Privacy

Privacy notice.

What data we receive, what we use it for and how you can ask us to correct or delete it.

Last updated: October 10, 2026

In short

We ask only for what we need to reply: your name, a way to reach you and whatever you want to tell us.
We use your data to reply and follow up. We do not use it for advertising or mailing lists.
Part of the conversation is handled by an AI agent. To generate its replies, the text is sent to an AI model provider (section 4).
You can ask us to access, correct or delete your data, or to stop using it, by writing to [email protected].

1. Who is responsible for your data

Sistemas Leal, based in Cabo San Lucas, Baja California Sur, Mexico, is responsible for the personal data we receive through this website (sistemasleal.com), the site chat and our Instagram and Facebook profiles.

For any privacy matter, including exercising your rights, write to [email protected]. This notice is prepared in line with Mexican law on the protection of personal data held by private parties.

2. What data we collect

It depends on how you contact us. We only receive what you write and what the platform you use to reach us gives us.

Contact form

Your name, a phone number or an email, your business name (optional), the service you are interested in and the message you want to leave us.

Site chat

The text of your messages and the agent's replies. Your browser generates a random session identifier so the conversation can be recognized; it is not your name. If the chat offers a short orientation form, we also receive what you fill in there: sector, business size, what you need, services of interest and urgency.

Instagram, Facebook and Messenger

Your direct messages and your comments on our posts, your user identifier on the platform and the public name or username Meta gives us. If you send an image, the agent may analyze it to reply to you. If you send a voice note, it may be transcribed to text (section 4).

If you message us on WhatsApp, for example from a button on this site, the conversation takes place inside WhatsApp: we receive your number and the content of the messages. WhatsApp handles that data under its own privacy notice.

Appointments

If you book an appointment from the calendar link the agent shares with you, the scheduling service (Cal.com) receives what you enter when booking, such as name, email, phone and notes, depending on what the booking form asks for. We receive the appointment date and that data.

Data our system generates

To follow up with you, our contact management system (CRM) records what stage your conversation is at, an internal interest score, the language you write in, whether the tone of your messages seems positive, neutral or negative, and a short AI-generated summary of the conversation.

Technical data

When you open a page, the site's hosting provider and the agent's server receive technical data about your connection, such as your IP address, browser type, the page requested and the time, as on any website. The agent's server uses the IP address to limit abusive requests, and that count lives in temporary memory, not in the contact database. Its technical logs may include the data you submitted (for example, name, phone and email from the form) in order to diagnose errors.

What we do not need

We do not ask for sensitive personal data (health, financial, passwords or official documents). Please do not type them into the form or the chat.

3. What we use your data for

To reply to your message, comment or form.
To follow up on what you asked us for: a diagnosis, information, a proposal or an appointment.
To run the AI agent: generate replies, remember the context of the conversation and hand you over to someone on the team when you ask or when needed.
To alert the team internally when there is a new appointment or a conversation that needs a human.
To review the quality of the agent's replies so we can correct and improve them.
To protect the service against abuse and diagnose technical errors.

We do not use your data for advertising, and we do not add it to mailing lists or newsletters.

To run the service we rely on the providers in this list. Each one handles data under its own terms and privacy notices, and some process information outside Mexico.

Meta (Instagram, Facebook, Messenger and WhatsApp). It is the channel you use to reach us. We receive your messages and reply through their interfaces.
Anthropic (AI model). So the agent can generate its replies, we send it the text of the recent conversation, any images you sent and context data: your name, your business, the service of interest and the follow-up stage. We do not automatically include your phone number or email; if you type them into the conversation, they are part of the message.
OpenAI (voice note transcription). Only when you send us a voice note on Instagram or Messenger and transcription is active: the audio is sent to be converted to text.
Cloudflare. A Cloudflare tunnel securely connects your browser and the Meta platforms to our agent's server (webhook.sistemasleal.com). Chat and form messages pass through it.
Cal.com (appointments). Only if you book an appointment. Their terms and privacy notice apply to that data.
ntfy.sh (internal alerts). A notification service we use to alert the team about a new appointment or a conversation that needs attention. The alert may include the name, the channel and a summary.
GoDaddy (site hosting). Hosts the sistemasleal.com pages and keeps the usual technical access logs.

Apart from these providers, we do not share your data with third parties, unless a competent authority requires it under the law.

5. The AI agent and our team

The agent replies using artificial intelligence and can make mistakes. If you prefer to talk to a person, say so in the chat or write to [email protected].
People on the team can read conversations and step in when needed.
If you stop replying, the agent may send you up to three follow-up messages on Instagram or Messenger, during working hours. If you would rather it did not, tell us and we will stop it.
Public comments on our Facebook and Instagram posts may receive a reply from the agent. That reply is public, so please do not put personal data there.

6. Where and for how long we keep it

Your data is stored in our own contact database, managed by Sistemas Leal. Access to the internal dashboard requires a key, and the connection between this site and our server is encrypted (HTTPS).

We keep it for as long as it is needed to follow up with you. You can ask us to delete it at any time (section 8).

Data that lives on the platforms you used, such as Meta or Cal.com, is governed by each platform's retention policies; to delete it there you will need to do so from your account on that platform.

7. Cookies, local storage and analytics

This site does not use first-party cookies or advertising tools: there is no Google Analytics and no social media tracking pixels.
Typefaces are served from our own site, not from Google Fonts.
The chat stores a session identifier and your last 50 messages in your browser's local storage, so you do not lose the conversation when you change pages. It is not a cookie. The identifier travels with your messages so the agent can recognize the conversation; the saved history stays in your browser. You can delete it from your browser settings (clear site data).
Third-party services your connection passes through, such as Cloudflare, may set technical security cookies. Cloudflare may also measure visits to the site in aggregate with its web analytics (Cloudflare Web Analytics), which works without cookies. We do not use that data for advertising or to identify you.
When you open links to WhatsApp, Instagram or Facebook you leave this site and those platforms' policies apply.

8. Your rights and how to exercise them

You have the right to access your data, rectify it, cancel it and object to its use (ARCO rights: Access, Rectification, Cancellation and Objection). You can also withdraw your consent or ask us to limit how we use your data.

To exercise them, write to [email protected] with the subject “ARCO rights” and include:

your name and the phone number, email or username you used to contact us, so we can locate your data;
the right you want to exercise and which data it refers to;
anything that helps us confirm it is you. We may ask you to confirm a detail you gave us before handing over or changing information.

We reply to the same email with what is applicable under the law. If you believe your right was not honored, you may go to the competent data protection authority in Mexico.

9. Changes to this notice

If the way we handle your data changes, we will update this notice and the date above. The current version is always the one published on this page.