Privacy notice

1. Who is responsible for your data

DaCodes, based in Mérida, Yucatán, México, is the data controller (responsable) of the personal data collected through this site. For anything related to this notice write to hola@dacodes.com.

2. Personal data we collect

We collect only what we need to answer you and to run the site:

• Identification and contact data you type into a form: full name, company, phone or WhatsApp number and email, plus the contact consent the form asks for (calls, SMS or WhatsApp).
• The message you write, for example the process you want to automate. On some pages it opens with a line about where you are (the agent, the event, the playbook or the calculator figures), which you can edit before sending. Please do not include sensitive personal data (health, beliefs, biometrics) or data about third parties in that field.
• Event registration data: the fields above plus the event you register for.
• Navigation and device data, only with your consent: pages visited, clicks and scrolling, approximate location, IP address, device and browser, and the company your network belongs to, collected by the tools listed in section 4 after you accept analytics in the cookie banner. If you also send a form, HubSpot links those visits to your contact record.
• Recruiting data, if you apply to a position: your application is processed by Workable under its own notice, shown before you apply.

We do not collect financial data on this site and we never ask for passwords or government identifiers.

3. What we use it for

Primary purposes, needed for the relationship you start with us:

• Answer your request and schedule the Discovery Express, technical call, partnership or press conversation you asked for.
• Register you for an event, confirm your seat and send the logistics.
• Send you the Discover report, proposals and follow-up on your request.
• Manage the commercial and contractual relationship if you become a client, including invoicing and support.
• Comply with legal obligations and answer requests from competent authorities.

Secondary purposes, which you can refuse at any time:

• Send you content, event invitations and news about AI Agents by DaCodes.
• Measure how the site is used in order to improve it, learn which companies visit it and measure DaCodes' advertising campaigns (analytics and marketing), only if you accept them in the cookie banner.

If you do not want your data used for secondary purposes, write to hola@dacodes.com with the subject "No secondary purposes" or use the unsubscribe link in any email. Refusing secondary purposes does not affect the service you asked for.

4. Transfers and service providers

We do not sell or rent personal data. We share it only with providers that process it on our behalf, under contract, and only for the purposes above:

• Vercel: hosting of this site. Requests are processed in the United States.
• Amazon Web Services (AWS): hosting and infrastructure. Data may be stored in AWS regions in the United States.
• HubSpot: the forms on this site are DaCodes' HubSpot forms, the same ones dacodes.com uses. HubSpot processes what you send as DaCodes' processor and keeps it in DaCodes' CRM, which DaCodes also uses for email and meeting scheduling. The forms load Google reCAPTCHA to stop spam, and their font from Google Fonts. Servers in the United States and the European Union.
• Workable: applicant tracking for the careers section.

Only after you click "Accept analytics" in the cookie banner, this site also loads the analytics and marketing tools DaCodes uses on dacodes.com:

• Google Tag Manager: the container that loads the tags DaCodes manages for dacodes.com. In October 2026 they include Google Analytics 4, Google Ads, the LinkedIn Insight Tag, the Meta Pixel and ClickCease (click fraud detection).
• Google Analytics 4: site analytics.
• Microsoft Clarity: heatmaps and recordings of how pages are used (clicks, scrolling, pointer movement).
• Leadfeeder and Apollo: identify the company a visit comes from, by its IP address, for DaCodes' sales team.
• HubSpot tracking code: records visits and links them to your contact record if you send a form. It also loads the ad pixels DaCodes connects in HubSpot, such as Meta's.

Some of these providers are outside México, so your data may be transferred internationally. We only work with providers that commit to a level of protection equivalent to this notice and to the LFPDPPP. We may also disclose data when a law or a competent authority requires it.

5. Your rights (ARCO)

You may at any time access the personal data we hold about you, rectify it if it is inaccurate, cancel it when it is no longer needed for the purposes above, or oppose its use for a specific purpose. You may also revoke the consent you gave us and limit the use or disclosure of your data.

To exercise any of these rights send an email to hola@dacodes.com with the subject "ARCO rights" and include: your full name, a way to contact you, a copy of an official ID (or the document that proves your representative's authority) and a clear description of the data and the right you want to exercise. We will reply within the deadlines set by the LFPDPPP and, if we cannot serve the request, we will tell you why.

If you consider your rights have been violated you may file a complaint with the competent data protection authority in México.

6. Cookies and consent

We use essential cookies to remember your language, and we keep your consent choice in your browser. These do not need consent. The forms load HubSpot's form script, the font it uses from Google Fonts and Google reCAPTCHA before any choice, because you need them to send a request; they may set their own security cookies.

The tools in section 4 that need your consent (Google Tag Manager and the tags it loads, Google Analytics 4, Microsoft Clarity, Leadfeeder, Apollo and the HubSpot tracking code) load only after you click "Accept analytics" in the banner, and they set their own cookies, including advertising cookies that can recognize your browser on other sites (Google Ads, LinkedIn, Meta). If you choose "Essential only", none of them load and nothing is measured.

To change your choice at any time, use the "Change my choice" button at the top of this page and the banner will ask you again. If you switch to "Essential only", the page reloads without those tools and the cookies they left on this site are deleted. You can also delete the cookies and stored data of this site in your browser.

7. How long we keep your data

Contact and lead data is kept while we have an active conversation or relationship with you and for up to 24 months after the last interaction, unless a legal, tax or contractual obligation requires a longer period (internal retention policy, draft Sep 2026). Analytics data is kept for the period configured in Google Analytics, currently 14 months. The other tools in section 4 keep their data for the period configured in DaCodes' account with each provider. When the period ends we delete or anonymize the data.

8. Security

DaCodes runs an information security management system certified under ISO/IEC 27001:2022 (December 2025). Access to personal data is limited to the people who need it, and providers are bound by contract to equivalent controls.

9. Visitors from the United States and the European Union

If you are in the EU or the EEA, our legal bases under the GDPR are your consent (analytics, marketing), the steps needed to answer your request or perform a contract, and our legitimate interest in running a secure site. You also have the rights to data portability, to restriction of processing and to lodge a complaint with your local supervisory authority.

If you are a California resident, under the CCPA you have the right to know what personal information we collect and how we use it, to request its deletion or correction, and not to be discriminated against for exercising those rights. We do not sell personal information. The advertising tags in section 4 (Google Ads, LinkedIn, Meta) load only if you accept analytics; until you do, and whenever you choose "Essential only", no data from your visit is shared for cross-context behavioral advertising. Use hola@dacodes.com for any request.

10. Changes to this notice

We may update this notice when the site, our providers or the law change. The current version is always published on this page with its date. If a change affects the purposes for which you gave consent, we will ask for it again.