationship and those that are not.
- Transfers to third parties, and to whom.
- The means of exercising the rights of access, rectification, cancellation and objection, and the channel for doing so.
- How changes to the notice will be communicated.
What this site actually collects
- Correspondence received
-
This site has no contact form. Enquiries arrive as email to
contact@kinetiro.comorsales@kinetiro.com. What is held is whatever the sender chose to include in the message and, where an incorrect result is being reported, frequently a project file describing a plant. That last case warrants explicit naming in the drafted notice rather than inclusion under "free text", because a project file may belong to the sender's client rather than to the sender. - Retention: correspondence relating to a closed account is kept for 30 days after closure. The mailboxes are Google Workspace aliases, so the drafted notice has to name that as the processor and say where the mail is held.
- KinetiRO Sim accounts, which are now required to use the product at all
- This is the substantive change since the previous draft. Previously an account was optional; now the account is the product's front door. The notice has to be clear about what is collected at sign-up, what the beta's complimentary licence record is, and how long an account and its licence history are kept after it lapses.
- What is stored where
- Today: projects in the user's own browser, private keys in the user's own browser, and account and licence records on the server. This section changes the day server-side project storage ships, and it changes together with the storage section of the product page and clause 6 of the licence.
-
Ordinary correspondence to
contact@kinetiro.comandsales@kinetiro.com, and how long it is kept. If the domain mailbox forwards through a third party, the notice has to say so.
No analytics, and therefore no consent banner
This can be said plainly, and should be. There are no analytics, no cookies set for measurement, and no third-party embeds. So there is no consent banner and there is nothing to opt out of.
The web server keeps ordinary request logs, and they are kept for 90 days.
The Spanish edition of this page
This notice must exist in Spanish from the day the site goes live, independently of the rest of the site's language plan. The data subjects are largely in Mexico, and the required content is a legal matter rather than a translation. It is the one page where that is not a preference.