Privacy policy
Last updated: 2026-10-07.
1. Who is responsible for your data
The controller of your personal data is CODEXMAX, a trade name registered with Ecuador's tax authority (SRI), based in Quito, Ecuador. Privacy contact: ventas@codexmax.pro. If you exercise your rights or an authority requires it, we will provide the owner's full identification details.
When CODEXMAX provides its customer service and contact management platform to other businesses (our clients), it acts as a data processor for the data of those businesses' customers, following their instructions. In that case the business is the controller, and you may send your requests to them or to us; we will work together to handle them.
2. What data we collect
- Contact form: name, email, WhatsApp or phone, business name, project type, whether you have a website, goal, estimated budget and your message.
- Messages and comments: the content of messages you send to us, or to a business that uses our platform, via WhatsApp, Instagram or Facebook Messenger, and comments on posts; your account identifiers on those channels (for example, phone number or user ID), profile name, date and time, and delivery status.
- Appointments: if you book an appointment, your name, contact details, date and time, and the reason.
- Technical data: IP address, browser type and site usage data through cookies and pixels.
3. How we use it
- To answer your inquiries, prepare quotes and deliver the services you hire.
- To serve customers through messaging, keep a record of the conversation and follow up.
- To book, reschedule or cancel appointments.
- To improve the quality and security of the service and prevent fraud or abuse.
- To comply with legal and tax obligations.
We do not sell your personal data.
4. Legal basis
We process your data based on your consent, the performance of a pre-contractual or contractual relationship (such as a quote or a service), our legitimate interest in handling your request and protecting the service, and compliance with legal obligations, under Ecuador's Organic Law on Personal Data Protection (LOPDP).
5. Use of artificial intelligence
Some replies on messaging channels may be generated by an artificial intelligence assistant. You can ask to talk to a person at any time. The assistant answers using the business's information and hands the conversation to a person for sensitive topics, complaints or whenever you ask. We do not make decisions with legal effects on you based solely on automated processing.
To generate those replies, the necessary conversation text is sent to our language model provider (Anthropic), which, under its commercial terms, does not use that content to train its models.
6. Who we share data with
Only with providers needed to deliver the service, under confidentiality and security obligations:
- Meta Platforms (WhatsApp, Instagram and Facebook), which carries the messages and is governed by its own privacy policy.
- Hosting and infrastructure providers (servers, database, email).
- Our artificial intelligence provider (Anthropic).
- Google (Google Calendar), only when appointments are booked.
- Authorities, when required by law.
Some of these providers are located outside Ecuador. These international transfers are made with appropriate safeguards under the LOPDP.
7. Cookies and analytics
This site uses the Meta pixel (Facebook and Instagram), which uses cookies to measure visits, clicks on contact buttons and ad results, and to show relevant advertising. Meta processes that data under its own privacy policy. You can block these cookies in your browser or manage your ad preferences in your Facebook or Instagram account. If we enable other analytics tools (such as Google Analytics), we will update this policy.
8. How long we keep it
We keep data as long as needed to handle your request and, if you become a client, for the duration of the business relationship and as required by law. Messaging conversations are kept by default for up to 24 months after the last interaction, unless you ask for earlier deletion or the responsible business sets a different period. After that, they are deleted or anonymized.
9. Your rights
You can exercise your rights of access, rectification, deletion, objection, portability and restriction of processing, the right not to be subject to decisions based solely on automated processing, and the right to withdraw your consent at any time. Write to ventas@codexmax.pro or follow the steps on our data deletion page. If you believe we did not respect your rights, you may contact Ecuador's Superintendency for Personal Data Protection.
10. Security
We apply reasonable technical and organizational measures: encrypted connections (HTTPS), encrypted access credentials, separation of each business's data, role-based access control and backups. If a breach affecting you occurs, we will act and notify as required by law.
11. Minors
Our services are not directed at people under 18, and we do not knowingly collect their data.
12. Changes to this policy
We may update this policy to reflect changes in our services or applicable law. The date of the last update appears at the top. See also our terms and conditions.