Privacy Policy

Last updated: October 21, 2026 · Versión en español (the Spanish version prevails)

1. Who is responsible for your data

Fernando Remolina Sánchez Rucobo ("Soluciones T8", "T8", "we"), located at Calle Porfirio Díaz 75, Col. San Jerónimo Lídice, Alcaldía La Magdalena Contreras, C.P. 10200, Ciudad de México, México, is responsible for the processing of the personal data described in this policy, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties and other applicable law.

T8 processes personal data in two different roles:

• As controller, for data about the businesses that subscribe to T8 and the people who use our dashboard (owners, professionals and assistants).
• As processor, for data about each business's customers or patients. In that case the controller is the business you message on WhatsApp (for example, your barbershop or clinic), and T8 processes the data only on its instructions and to provide the service.

2. Data we process

2.1 Customers or patients who message a business on WhatsApp

• WhatsApp phone number and WhatsApp profile name.
• The name you give the business or that the business records.
• The content of the messages you exchange with the business's automated assistant and the options you choose (for example, the service and time of your appointment).
• Appointment data: date, time, service, location and status (confirmed, cancelled, attended).
• Visit history, your preference about promotional messages and how you heard about the business, if you tell us.
• Technical message status (sent, delivered, read) reported by WhatsApp.
• If the business connects its WhatsApp Business app to T8 (coexistence): the contacts in its WhatsApp and, one time only, its conversations from the last 6 months, which Meta shares when it connects. From those conversations we only keep, per contact, how many days they wrote, the date of the last message and whether they talked about appointments, so the business can choose whom to register as a customer; we do not store the message text. We also receive the messages the business sends from its app, only so the assistant does not reply at the same time as a person.
• If you are a customer of an auto repair shop: your vehicle's plate, make, model, year, color and mileage; service orders and their stages; quotes with their breakdown and your answer (approved or rejected, with date and time); photos of the vehicle taken by the shop, and when and how you agreed to receive WhatsApp notices.

2.2 Businesses and dashboard users

• Business name, type, branch addresses, opening hours and services.
• Name, email, phone and password (hashed) of dashboard users.
• Identifiers of the business's WhatsApp Business account (account ID, phone number ID and access token) that Meta provides when the business connects its WhatsApp to T8.
• If the business connects Google Calendar: the calendar email, an encrypted access token and the busy times needed to offer available slots.

2.3 Sensitive personal data

T8's automated assistant is designed not to request or answer health information: if a message appears to contain a medical topic, the assistant does not answer it and routes it to a person at the business. Some health professionals (for example, nutritionists) may record their patients' health data in the dashboard. In that case the professional is responsible for obtaining the patient's express written consent, and T8 only stores that data as a processor, with access restricted to that professional. T8 does not send health data over WhatsApp.

We do not request or process card numbers, bank accounts or government IDs over WhatsApp.

3. How we use data

Purposes necessary for the service

• Replying to your messages and letting you book, confirm, change or cancel appointments on WhatsApp.
• Sending you reminders and notices about appointments you booked.
• Routing your message to a person at the business when you ask, or when the assistant cannot help.
• Showing the business its schedule, customers and appointment history in the dashboard.
• Honoring your preferences, including your request not to receive promotional messages.
• Providing secure dashboard access, preventing fraud and abuse, and meeting legal obligations.

Additional purposes (only with your consent)

• Receiving promotions from the business on WhatsApp. They are sent only if you agreed to receive them, and you can stop them at any time by replying BAJA (or STOP).

We do not use data for our own or third-party advertising, we do not sell it, and we do not build profiles for purposes other than those described. Data we receive from WhatsApp is used only as reasonably necessary to support the conversation with the business, in line with the WhatsApp Business policies.

4. Who we share data with

We share data only with the providers we need to run the service, who process it on our behalf under confidentiality and security obligations:

This means data is stored and processed in the United States. A business's customer data is visible only to that business; no other business on T8 can access it. We may also disclose data when required by a competent authority under applicable law.

5. How long we keep data

• While the business has an active T8 account, or until you request deletion.
• When a business closes its account, we delete its data and its customers' data within 30 days, except data we must keep by law. Backups are purged within 90 days.
• Technical logs of processed messages are kept for the minimum time needed to operate and debug the service.

6. How we protect data

• All traffic is encrypted in transit (HTTPS/TLS).
• Google Calendar access tokens are stored encrypted with AES-256-GCM.
• Each business can only see its own data: access is isolated per business in the database (row-level security policies) and in every dashboard operation.
• Files are kept in private storage and can only be downloaded through short-lived links.
• Internal access to data at T8 is limited to staff who need it to provide support.

7. Your rights and how to exercise them

You have the right to access, rectify and delete your data, to object to its processing, to withdraw your consent and to limit its use or disclosure.

1. Email clientes@solucionest8.com with the subject "Data rights request".
2. Include your name, the related WhatsApp number or email, the business you messaged (if you are a business's customer), the right you want to exercise and, to verify your identity, an ID (or your representative's ID and proof of representation).
3. We reply within 20 business days. If your request is granted, we apply it within the following 15 business days.

If you are a business's customer or patient, you can also ask the business directly. If you write to us, we handle it together with that business.

Stop receiving messages

• Reply BAJA (or STOP) in the business's chat to stop promotional messages.
• To stop all messages from the business, you can block the number in WhatsApp or ask in the chat; the business will only message you to reply to what you write.

To delete your data, see the data deletion instructions.

8. Cookies

The site uses only the technical cookies needed to keep the dashboard session and protect sign-in. We do not use third-party advertising or analytics cookies.

9. Minors

The T8 dashboard is for businesses and is not directed to anyone under 18. If a minor books an appointment with a business, the business is responsible for having the authorization of a parent or guardian when the law requires it.

10. Changes to this policy

We may update this policy. We will post the current version on this page with its update date and, for material changes, notify businesses by email or in the dashboard.

11. Contact and authority

For any privacy question, write to clientes@solucionest8.com. If you believe your data protection rights were violated, you may contact the competent personal data protection authority in Mexico.