Privacy Notice

1. Data controller

The controller of your personal data is Dokia (“Dokia” or “we”), with its address at Cerro de Acasulco 81A Colinas del Cimatario, Querétaro, Querétaro, Mexico, and tax ID TIA090320969. For any matter regarding your personal data you may contact us at hola@dokia.mx.

2. Personal data we collect

To provide our services we may collect the following categories of personal data:

• Identification and contact: name, email, company or firm, and phone.
• Account data: username, assigned role, and activity logs.
• Billing and payment data when you subscribe to a plan.
• Data contained in the documents you upload or process (for example, name, CURP, RFC, or dates), for which you act as controller and Dokia as processor.

3. Sensitive personal data

The documents you process may contain sensitive personal data (for example, data on official IDs). Dokia processes them solely on your instructions and to provide the service, applying reinforced security measures, and does not use them for its own purposes.

4. Purposes of processing

Primary purposes (necessary for the service):

• Create and manage your account and your team’s roles.
• Extract data from documents, generate and fill templates, and run the approval workflow.
• Process payments and issue receipts.
• Provide support and handle your requests.
• Comply with applicable legal obligations.

Secondary purposes (require your consent):

• Send you commercial communications, product news, and surveys.
• Produce statistics to improve our services.

If you do not want your data processed for secondary purposes, let us know at hola@dokia.mx. Your refusal will not be grounds to deny you the services.

5. Data transfers

Dokia does not sell your personal data. We may transfer it to providers that help us operate the service (hosting, payment processing, and email delivery), who are contractually bound to protect it and process it only under this notice. We may also transfer it when required by a competent authority or permitted by the LFPDPPP without your consent.

6. Cookies and tracking technologies

Our site may use cookies and similar technologies to remember your preferences, keep your session, and measure site performance. You can disable them in your browser settings, bearing in mind that some features may stop working properly.

7. ARCO rights

You have the right to Access, Rectify, and Cancel your personal data, as well as to Object to its processing (ARCO rights). To exercise them, send a request to hola@dokia.mx stating your name, the data concerned, and the right you wish to exercise, together with official identification.

We will respond within the time frames set by the LFPDPPP (generally, 20 business days to communicate the decision and 15 business days to make it effective).

8. Withdrawal of consent

You may withdraw your consent at any time, understanding that this may mean we can no longer provide the service. The request is made through the same channel as ARCO rights.

9. Limiting use or disclosure

You may limit the use or disclosure of your data by writing to hola@dokia.mx. You may also register your number with PROFECO’s Public Registry to Avoid Advertising (REPEP).

10. Security measures

We apply reasonable administrative, technical, and physical security measures (encryption in transit, role-based access control, and activity logs) to protect your data against damage, loss, alteration, destruction, or unauthorized use.

11. Data retention

We keep your personal data for as long as necessary to fulfill the stated purposes and applicable legal obligations. When it is no longer needed, it is blocked and deleted under the regulations.

12. Changes to this Privacy Notice

This notice may be updated at any time. We will publish the current version on this page and indicate the last-updated date; we recommend reviewing it periodically.

13. Competent authority

If you believe your right to data protection has been infringed, you may turn to the competent data-protection authority in Mexico under applicable law.