Privacy Policy (Aviso de Privacidad)

§ 01

Who we are

Founder-Sync OS is a software studio based in Monterrey, Mexico, founded by Roberto J. Bendana. We explore different projects and build focused tools that take repetitive admin work off professionals' plates.

For this notice, the data controller (Responsable) of your personal data is:

§ 02

Scope

This notice covers personal data we handle through:

• our website, fsyncos.com;
• email and other direct contact with us; and
• the pilots, services, software or materials we make available.

Some services may come with their own supplementary privacy notice that gives more detail about that service. If so, the supplementary notice applies to that service together with this notice. If the two conflict, the supplementary notice controls for that service.

§ 03

Personal data we collect

We collect only the personal data we need for the purposes described in this notice. Depending on how you interact with us, this may include:

• Contact information you send us. For example your name, email address, company or organization, job title, and anything else you include when you write to us.
• Basic website and technical data. When you visit our website, our hosting and infrastructure providers may automatically log standard technical data such as your IP address, browser type, device type, operating system, pages requested, and the date and time of access. We use this data to run and secure the website, not to profile visitors.
• Data you provide when taking part in a pilot or using a service. This may include your contact and access details, preferences, feedback, and the content or information you choose to submit or process through the pilots, services, software or materials we make available. What we collect depends on the specific service and is described in more detail in any supplementary notice for that service.

Sensitive personal data. We do not ask for sensitive personal data (datos personales sensibles) as defined under Mexican law, such as data about health, religious or philosophical beliefs, political opinions, sexual preference, racial or ethnic origin, or genetic or biometric data. Please do not send us this kind of data. If a service ever needs sensitive personal data, we will tell you first and ask for your express written consent where the law requires it.

§ 04

How we use it

Primary purposes. We use personal data for purposes that are necessary for our relationship with you:

• to respond to your questions, requests and messages;
• to evaluate, set up and run pilots and services you take part in or ask for;
• to provide, maintain, support and improve the pilots, services, software or materials we make available;
• to communicate with you about the services you use, including operational and administrative notices;
• to operate, maintain and secure our website and systems, and to detect and prevent misuse or abuse; and
• to meet our legal obligations and to establish, exercise or defend legal claims.

Secondary purposes. We may also use your contact information for purposes that are not necessary for the relationship but help us serve you better:

• to send you occasional updates about our work, new projects or services; and
• to ask for your feedback, or invite you to share your opinion about our services.

If you do not want your personal data used for these secondary purposes, email rob@fsyncos.com with the subject line "Opt out of secondary purposes." You can do this at any time, including before you share your data with us. Opting out will not affect your access to any service you use.

§ 05

Legal basis and consent

We process personal data on the basis of your consent and, where applicable, to meet obligations arising from our relationship with you or required by law.

• Tacit consent. As the LFPDPPP allows for non-sensitive personal data, if you have been given access to this notice and do not object to the processing it describes, you are understood to have consented to it.
• Express consent. Where the law requires express consent, for example for sensitive personal data or certain transfers, we will ask for it before processing.
• Exceptions. In some cases the law allows processing without consent, for example to comply with a legal obligation or a request from a competent authority.

§ 06

Third parties and processors

We do not sell your personal data.

We may share personal data with service providers that process it on our behalf and under our instructions (encargados), only as far as needed to support the purposes in this notice. These fall into general categories such as:

• hosting and infrastructure providers;
• email and communication providers;
• software and AI processing providers that support a service; and
• professional consultants, such as lawyers and accountants, under a duty of confidentiality.

The providers we currently use include:

• Form processing. Messages sent through our contact form are delivered by FormSubmit (formsubmit.co), a third-party form-processing service, which receives the name, email address, topic and message you submit and forwards them to us by email. FormSubmit processes this data under its own terms and privacy policy.

We ask these providers to protect personal data and to use it only to provide their services to us.

We may also disclose personal data where the law requires it, or to respond to a valid request from a competent authority, to protect our rights, or in connection with a merger, acquisition or similar business transaction, subject to applicable law.

Where a transfer to a third party needs your consent under applicable law, we will ask for it.

§ 07

International transfers

Some of our service providers may store or process personal data outside Mexico. When this happens, we take reasonable steps so that the personal data is protected in line with this notice and applicable law. Where the law requires your consent for an international transfer, we will ask for it first.

§ 08

Cookies and similar technologies

Our website uses minimal or no tracking cookies. We do not use advertising cookies, and we do not use advertising or analytics tracking scripts.

If we use any cookies or similar technologies, they are strictly necessary technical ones needed for the website to work properly or securely, such as keeping a session active or remembering a basic setting. These cookies are not used to track you across other websites or to build a profile of you.

You can set most browsers to block or delete cookies. Blocking strictly necessary cookies may affect how parts of the website work.

If we change this practice, we will update this section first.

§ 09

Data retention

We keep personal data only as long as needed for the purposes it was collected for, or as long as applicable law requires or allows.

When the purpose has been met, or when you validly ask us to cancel your data, the data enters a blocking period (bloqueo). During this period we keep the data only to determine possible liabilities connected with its processing, for the period set by applicable law. Blocked data is not processed for any other purpose. When the blocking period ends, we delete the data.

§ 10

Security

We maintain reasonable administrative, technical and physical security measures designed to protect personal data against damage, loss, alteration, destruction, and unauthorized use, access or processing. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If a security incident significantly affects your property or moral rights, we will notify you as required by applicable law so that you can take steps to protect your rights.

§ 11

Your ARCO rights

Under Mexican law you have the right to:

• Access the personal data we hold about you and learn how we process it;
• Rectify your personal data if it is inaccurate or incomplete;
• Cancel your personal data, where it is not needed for the purposes in this notice or is not being processed in line with the law; and
• Oppose the processing of your personal data for specific purposes.

How to exercise them. Send a request to rob@fsyncos.com with the subject line "ARCO request." Your request should include:

1. your full name and an email address or other contact method where we can send our response;
2. a copy of an official identification document, or, if you are acting for someone else, proof of your authority to represent them;
3. a clear description of the personal data involved and the right you want to exercise;
4. for rectification requests, the changes you are asking for and any supporting documents; and
5. any other information that helps us locate your personal data.

If your request is incomplete, we may ask you for more information within the time frame allowed by applicable law.

Response timing. We will respond within the time frames set by applicable law and, if your request is granted, carry it out within the period the law sets after our response.

Exercising your ARCO rights is without charge, except for reasonable reproduction or delivery costs that applicable law allows.

Right to complain. If you believe your data protection rights have been violated, you may file a complaint with the competent Mexican data protection authority.

§ 12

Revoking consent and limiting use or disclosure

You may revoke your consent to the processing of your personal data at any time, and you may ask us to limit how we use or disclose it. To do so, email rob@fsyncos.com with the information listed in Section 11 and a description of what you want to revoke or limit.

Please note that:

• we may not be able to honor a revocation immediately or in full where we must keep processing certain data to meet a legal obligation; and
• revoking consent for primary purposes may mean we can no longer provide a service or continue our relationship with you.

To stop receiving optional communications, you can also follow the opt-out steps in Section 4.

§ 13

Children

Our website and the pilots, services, software or materials we make available are not directed at people under 18 years old. We do not knowingly collect personal data from minors. If you believe a minor has given us personal data, contact us at rob@fsyncos.com and we will take appropriate steps to delete it.

§ 14

Changes to this notice

We may update this notice from time to time to reflect changes in our practices, our services or applicable law. We will post the updated version on this page and change the effective date above. If a change is material, we will take reasonable steps to let you know, for example by a notice on our website or by email where appropriate.

§ 15

Contact for privacy questions

If you have questions about this notice or how we handle personal data, contact us at: