Privacy notice

This is an English courtesy translation. The Spanish version is the legally binding one, as required by Mexican law (LFPDPPP).

Soluciones Integrales Tecvia S.A. de C.V. operates muebleria.app and the Muebleria.app mobile app. This notice explains what data we handle and why, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).

1. What data we handle

a) Data about the people who use the system (our users)

• Identity and contact: name, email, phone and company name.
• Account: password (stored hashed with bcrypt, never in plain text), role and permissions.
• Billing: legal name, tax ID (RFC), tax regime and address when you subscribe to a paid plan.
• Payment data: processed directly by Stripe. We never store or see your card number.
• Usage: audit logs, IP address and device type, for security purposes.

b) Data YOU capture about your own customers

When you record your customers, their purchases, their credit or their deliveries, that data is yours. Toward them, you are the data controller; we act solely as a data processor, storing and processing that information on your behalf and following your instructions.

That means we do not use your customers' data for our own purposes: we don't sell it, we don't use it for advertising, and we never mix it with another store's. Each company is isolated in the database and no query can cross from one to another.

2. Why we use it

• To create and run your account and give you access to the system.
• To provide the service you subscribed to: sales, inventory, manufacturing, deliveries, invoicing and the rest of your plan.
• To charge your subscription and issue your tax receipt.
• To give you support when you ask for it.
• To send you operational notices (your daily summary, your subscription renewal).
• To keep the service secure and prevent fraud or abuse.
• To comply with legal and tax obligations.

3. Artificial intelligence (Nogal)

The AI assistant answers questions about your own company's data. To do that, your database is never sent to an AI model. The assistant runs narrow, permission-checked queries, and only the result of that query (for example, a sales total or a list of customers with a balance) is sent to the model provider to word the answer. The same applies to reading receipts and bank statements: we process the image you upload to extract its data.

The model provider is OpenAI, which processes that information on its servers (United States) and, under its API terms, does not use it to train its models.

4. Who we share data with

Only the providers needed to run the service, and only what is strictly necessary:

We do not sell personal data and we do not share it with third parties for advertising. We would only disclose it if legally compelled by a competent authority.

5. How long we keep it

For as long as your account is active, and afterwards for as long as legal and tax obligations require (in Mexico, five years for accounting and tax records). If you cancel, you may request an export of your information and its deletion, except for what we are required to retain.

6. Your rights (ARCO)

You may Access, Rectify, Cancel and Object to the processing of your data, withdraw your consent, and limit its use or disclosure.

To exercise these rights, write to privacidad@muebleria.app with your name, the right you wish to exercise and proof of identity. We will respond within 20 business days. You may also file a complaint with Mexico's data protection authority, INAI.

7. Security

• All traffic is encrypted (HTTPS/TLS).
• Passwords are stored as bcrypt hashes; not even we can read them.
• Sensitive credentials you configure (WhatsApp tokens, payment keys) are encrypted at rest with AES-256-GCM.
• Every company is isolated by design: no query can read another company's data.
• Every significant action is written to an audit log.

8. The mobile app

The app requests permissions only when it needs them:

• Camera: scan barcodes and take delivery or expense-receipt photos.
• Photos: attach images to a delivery, an expense or a product.
• Notifications: alert you about assigned deliveries, sales or payments, based on your role. You can turn each type off.
• Local storage: keep your work when there's no signal and sync it when it returns.

The app does not track your location in the background, does not access your contacts, and contains no advertising or third-party trackers.

9. Minors

The service is aimed at businesses and is not offered to anyone under 18.

10. Changes

If we change this notice we will publish the new version on this page with its update date, and email you if the change is material.

11. Contact

Write to privacidad@muebleria.app. See also our Terms of service and our Cookie policy.