Privacy notice
In short
SignSolú processes personal data to provide its e-signature service.
The controller is SOLUCIONES ORIENTADAS AL BIENESTAR DE LAS PERSONAS SOLU S.A.P.I. de C.V., a Mexican company.
Data is hosted in the United States with providers under contract.
SignSolú does not sell personal data or use it to train models.
To exercise your rights write to rodrigo@solufintech.com.
1. Who the controller is
The controller is SOLUCIONES ORIENTADAS AL BIENESTAR DE LAS PERSONAS SOLU S.A.P.I. de C.V. with tax ID SOB240719U87.
Its address is Avenida del Valle 162, Ciudad del Valle, 63157 Tepic, Nayarit, Mexico.
The privacy officer is José Rodrigo Barrios Villa.
The privacy inbox is rodrigo@solufintech.com.
When a Customer uses SignSolú to collect signatures they control that data.
SignSolú acts as processor under the Data processing agreement.
2. Data we process
- Identity and contact. Name, email, phone and company.
- Signature and evidence. Drawn signature, IP, dates and times, device and SHA-256 hash.
- Signer ID. ID card and supporting documents when the Customer requests them.
- Technical data. Browser, language and pages visited. Part of it is stored in cookies.
- Billing. The Customer’s tax data. Cards are handled by the payment processor.
SignSolú does not ask for sensitive data.
A drawn signature and a photo with an ID may count as biometric data.
SignSolú keeps them in the evidence file and runs no facial recognition.
3. Purposes and legal basis
- Provide the signing service under the contract.
- Keep the evidence of each signature under legal obligation and legitimate interest.
- Send service notices under the contract.
- Invoice and meet tax duties under legal obligation.
- Support users and improve the Platform under legitimate interest.
- Send product news only with your consent.
You can withdraw marketing consent at any time.
Withdrawing it does not affect the core service.
4. How long we keep data
Account data and documents are kept while the account exists.
Signed documents stay available after a subscription is cancelled.
If you request deletion the data is blocked and then deleted.
Some data is kept longer when a law requires it.
Examples are invoices and the evidence of a disputed signature.
5. Who we share data with
We share it with the subprocessors that run part of the service.
Each one processes data under contract and only on our instructions.
We also disclose it to an authority with a valid legal request.
In a merger or sale the buyer must honor this notice.
SignSolú does not sell personal data.
6. International transfers
Data is hosted and processed in the United States.
For the EU and the UK we use standard contractual clauses.
For Brazil we use the clauses recognized under the LGPD.
7. Security
We encrypt traffic with TLS and stored data with AES-256.
Documents sit in private storage behind signed temporary links.
Each account is isolated from the others in the database.
We review these measures on a regular basis.
If an incident happens we notify you within the deadlines of your local law.
8. Your rights by region
Mexico
You have rights of access, rectification, cancellation and objection.
We answer within 20 days and act within 15 more days.
The authority is the Ministry of Anti-Corruption and Good Governance.
European Union and Spain
The GDPR gives you rights of access and rectification.
It also gives you erasure, restriction, portability and objection.
We answer within one month, extendable by two months in complex cases.
You can complain to your local authority, the AEPD in Spain.
United Kingdom
The UK GDPR gives you the same rights as the EU regulation.
You can complain to the Information Commissioner’s Office.
Brazil
The LGPD gives you rights of access, correction, deletion and portability.
José Rodrigo Barrios Villa handles your requests at rodrigo@solufintech.com.
You can complain to the ANPD.
United States
If your state law grants access or deletion rights we honor them.
SignSolú does not sell or share data for cross-context advertising.
India
We handle requests under the Digital Personal Data Protection Act of 2023.
9. How to exercise your rights
Write to rodrigo@solufintech.com with your name and a way to reply.
Attach an ID and describe the data and your request.
If you signed for a Customer you can also write to them.
The process is free.
10. Changes to this notice
Material changes are announced by email before they take effect.
This page always shows its effective date.
11. Governing law
This notice is governed by the laws of Mexico.
Disputes are resolved before the courts of Tepic, Nayarit.
The rights your local law grants you still apply.
12. Language
If the versions differ the Spanish version prevails.
Frequently asked questions
Where does SignSolú store data?
In the United States, with providers under contract. For the EU and the UK it uses standard contractual clauses.
Does SignSolú sell personal data?
No. It does not use it to train models either.
Published by SignSolú, a Mexican e-signature platform that works over WhatsApp.