Privacy Notice

I. Personal Data Controller

Smart Analytics Group SAPI de CV, which operates the ideaBoost brand (hereinafter, “ideaBoost” or the “Controller”), with its registered address at Blvd. Fco. Eusebio Kino 315-Piso 9, Las Lomas del Pitic, 83010 Hermosillo, Son., is responsible for processing your personal data in accordance with Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.

For any matter related to this Privacy Notice, you may contact us at soporte@smartanalyticsgroup.ai.

II. Personal Data We Collect

For the purposes described in this Privacy Notice, we may collect:

• Full name
• Company or organization name
• Email address
• WhatsApp number, when you provide it and authorize its use
• Description of your business challenge or need
• URL of the public website you ask us to analyze
• A cryptographic identifier derived from the IP address to limit automated attempts
• A cryptographic identifier derived from a first-party security cookie to link an AI Visibility request to the browser session

We do not collect sensitive personal data.

III. Purposes of Processing

We use the personal data we collect for the following primary purposes, which are necessary for our relationship with you:

• Respond to requests for information about our technology consulting, artificial intelligence, software development, and cloud solution services.
• Schedule and coordinate calls or meetings with our team.
• Assess your business needs and propose suitable solutions.
• Follow up on the business relationship established with you.
• Prepare and unlock the Business X-Ray report, deliver it, and respond to questions about that analysis.
• Handle AI Visibility requests, match the specified domain to one exact Conductor property, and display available AI Search data after receiving the requester’s authorization declaration.

If you select the corresponding optional checkbox, we may also use your personal information to send you information and promotions from ideaBoost. This authorization is separate and is not a condition for the analysis or access to the report. You may withdraw it at any time by writing to soporte@smartanalyticsgroup.ai.

IV. Use of WhatsApp

If you provide a WhatsApp number in a form and check the separate authorization box, we may use it to contact you through that channel about the requested service. If you provide a number without checking the box, we will not save the number or include it in internal notices. WhatsApp authorization is not required to request the report if you choose to provide an email address.

V. Abuse Prevention

To limit automated attempts, we use a cryptographic identifier derived from the IP address; we do not save the IP address in the attempt log. Attempt identifiers are kept for a short period and deleted periodically.

VI. Website Analysis and Service Providers

To analyze the URL and public content of the website you specify, we use OpenAI through the Replit integration to classify evidence, and DataForSEO for search queries. We do not send these services the name, email address, or WhatsApp number you provide in the form.

In the AI Visibility flow, Conductor is the source of AI Search data. The system compares the requested domain with the Conductor configuration and starts a query only when it finds one property containing that exact domain and the requester has declared having authorization. If there is no match or more than one match, no data is queried. A technical match does not by itself verify the requester’s identity or authority to act. The form does not send the company name or contact details to Conductor.

For internal notices, we send by email through Gmail SMTP the name, contact details provided and authorized, consent preferences, analyzed website URL, and analysis identifier. Meta WhatsApp is used to send booking-related messages only when a person provides a number and authorizes that channel; those messages include the number, name, and booking date and time.

VII. ARCO Rights

You have the right to know what personal data we hold about you, what we use it for, and the conditions of that use (Access). You may also request that we correct your personal information if it is outdated, inaccurate, or incomplete (Rectification); request that we remove it from our records or databases when you believe it is not being used appropriately (Cancellation); and object to the use of your data for specific purposes (Opposition). These are known as ARCO rights.

To exercise any ARCO right, send your request by email to soporte@smartanalyticsgroup.ai.

Your request must include at least: (i) your full name and an email address where we can send our response; (ii) documents proving your identity or, where applicable, legal representation; (iii) a clear and precise description of the personal data concerned and the ARCO right you wish to exercise; and (iv) any other information or document that helps us locate your data. We will respond within a maximum of 20 business days.

VIII. Transfers of Personal Data

IdeaBoost will not transfer your personal data to third parties without your consent, except for the exceptions provided in Article 37 of the LFPDPPP and transfers that are necessary under a contract entered into or to be entered into in the data subject’s interest by the Controller and a third party.

IX. Cookies and Tracking Technologies

Our website may use cookies and other tracking technologies to improve your browsing experience, analyze site traffic, and personalize content. Cookies are data files stored on your device that allow us to recognize your browser. You can disable cookies in your browser settings; however, this may affect website functionality.

AI Visibility also uses a first-party security cookie, protected from access by JavaScript and valid for up to 30 days, to link a request’s state to the same browser. It is not used for advertising or cross-site tracking.

When no language preference is saved, the homepage automatically contacts ipdata.co to choose the initial language. The request sends your IP address directly to ipdata.co, which returns only your approximate country; ideaBoost does not receive or store the IP address used for that lookup. If the country is “US,” the site opens in English; otherwise, it stays in Spanish. Detection runs at most once per browser session and does not run when you have already saved a language preference. You can change the language at any time from the header; your choice is stored locally in your browser.

We also use Apollo as a third-party tracking service to identify companies globally and individuals in the United States.

X. Data Retention

We retain analyses and contact data for as long as needed for the purposes described in this notice or until you request deletion. You may request access, correction, or deletion at any time by writing to soporte@smartanalyticsgroup.ai. We may retain information where required by law.

XI. Changes to this Privacy Notice

This Privacy Notice may be modified, changed, or updated due to new legal requirements; our needs in connection with the products or services we offer; changes to our privacy practices or business model; or other reasons. We will keep you informed of changes to this Privacy Notice through our website, smartanalytix.tech.

XII. Consent

To request the Business X-Ray report, you must accept this Privacy Notice. The promotion and WhatsApp contact checkboxes are separate and are not preselected. The promotions checkbox is not a condition for accessing the report; if you provide a WhatsApp number, you must separately authorize contact through that channel.

To request AI Visibility, you must provide an email address and accept a declaration confirming that you are the owner or an authorized representative, that you may request and receive the analysis, and that the information is accurate. That acceptance authorizes IdeaBoost to query existing Conductor data for the specified domain; when there is one exact match, the query starts automatically. No new measurements are created in Conductor. Results depend on the data available from the provider, may be partial or unavailable, and do not guarantee commercial results. The report is not a substitute for an independent professional assessment. The declaration makes the requester responsible for the accuracy of their information and authority to request the analysis; it does not purport to exclude any liability that may not be excluded by law.

XIII. Applicable Law

This Privacy Notice is governed by Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations, and the Privacy Notice Guidelines published in the Official Gazette of the Federation.