Privacy Notice
1 Personal Data We Process
We may collect the following categories of personal data:
- Organizer identification and contact information: name, email address, telephone number, access credentials, and organization (if applicable).
- Billing and transaction data: legal business name (if applicable), RFC tax ID (optional for invoicing), tax address (if applicable), and payment-method references through external processors.
- Service usage: event settings, invitations, contact lists, messages and notices sent through WhatsApp or SMS, delivery status, RSVP status, and answers to questions.
- Guest data (uploaded by Organizers): name, WhatsApp or telephone number, email address (if applicable), relationship to the event, and responses.
- Technical data: IP address, device and browser type, logs, cookies, and usage analytics.
We do not intentionally request sensitive personal data. If an Organizer enters sensitive data, the Organizer is responsible for obtaining the data subjects' express consent.
2 Purposes of Processing
We will process your personal data for the following purposes:
- Primary: providing the Service; creating and managing accounts; authentication and security; operating event features; sending invitations and notices through WhatsApp and SMS; managing confirmations (RSVPs); support; billing, collections, and subscription administration.
- Secondary: product improvement, usage analytics, fraud and abuse prevention, our own promotional communications (with prior consent), and satisfaction surveys.
You may opt out of secondary purposes at any time by writing to hola@confirmalia.com .
3 Consent Basis and Organizer Responsibility
The Organizer represents and warrants that it has the guests' consent to contact them and to process their data for event-related purposes. Confirmalia acts as a data processor with respect to guest data uploaded by Organizers and as a data controller with respect to Organizer and account-holder data.
Before sending SMS messages, the Organizer must obtain the guest's prior, direct, explicit, and voluntary consent and retain reasonable evidence of that authorization. Consent is limited to invitations and communications concerning the disclosed event; it does not authorize promotional messages or communications about other events. If there is no clear authorization, the telephone number must not be used to send SMS messages.
4 Transfers and Data Processors (Service Providers)
We may share data with third parties acting as data processors to provide the Service, including hosting and cloud infrastructure, storage, email, messaging, analytics, payment gateways, and support. These third parties process data according to our instructions and with appropriate security measures.
When messages are sent through WhatsApp, SMS, or other channels, processing is also subject to the policies of those providers, which are outside Confirmalia's control. We do not guarantee delivery beyond our control.
We do not sell or share mobile telephone numbers, subscription or opt-in data, or consent to receive text messages with third parties or affiliates for marketing or promotional purposes. This data may only be processed by service providers acting on Confirmalia's behalf when strictly necessary to operate the Service and deliver the requested messages, without authorization to use it for their own purposes.
All the above categories exclude text messaging originator opt-in data and consent; this information won’t be shared with any third parties. This information also will not be shared with affiliates for marketing or promotional purposes.
We do not make transfers that require the data subject's consent except those permitted by law or necessary to provide the Service.
6 Security Measures
We implement reasonable administrative, technical, and physical measures to protect personal data against damage, loss, alteration, destruction, or unauthorized use, access, or processing. Even so, no method is completely infallible. In the event of a material incident, we will provide notice as required by applicable law.
7 Data Retention
We retain personal data for as long as necessary to fulfill the disclosed purposes and legal obligations, including tax and accounting requirements, or until you request its deletion when applicable.
8 ARCO Rights and Withdrawal of Consent
You may exercise your rights of Access, Rectification, Cancellation, or Objection (ARCO) and withdraw your consent by sending a request to hola@confirmalia.com .
The request must include the data subject's name, a means to receive our response, a copy of an identification document, a clear description of the data or rights involved, and supporting documentation. We will respond within the time frames established by Mexico's Federal Law on the Protection of Personal Data Held by Private Parties. For guest data uploaded by an Organizer, we will refer the request to that Organizer when appropriate.
For SMS messages, you may also withdraw consent at any time by replying STOP to the sending number. For help, reply HELP or write to hola@confirmalia.com.
9 Minors
The Service is not directed to minors. If we identify data concerning minors without the required consent, we will take steps to delete it.
10 Changes to This Privacy Notice
We may modify this Notice to reflect changes to the Service, internal practices, or legal requirements. We will publish the current version on this page and, when changes are material, provide notice through the Service or by email.
11 Acceptance and Terms
By using the Service, you acknowledge that you have read and understood this Privacy Notice. For more information about use of the Service, please review our Terms and Conditions.