Privacy Notice

In compliance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and the Privacy Notice Guidelines, we make this Privacy Notice available to you.

1. Data controller

Telos Group (hereinafter, "Telos") is responsible for the use, protection and processing of your personal data collected through this site (telosgroup.com.mx) and the services known as Telos Receptionist and other products of the Telos ecosystem.

For any matter related to this Privacy Notice, the designated contact is: [email protected].

2. Personal data we collect

We may collect the following categories of personal data:

• Identification and contact data: name, email address, phone or WhatsApp number, business or clinic name.
• Conversation data: text messages, audio, images and files sent through WhatsApp in interactions with Telos Receptionist when it operates on behalf of one of our clients.
• Appointment data: requested service, date and time, patient or appointment recipient.
• Technical data: IP address and usage data automatically collected when visiting this site (strictly necessary cookies for its operation).
• Payment data: payments are processed through Stripe. Telos does not store your full card details; Stripe acts as the payment processor under its own policies.

We do not directly collect sensitive personal data. In operating Telos Receptionist, health-related data may be shared at the patient's own initiative when describing symptoms; such data is stored only to the extent necessary to provide the service to the client operating the bot, in accordance with that client's own privacy notice.

7-day trial data

If you start the 7-day trial, we also keep:

• Evidence of your consent to the charge: the date and time you accepted, the version of the text you accepted and your user account.
• Fingerprints of your email, of your business and, only when Stripe provides us with that data, of your card. A fingerprint is a one-way encrypted code: it lets us recognize whether a piece of data has already been used, but it does not allow the data to be recovered. We do not see or store your card number.

What for: to offer only one trial per person, per business and per card, and to be able to show that you agreed to the charge.

How long: the evidence of your consent and your payment records, 5 years; the fingerprints, 2 years after you close your account.

During the trial we send you transactional emails about it, such as the first-day confirmation with the date and amount of the first charge. Payment data is processed by Stripe.

Data from prospects who come through a Meta form

If you fill out the form in a Telos ad on Facebook or Instagram, Meta gives us what you wrote in it:

• Your business name and its line of business.
• Your WhatsApp number.
• Your answer to the consent checkbox and the date you submitted the form.

What for: to contact you on WhatsApp, when you authorize it in a Meta form, to send you a demo and follow up on your interest.

Legal basis: your express consent. The form includes the checkbox «I agree that Telos may message me on WhatsApp to send me my demo. I can ask them to stop at any time.», which comes unchecked and is required: if you don't check it, the form isn't submitted and we don't message you.

How long: if you don't sign up for Telos, 12 months from the date you submitted the form; after that we delete it. If you sign up, it becomes part of your account data and is governed by the rest of this notice.

How to withdraw your consent: write BAJA in the WhatsApp chat where we contacted you, or email [email protected], and we stop messaging you. If you also want us to delete your data before that period ends, ask at the same address (section 6).

3. Sign in with Google

If you choose to sign in with your Google Account, Telos receives only the information associated with the permissions we request: your name, email address, and profile picture.

We use this information solely to create or identify your Telos account, sign you in, and keep your account correctly associated with your Google Account. We do not access your Gmail, contacts, Google Calendar, Google Drive files, or any other Google Account data beyond the information described above.

We do not sell this data or use it for advertising, advertising profiling, or training artificial intelligence models.

To provide the service, we use Supabase as a data processor and provider of authentication and user-database infrastructure, where your email address, name, and profile picture may be stored.

We retain this information while your Telos account remains active or for as long as necessary to provide the service and comply with applicable legal obligations. If you request deletion of your account, we will delete or anonymize the information as appropriate, except where retention is required by law. You may request deletion by contacting [email protected].

You may revoke Telos's access to your Google Account through your Google Account permissions settings. Revoking access does not by itself replace a request to delete information that Telos must retain or delete in accordance with this Privacy Notice.

Telos's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

4. Purposes of processing

Primary purposes (necessary for the service):

• Handle requests for information or commercial contact.
• Contact you on WhatsApp, when you authorize it in a Meta form, to send you a demo and follow up on your interest.
• Operate the Telos Receptionist service on behalf of our clients (clinics, practices, appointment-based businesses).
• Schedule, reschedule, cancel and remind appointments via WhatsApp.
• Maintain technical traceability of conversations for debugging, service improvement and security.
• Billing, collection and administration of the contractual relationship.
• Offering the 7-day trial only once per person, business and card, and keeping the evidence of your consent to the charge.
• Comply with legal and tax obligations in Mexico.

Secondary purposes (optional):

• Sending communications about new products in the Telos ecosystem.
• Aggregate and anonymized statistical analysis to improve the service.

If you do not wish your data to be processed for the secondary purposes, you may state so by emailing [email protected]. Your refusal will not be grounds for denying you the service.

5. Data transfers

Your data may be transferred to the following third parties, all under confidentiality clauses. They are grouped by the role each one plays:

Processors of conversation data

They process the content of your messages on behalf of and under instructions from Telos:

• Supabase, Inc.: the database where conversations and service data are stored.
• Cloudflare, Inc.: hosting for the dashboard from which the business reviews and manages its conversations and, through Cloudflare Workers AI, transcription of voice notes: the audio is processed only to turn it into text so we can reply, and Telos does not keep the audio; the transcribed text stays in the conversation.
• Hostinger International Ltd.: the virtual server where the engine that answers messages runs.
• Anthropic, PBC (Claude API): processes message content to generate the assistant's responses, including images you send, to understand what they show (Telos does not keep the image; a description stays in the conversation). Anthropic does not use your information to train its artificial intelligence models.

Email delivery processor

• Resend, Inc.: delivers the service's emails (notices to the business, access invitations, receipts and 7-day trial emails). It receives the recipient's email address and the content of each notice.

Processor of payment data

• Stripe, Inc.: payment processing. Telos does not store your full card details.

Where the data comes from

• Meta Platforms, Inc. and official WhatsApp Business API providers. Not a processor for Telos: it is the channel through which messages arrive and leave, and it handles your data under its own policies.
• Meta Platforms, Inc., when you fill out the form in a Telos ad on Facebook or Instagram: it gives us your business name, its line of business, your WhatsApp number and your answer to the consent checkbox. Not a processor for Telos either: the form is Meta's, and it handles that data under its own policies.

Competent authorities: your data may be transferred where there is a well-founded and substantiated request. This is neither a processing arrangement nor an origin: it is a transfer required by law.

On the use of artificial intelligence: Telos does not train artificial intelligence models with your information. Your data is processed solely to operate the service (responding to messages, scheduling appointments and managing billing).

We do not sell, rent or share your personal data with advertisers or with third parties for marketing purposes.

6. ARCO rights

You have the right to access, rectify, cancel or object to the processing of your personal data, as well as to revoke any consent you may have granted us.

To exercise these rights, send a request to [email protected] with the following information:

• Full name and a means to receive a reply.
• A document proving your identity or representation.
• A clear description of the data over which you exercise the right.
• Any element or document that helps locate the data.

We will respond within a maximum of 20 business days. If your request is well-founded, we will make it effective within the following 15 business days.

7. Cookies

This site uses only strictly necessary cookies for its operation (to maintain your session and basic preferences). We do not use advertising or third-party tracking cookies.

8. Security

We implement reasonable technical, administrative and physical measures to protect your personal data against unauthorized access, loss or alteration. Connections to this site and to Telos services are encrypted using TLS.

9. Changes to this Privacy Notice

We reserve the right to update this Privacy Notice when necessary. The current version will always be available at telosgroup.com.mx/en/privacy.html, with the last-updated date clearly visible.

10. Competent authority

If you believe your rights were not properly addressed, you may file a complaint with the Ministry of Anti-Corruption and Good Governance (SABG) at www.gob.mx/buengobierno.

11. Legal identity of the controller

Telos Group is the commercial name under which the controller of personal data operates in accordance with the LFPDPPP. The full legal identity of the controller, tax ID (RFC) and tax regime are provided upon formal written request to [email protected], in compliance with article 16 of the LFPDPPP.

Back to home