Privacy notice

Opalina Technologies S.A. de C.V. ("Opalina", "we") is responsible for the processing of the personal data described in this notice, in its capacity as operator of the DocVigia platform. Contact for privacy matters: [email protected]

This notice is issued under the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP) and its Reglamento.

A note on roles. Most personal data in DocVigia is uploaded by a subscribing fleet about its own drivers and staff. For that data the fleet is the responsible party and Opalina is its processor — we act on the fleet's instructions and do not decide what is collected or why. Where we collect data directly, for example from someone who signs up or writes to us, Opalina is the responsible party. Both cases are covered below and each section says which applies.

Primary purposes — necessary for the service

Secondary purposes — you may refuse these

Sending product news and commercial information about DocVigia, and inviting an account holder to take part in research about how the product is used. Refusing these is not a reason for us to deny or reduce the service. To refuse, write to [email protected] at any time, or use the unsubscribe link in any message we send.

We do not sell personal data, and we do not use fleet content to train general-purpose AI models. Documents are processed to extract their fields for the fleet that uploaded them, and for nothing else.

Send the request to [email protected] with: your name and an address for our reply; a document proving your identity, or a power of attorney if you act for someone else; a clear description of the data concerned; and anything that helps us locate it. If the request is to rectify, tell us the correct value and attach what supports it.

We answer within 20 business days of receiving a complete request, and if it is granted we give effect to it within the following 15 business days. Both periods may be extended once, for the same length, where the circumstances justify it; we will tell you if that happens. Exercising these rights is free — you pay only justified shipping or certification costs, if any.

Where the data belongs to a fleet. If you are a driver or an employee and the data was uploaded by the company you work for, that company decides what is held and for how long. Address the request to your employer first. If you send it to us, we will forward it to them and tell you we have done so.

Revoking consent, and limiting use

You may revoke the consent you gave, by the same route. Revocation cannot always be immediate or total: we may need to keep certain records to comply with a legal obligation or to defend a claim, and we will tell you which and why.

To be excluded from our commercial communications you may also register with the Registro Público para Evitar Publicidad, kept by PROFECO.

We do not transfer personal data to third parties for their own purposes. We do use suppliers who process data on our behalf and under our instruction — a transfer to a processor of this kind does not require your separate consent under the LFPDPPP, but you should know who they are:

Some of these operate infrastructure outside Mexico, so your data may be processed abroad. Each is bound by contract to process it only on our instruction, to protect it, and to return or delete it when the relationship ends.

We will disclose data without your consent only in the cases article 37 of the LFPDPPP allows — among them a lawful order from a competent authority, or an emergency threatening a person's life.

Security

Every record carries the organization it belongs to, and every query is filtered by it at the data layer rather than by each screen remembering to — one company cannot read another's documents. Within a company, what a person sees is bounded by their role and their site. Traffic runs over TLS, passwords are stored as salted hashes and never in readable form, and document access is logged. We do not claim a certification we have not obtained: DocVigia is not, at the date of this notice, ISO 27001 or SOC 2 certified.

No system is immune. If a breach materially affects your rights we will notify you without delay, describing what happened and what you can do, as the Reglamento requires.

Retention

Fleet content is kept for as long as the subscription is active. After it ends the data stays available for export for 30 days, and is then deleted from live systems; backups age out on their own cycle within 90 days. Document versions are kept deliberately — an auditor's question is what was valid on a given date, which cannot be answered if renewals overwrite what they replace. Server logs are kept for up to 12 months. Billing records are kept for the period Mexican tax law requires.

Cookies

The application uses cookies and browser storage to keep you signed in, to remember your language, and to hold the session while you work. These are necessary for it to function; blocking them will sign you out. We do not run advertising trackers or third-party profiling scripts on this site.

Minors

DocVigia is a workplace tool and is not directed at anyone under 18. We do not knowingly create accounts for minors.

We may amend this notice as the product, the law or our suppliers change. The current version always lives at this address, carrying its version number and date at the top. Where a change is material we will also notify account holders by email before it takes effect.

If you believe your right to data protection has been infringed, you may file a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI). We would rather hear from you first — write to [email protected] and we will answer.