Privacy Notice

Guillermo Leal Rosillo, an individual operating commercially under the ELYA brand, with address at Amado Nervo 1561-PH, San Luis Potosí, S.L.P., Mexico, is the data controller for the personal data collected directly from customers, prospects, and users, in accordance with applicable Mexican data protection legislation.

For any matters related to privacy, data protection, or data processing, please contact us at:

Email: hola@elya.app

Depending on your relationship with ELYA and the services used, we may collect:

• Full name.
• Company, position, and business activity.
• Phone number.
• Email address.
• Contact information.
• Tax and billing data.
• Information related to the contracting and management of services.
• Information provided through forms, conversations, support requests, or implementation processes.
• Technical data related to accessing and using our sites and services.
• Information required to configure integrations, accounts, and features requested by the Customer.

ELYA does not generally require sensitive personal data as a condition for contracting its services.

If the nature of a specific implementation makes it necessary to process such information, the corresponding measures and conditions will be established in accordance with applicable law.

Personal data collected directly by ELYA may be used for the following necessary purposes:

• Identify and contact customers and prospects.
• Provide information and quotes about our services.
• Create and manage accounts.
• Manage contracting, subscriptions, and payments.
• Implement, configure, and maintain contracted services.
• Provide training and support.
• Handle requests, clarifications, and incidents.
• Manage the commercial relationship with the Customer.
• Comply with contractual, tax, and legal obligations.
• Maintain the security and proper functioning of our services.

Additionally, we may use contact information to send information about features, updates, content, promotions, or services related to ELYA.

The data owner may request at any time to stop receiving these communications by writing to hola@elya.app.

It is important to distinguish between the personal data ELYA collects directly and the information that our customers enter or manage through the platform.

When a Customer uses ELYA to store, manage, or process information about their own customers, patients, prospects, users, or contacts, the Customer retains control over that information.

In these cases, ELYA acts as a technology provider and, where applicable, as a data processor, processing the information in accordance with the instructions and configurations set by the Customer.

ELYA does not acquire ownership rights over the Customer's databases nor uses that information for its own commercial purposes unrelated to the contracted service.

The Customer is responsible for having the privacy notices, consents, authorizations, and other legal bases necessary to collect, enter, and process the information of their respective data owners.

Authorized ELYA personnel may access the Customer's account only when necessary for activities related to:

• Implementation and configuration.
• Technical support.
• Training.
• Diagnosis and incident resolution.
• Automation configuration.
• Integrations.
• Maintenance.
• Adjustments requested or authorized by the Customer.

Access will be limited to personnel who need to intervene to provide the service and will be subject to confidentiality obligations.

ELYA will not use such access to appropriate, sell, market, or use the Customer's databases for purposes other than providing the contracted service.

Information to which ELYA has access as a result of providing its services will be treated confidentially.

ELYA will implement reasonable controls to limit access to such information exclusively to persons who need to know it to provide the corresponding services.

The specific confidentiality obligations applicable to the relationship between ELYA and each Customer may be additionally established in the corresponding contracts, proposals, service orders, or agreements.

To provide its services, ELYA uses or may use specialized providers of technology infrastructure, hosting, communications, messaging, email, automation, artificial intelligence, payment processing, analytics, and other services necessary for the operation of the platform.

These providers may process certain information only when necessary to provide their respective services and in accordance with applicable privacy, security, and information processing conditions.

The use of such providers does not imply a transfer of ownership of the Customer's databases.

ELYA does not sell or market databases or personal information of its customers or of the contacts managed by them.

Information may be disclosed or transferred when:

• It is necessary to provide the contracted services.
• There is authorization from the Customer or the corresponding data owner.
• It is necessary to comply with a legal relationship.
• It is required by a competent authority.
• There is another exception or basis permitted by applicable law.

When a transfer requires consent under applicable law, it will be requested through the corresponding mechanisms.

The data owner may exercise the following rights:

• Access: know what personal data we hold and how we process it.
• Rectification: request correction or updating of incorrect or incomplete information.
• Cancellation: request, when legally applicable, the deletion of their personal data.
• Opposition: request that their personal data not be used for certain purposes.

The owner may also request, when applicable, the revocation of their consent or the limitation of the use or disclosure of their personal data.

To exercise any of these rights, please send your request to:

hola@elya.app

The request must include at least:

• Name of the data owner.
• Information that proves identity.
• Means to communicate the response.
• Clear description of the right you wish to exercise.
• Data or information that allows us to locate the corresponding personal data.

ELYA will respond to requests in accordance with the procedures and deadlines established by applicable law.

ELYA adopts reasonable administrative, technical, and organizational measures to protect information against damage, loss, alteration, destruction, unauthorized use, access, or processing.

Internal access to customer information is limited to those who need such access to provide the corresponding services.

No technology system can guarantee absolute security; however, ELYA maintains practices aimed at reducing risks and reasonably protecting managed information.

ELYA's digital sites and services may use cookies and similar technologies to:

• Allow sites to function.
• Maintain sessions.
• Remember preferences.
• Analyze usage and performance.
• Measure campaigns and conversions.
• Improve user experience.

Users can manage certain cookies from their browser settings and, when applicable, through the mechanisms provided on our sites.

Personal data will be retained for as long as necessary to fulfill the purposes described in this Privacy Notice, maintain the corresponding contractual relationship, and comply with applicable legal obligations.

Once the information is no longer needed, it may be deleted, anonymized, or blocked in accordance with the corresponding legal obligations and technical capabilities.

ELYA may modify or update this Privacy Notice due to legal, operational, technological, or service-related changes.

The current version will be available on ELYA's official website and will indicate the date of its last update.

By providing personal data directly to ELYA and continuing to use our services, the owner acknowledges having accessed this Privacy Notice.

When applicable law requires express consent for specific processing, ELYA will establish the corresponding mechanisms to obtain it.

For any questions, requests, or clarifications regarding this Privacy Notice or the processing of personal data:

• Controller: Guillermo Leal Rosillo
• Trade name: ELYA
• Address: Amado Nervo 1561-PH, San Luis Potosí, S.L.P., Mexico
• Email: hola@elya.app

Last updated: August 2026