What I do with your data

1. Who is responsible

I am Jossué Alcalá, an individual, with address at Cerámica 442, Tonalá, Jalisco, Mexico. I am responsible for your personal data. For any privacy matter, write to hola@jossuealcala.com.

2. What data I collect and where

• Contact form: name, email, company, website, project type, approximate budget and your message.
• Jossue AI chat: what you write. When it is stored, emails and phone numbers are removed automatically. If you choose to leave me a message, I keep your name, the email or phone you give me, your company if you mention it, and what you need.
• Express audit: your name, your email, your site’s address and the result of reviewing that site’s home page (public information).
• Call scheduler: your name, your email, the phone I call you on, the time you picked and, if you write it, what you want to talk about.
• WhatsApp Business: your number, your profile name and the messages. The assistant’s database does not store the number as is, only an encrypted fingerprint.
• Technical data: your IP address turned into an encrypted fingerprint (I do not store the IP), to set usage limits and stop abuse, and, only if you accept them in the cookie notice, browsing data from Google Analytics and from Meta and Google advertising cookies (which pages you visit, which ad brought you and whether you requested an audit or wrote to me).

I do not ask for sensitive data (health, beliefs, financial data, etc.). Please do not share it in the chat or the form.

3. What I use it for

Primary purposes (without them I cannot help you):

• Answering what you ask or request, by email, WhatsApp or the chat.
• Running your express audit and showing it to you in the chat.
• Calling you at the time you booked and letting you know if something changes.
• Following up on what you asked for, for example writing to you to go over the first improvement from your audit.
• Protecting the chat and the site against abuse (usage limits and temporary blocks).

Secondary purposes (you can opt out and I will still help you):

• Reading chat conversations, already without emails or phone numbers, to improve the assistant’s answers.
• Measuring site usage in aggregate with Google Analytics, only if you accept analytics in the cookie notice.
• Measuring which of my ads on Meta (Facebook and Instagram) and Google work, and showing you my ads on those platforms, only if you accept advertising cookies.

To opt out of secondary purposes, write to hola@jossuealcala.com, or reject analytics and advertising in the cookie notice. You can change your choice at any time under “Cookie preferences”, at the bottom of every page.

4. Who it is shared with

I do not sell or rent your data. For the site to work, some providers process it on my behalf, only for that:

• Cloudflare: hosts the site and the database, and sends the notification emails I receive.
• Google: the Gemini model processes your chat messages to generate answers, and Google Analytics measures site usage if you accept it.
• Meta and Google, for advertising: if you accept advertising cookies, the Meta pixel and the Google Ads tag send them which pages you visit and whether you requested an audit or wrote to me. I never send them your name, your email or what you write. They also use that data under their own privacy notices.
• Railway and Anthropic, through my APEX audit system: Railway hosts the system that reviews your site, and Anthropic writes parts of the report from your site’s public content.
• Meta and its connection provider, only if you write to me on WhatsApp.

Some of these providers have servers outside Mexico, mainly in the United States. Apart from the advertising you accept, I do not share your data with third parties for other purposes.

5. How long I keep it

• Chat and WhatsApp conversations: 30 days.
• Messages left for me, express audits and form messages: 12 months.
• Booked calls: 12 months after the date of the call.
• Security records (abuse attempts and blocks): 90 days.

After that they are deleted automatically. If you ask me to delete them sooner, I will.

6. Cookies and storage in your browser

• Necessary: the chat keeps the conversation in your browser while the tab is open, so you do not lose it when you change pages, your cookie choice is saved so you are not asked again and, if you booked a call, your browser keeps it so you can cancel it. They cannot be turned off because the site does not work well without them.
• Analytics (Google Analytics): measures in aggregate which pages are visited. It only loads if you accept it.
• Advertising (Meta pixel and Google Ads): measures which ads work and lets me show you my ads on Facebook, Instagram and Google. It only loads if you accept it.

If you reject analytics or advertising, those services do not load. You can change your choice at any time under “Cookie preferences”, at the bottom of every page.

7. Your rights (ARCO) and how to exercise them

You can ask to access your data, rectify it, cancel it or object to its use, and also withdraw your consent or limit its use. Write to hola@jossuealcala.com with:

• your name and the email where I should reply,
• which right you want to exercise and over which data (for example, the email you used to request your audit),
• and, only if needed to confirm it is you, something that proves it.

I reply within 20 business days at most and, if it applies, carry it out within the following 15 business days. It is free.

8. Minors

This site is aimed at businesses and professionals. I do not knowingly collect data from people under 18.

9. Changes to this notice

If what I collect or why changes, I update this page and its date. If the change is important and I have your email from an open request, I let you know.

10. If you think I did not comply

Write to me first and we will sort it out. You can also go to the Secretaría Anticorrupción y Buen Gobierno, the personal data protection authority in Mexico.