Privacy Policy

Our Services

WATIVO by PYMEPASS offers a suite of social media management tools that can be accessed through our websites and mobile applications. These tools allow you to bring together all of your social media accounts for easy access and management through a single online platform. Through this platform, you can manage your social media, marketing, and advertising campaigns; engage with your audience; schedule and post messages; and analyze the results of these activities. Collectively, we refer to these tools as our “Services.” We act as a service provider to you when providing the Services.

All collection, use, and management of personal information by social media networks, including Facebook, Instagram, Twitter, and LinkedIn (collectively, the “Social Media Networks”) is governed by their respective privacy policies and terms. When using Social Media Networks, you must comply with their privacy policies and terms. We encourage you to carefully review their privacy policies and terms, as WATIVO by PYMEPASS is not responsible for Social Media Networks.

Our Services also allow you to customize and connect your WATIVO by PYMEPASS account to third-party services (“Third-Party Services”), including through applications that you may access in the Application Directory or that may be made available to you through our platform. The collection of your information by these third parties is governed by the privacy policies and terms of the Third-Party Services. We encourage you to carefully review their privacy policies and terms, as WATIVO by PYMEPASS is not responsible for Third-Party Services.

We rely on you to comply with applicable privacy laws when collecting, using, or disclosing information about individuals through the Services, including by obtaining necessary consents and providing necessary notices. If we receive any questions or complaints about your use of the Services, we will forward the request to you for further assistance.

Our Services are not intended for use by children and should only be accessed by individuals who are at least 18 years of age and who are using the Services for commercial purposes.

What information do we collect?

We collect information about you as reasonably necessary for the following activities:

Using our Services

We collect the following information when you use our Services:

Account Information:

• Your contact and profile information, including your name, email address, organization name, and address; your preferences, such as language, time zone, and the types of communications you wish to receive from us; and picture (if you choose to provide it). We may also obtain this information if you choose to use a social login service, such as Facebook Login, to create or access your account.

• Billing and other payment information (if you sign up for a paid service or purchase a Third-Party Service), including payment method details such as credit card number.

• The Services you have purchased from us, including plan type, number of team members, and transaction information related to the Services.

Content:

• Your social profile information for the social networks you choose to connect to the Services. For example, your Facebook profile information may include your Facebook username and profile picture.

• A specific location, such as an address, city, or place (for example, a restaurant) if you choose to share this information.

• Your messages, posts, comments, images, advertising, and other material that you select and upload to the Services; and information that is collected from the Social Networks you choose to connect to and that is displayed on our Services.

• Content that you may send and receive through Social Networks may contain personal information from third parties. This may include information such as: names, photos, age, gender, geographic location, opinions, preferences, and phone numbers that are provided or posted by social network users.

Logs, Usage, and Support Data:

• Log Data, which may include your IP address, the address of the web page you visited before using the Services, your browser type and settings, your device information (such as make, model, and operating system), the date and time you used the Services, information about your browser settings, language preferences, unique identifiers, and cookies.

• Usage and analytics data, which may include login frequency and the different types of activity engaged in by users, such as the areas of the Services visited and the type of activity visited.

• General location information, such as your IP address and the region you are in when you log in and use the Services, based on your device settings.

• Customer service questions, issues, and general feedback that you choose to provide.

Surveys, Events, Marketing, and Other Activities

Surveys, contests, events (such as webinars and in-person events) for those we host or are affiliated with:

• Contact information, such as your name, email address, phone number, organization name and address.

• Participation, attendance, feedback, and opinions.

• General information about your organization that you choose to provide, such as annual company revenue, number of employees, and industry. We may also use service providers to obtain additional business information about your organization, such as legal name, size, and publicly available revenue, to help us deliver services that are appropriate to your organization's needs.

Other Interactions:

• Social Media: Your messages, posts, and other interactions with our brand and social media accounts.

• Email interactions and analytics: Information about how you interact with our emails, such as email open and click rates, whether a link is clicked, what web pages are visited after opening the email, the type of browser and email clients you use, and general location (i.e., country and region).

• Teleconferencing, video conferencing, and other meetings: Your preferences, comments, feedback, and business needs.

• Access to resources (e.g., videos, white papers, or case studies) on our website: Your name and contact information, and engagement analytics, such as the type and frequency of resources accessed, viewed, and downloaded.

Browsing our websites

When you browse our websites, we collect information about you as described below, some of which is collected automatically:

• When you use the automated chat feature (chatbots) to make an inquiry, provide feedback, or make another request, we may collect information about you such as your name and email address, your specific comment or request, and information relating to your use of our Services.

• WATIVO by PYMEPASS and our authorized service providers use cookies and other similar tracking technologies on our websites and Services, including web beacons, pixels, and software tokens. These are described in our Cookie Notice.

• Aggregate website usage data, including form analytics data (such as time taken to complete form), engagement rate, session repetition, and mouse movements.

How do we use your information?

We use your information for the purposes described below:

Providing and securing our services

• We need to identify and authenticate our users to ensure, for example, that only authorized users can use the Services for your organization and make changes to their accounts.

• We use the information you provide when registering to set up your account, process payments, communicate with you regarding the Services, and manage your account.

• We use your contact information and information related to your request to respond to your inquiries, manage our contract with you, respond to your questions and requests, and send you updates and information about the Services.

• We use log data and other data, such as general location information (for example, the IP address of your browser or device), to help us manage the performance, security, and compliance of the Services.

• When you have chosen to share your specific location information, we will use such information to provide location-based features, such as allowing you to share your location in your social media posts that support this functionality and to use any functionality that relies on location information.

• We analyze usage information, your feedback, support queries, and survey responses to identify issues and help us understand how you use the Services so we can make improvements to our Services.

• We use Content, information you send and receive through Social Networks, and other information from Social Networks (such as your messages, posts, comments, images, advertising, and other material you select and upload to the Services) to provide the Services.

We use your contact information when appropriate to send you information about our Services, events, marketing communications (in accordance with your preferences; see “Marketing Emails, Advertising, and Website Navigation” below), and career opportunities.

We use email statistics, such as open rates, to evaluate the effectiveness of our communications and make improvements to them. We also use interaction analytics to better understand your needs so that we can provide you with information and services that are most appropriate for you.

Improving our websites and applications

We use information about you to help us understand usage patterns and other activities on our websites and applications so that we can diagnose problems and make improvements, including usability and security improvements. We also use website personalization software to help us present information on our websites that may be more relevant to you, such as displaying resources applicable to your industry or the size of your organization.

If you choose to provide information about yourself, your use of social media services, and other feedback during phone calls and other interactions with our sales and customer support teams, we may use, monitor, and record this information for training purposes, to make improvements to our internal sales and marketing processes, and to improve our Services.

What are your rights regarding information about you?

Service Information

By using our Services, you can access, update, or correct most of your Account information by logging into your account to edit your profile or organization record.

If you have requests that cannot be fulfilled by logging into your account, such as accessing additional information or deleting information about you, please email our privacy team. Please note that we may need to retain certain information about you for as long as you maintain an account for our Services, to provide our Services to you, for recordkeeping purposes, for payment processing, to comply with our legal and regulatory obligations, to resolve disputes, or to enforce any applicable terms of service or other agreement in effect between you (or your organization) and WATIVO by PYMEPASS (the "Terms of Service").

Requests to access, correct, update, or delete your information can be made in writing to our privacy team and will be handled within thirty (30) days, unless they are unusually extensive or complex, in which case we will inform you of the expected time frame for handling your request.

If you have authorized us to access your Social Network account to provide the Services, you may revoke this access at any time by following the instructions here. For example, if you have authorized us to access your information through the YouTube API services, in addition to our normal procedure for deleting stored data, you may revoke our access to your data through the Google security settings page, located here.

You may contact our support team for other general requests about your account through the preferred method listed here.

Marketing, Advertising, and Website Navigation Emails

For marketing communications, you may opt out of receiving marketing communications sent by WATIVO by PYMEPASS by accessing our Preference Management page, clicking the unsubscribe link in the marketing email you receive, or by completing the unsubscribe form. Please note that if you are a WATIVO by PYMEPASS user, unsubscribing from marketing communications will not affect WATIVO by PYMEPASS-generated emails sent in connection with your use of our Services.

WATIVO by PYMEPASS participates in interest-based advertising (where you may have visited our websites or another website that allows us to display advertising related to our Services). The Network Advertising Initiative has developed a tool that can help you understand which third parties have currently enabled cookies for your browser and how to disable them. For more information and to disable interest-based advertising, you can visit this page. For more information on how to disable marketing cookies, please review our Cookie Notice.

Who has access to your information?

WATIVO by PYMEPASS does not rent or sell your information. We restrict access to your information to authorized employees and do not share your information with third parties.

Our authorized employees and contractors may need to access information about you when they need it to perform their jobs. For example, a customer service representative would need to access your account to validate your identity and respond to your question or request; our email communications team would need to access your contact information to ensure this information is submitted correctly and that any unsubscribe requests are handled appropriately; and our security personnel would need to review the information to investigate attempted denial of service attacks, fraudulent account activity, or other attempts to compromise the Services.

All of our employees and contractors must agree to maintain confidentiality and protect the privacy of your information. Service Providers, Authorized Resellers, and Partners

We will share limited information about you with authorized service providers that we use for marketing, communicating with you, managing our customer database, providing professional services, and providing and managing the Services (including hosting data centers, securing our Services, and processing payments).

We limit the number of service providers that are permitted to process your Content in order to help us provide the Services. We refer to these service providers as “subprocessors” and they are listed on this page.

When you have purchased a service from an authorized reseller or partner, we may provide information about you to (and may receive information about you from) the reseller or partner as necessary to support your use of the service you purchased.

When sharing your information with any of the service providers, resellers, and partners listed above, we ensure that they agree to obligations consistent with this Privacy Policy and any other appropriate confidentiality and security measures, and only use your information to carry out the Services and your requests. We may also participate in and conduct marketing events (e.g., virtual conferences, webinars, and providing resources) with sponsors and other organizations. Where sponsors or other organizations wish to collect your information for their marketing purposes, while we may facilitate this (e.g., information may be collected on the same registration form), they will do so independently under their own policies. We will advise you and provide you with the opportunity to share your information with the sponsors or other organizations for such purposes, either at registration or during the event.

Social Networks and Third-Party Services

When you use our Services and have chosen to connect your Social Networks to the Services, or if you authorize a Third-Party Service to access your account, you agree to provide information about you to the Social Networks and Third-Party Services under their respective terms and privacy policies. For example, if you choose to connect your YouTube account to the Services, this connection uses YouTube API services and the Google Privacy Policy (found here) will apply to you.

Customer Organizations

Where your employer or an entity has purchased Services on your behalf, we may disclose information about you, such as your name and email address, and certain usage information, including whether a user has logged into the Service, login frequency, time spent using the Services, and enrollment in and completion of WATIVO by PYMEPASS Academy courses to help your employer or the entity manage your usage and maximize the value of the Services.

Successor and Affiliated Entities

We may share information about you among affiliates and subsidiaries controlled by WATIVO by PYMEPASS, and they will protect your information in a manner that is consistent with this Privacy Policy and, where applicable, in accordance with the entity's specific privacy policy.

We may also disclose your information as part of a corporate transaction, such as a merger or asset sale. If we do so, we will inform such entities of the requirement to handle your information in accordance with this Privacy Policy, or inform you that you are covered by a new privacy policy.

Law enforcement, government agencies and professional advisors

We may need to disclose information about you where we believe it is reasonably necessary to comply with a law or regulation, or if we are legally required to do so, such as in response to an order or legal process, or to establish, protect, or exercise our legal rights or to defend against legal claims or demands. For government data access requests that concern you or your organization, we will first attempt to direct the request to you and/or first attempt to notify you unless we are legally prohibited from doing so.

Additionally, we may disclose information about you if we believe it is necessary to investigate, prevent, or take action: (a) against illegal activities, fraud, situations involving potential threats to our rights or property (or the rights or property of those who use our Services), or to protect the personal safety of any person; or (b) with respect to situations involving the security of our Services, abuse of the Services' infrastructure, or the Internet generally (such as mass spam or denial-of-service attacks).

We also use professional advisors, including lawyers and accountants, and may be required to disclose information about you when we engage them for their services and as necessary for audits, financial reviews, and other regulatory reviews.

What international data transfers occur at WATIVO by PYMEPASS?

Under various data protection laws, information about you may only be transferred from your region to other regions if certain requirements are met. For example, our Services are managed by WATIVO by PYMEPASS headquarters in C.R. Under Mexican data protection laws, information about you may be transferred within Mexico.

WATIVO by PYMEPASS also uses third-party service providers, such as managed hosting providers, credit card processors, and technology partners, to facilitate the operation of the Services. These third-party providers may process or store personal data on servers within Mexico or abroad. We rely on legal mechanisms, such as standard contractual clauses, to ensure that information about you is transferred lawfully in compliance with Mexican law. In this case, we have implemented additional measures as described in the “How do we safeguard your information?” section.

The third-party service providers we use to help deliver the Services and process your Content are called “subprocessors” and are listed on this page.

Given the nature of social media data, it may be shared globally. The social media and third-party services you choose to integrate with our Services may collect, store, and process your information from multiple locations around the world in accordance with their own terms and privacy policies.

How do we safeguard your information?

WATIVO by PYMEPASS maintains industry-standard security measures to protect your information. This includes ensuring our employees receive appropriate security and privacy training and guidance so they are aware of the measures they should implement to protect your information.

Access controls are in place to limit access to your information to those who need it to perform their jobs. For example, information about you may be provided to our customer support specialists to assist you with your requests. Individuals permitted to handle your information must comply with confidentiality obligations.

We encrypt data in transit and at rest, where applicable, to ensure that your information is kept private. We conduct security and privacy reviews of service providers to ensure that they meet our strict requirements for safeguarding your information, and we also enter into data protection agreements with our service providers. All payment information is fully encrypted and handled only by PCI-certified organizations. More detailed information about our security practices is available on our Trust Center and on the WATIVO by PYMEPASS Security Practices web pages.

How long do we retain your information?

In general, WATIVO by PYMEPASS does not permanently store Social Media Content. Instead, when you log in to the Services, we retrieve data from Social Media in real time to be displayed on the platform for you to view during your session. We store other Content that you produce (such as drafts of Content to post on Social Media) so that you can easily access this material on the Services. Messages in the Inbox are stored for 6 weeks to allow you to take any necessary action, such as replying to the messages.

WATIVO by PYMEPASS analytics products, such as Analytics and Insights, will store mentions relating to our clients from social media audiences for up to 25 months to allow our clients to perform trending and analysis (see, for example, WATIVO by PYMEPASS Metrics library).

WATIVO by PYMEPASS uses aggregated data for analytics, product improvement, and troubleshooting purposes. In some cases, Content may continue to exist on Social Networks even after you or we remove it from our Services, and you will need to contact the relevant Social Network directly if you wish to have this Content removed.

We retain your information for as long as necessary to provide the Services you requested, for record keeping purposes, to comply with our legal obligations, resolve disputes, and enforce the terms of the Services. Once it is no longer necessary for us to retain information about you, or at your request, we will securely delete or anonymize it.

WATIVO by PYMEPASS's Roles Under M.H. and C.R. Data Protection Laws

Depending on the situation and the type of data involved, WATIVO by PYMEPASS may act as a data controller or data processor.

WATIVO by PYMEPASS as a Data Controller

WATIVO by PYMEPASS acts as a data controller when:

• Collecting information from you to set up and manage your WATIVO by PYMEPASS account (for example, account information such as your name and email address);

• Monitoring usage information on our website;

• Managing your contact and other related information to send you marketing, Services, and other communications;

• Responding to a support or general inquiry; and

• Recruiting people for job opportunities.

Legal bases for processing when WATIVO by PYMEPASS is a data controller

The legal bases for processing information about you include:

• Your consent (for example, where you have provided your information to register for an account or for a webinar; or you have provided your employment history when applying for a job). Where we rely on your consent to process personal data, you have the right to withdraw your consent at any time.

• It is necessary to perform a contract (for example, we may need your information to fulfil our obligations to provide Services to you under the terms relevant to the Services you have purchased).

• Legitimate interest (for example, to provide, maintain and improve the Services for you, to keep the Services secure, and to attract new customers to maintain demand for the Services, all of which are described in the “How do we use your information?” section above).

• In some cases, we may have a legal obligation to process your personal data to comply with relevant laws (for example, to process payroll and tax information to comply with relevant employment and tax laws); or the processing is necessary to protect your vital interests or those of another person (for example, obtaining health-related information during a medical emergency).

Your rights when WATIVO by PYMEPASS is a data controller

Where WATIVO by PYMEPASS acts as a data controller, we have outlined certain rights in the section “What are your rights with respect to information about you?”.

In addition, you may have the following rights:

• Right to object to processing: You can request that WATIVO by PYMEPASS stop processing information about you (for example, to stop sending you marketing communications).

• Right to restrict processing: You can request that we restrict the processing of information about you (for example, where you believe this information is inaccurate).

• Right to data portability: You can request that we provide you with the information that WATIVO by PYMEPASS holds about you in a structured, machine-readable and commonly used format, and you can request that we transfer this information to another data controller.

• If you would like assistance with any of the above requests, please email our Privacy team with the details of your request so we can consider how we can assist you.

WATIVO by PYMEPASS as a data processor

When you use our Services and make choices about what personal data is processed (including selecting which social media accounts you wish to connect to or uploading and using content), you act as a data controller and WATIVO by PYMEPASS acts as a data processor.

There are certain obligations under Mexican data protection laws that you have as a controller, and the processing of data, including the management of Content on the Services. As a data processor, WATIVO by PYMEPASS will only access and process Content to provide you with the Services in accordance with your instructions (provided through the Services), the Terms of Service, Social Media terms, and applicable laws. As part of providing the Services, we may process Content to improve usability and develop new features.

If you, as a data controller, require WATIVO by PYMEPASS to comply with data protection requirements set forth by applicable laws, WATIVO by PYMEPASS makes available to you a data processing addendum that complies with these requirements. Please email your customer data (organization name and plan information) with your request to our Privacy Team. If you use the Services as an authorized user of a WATIVO by PYMEPASS customer, that customer determines its own policies (if any) regarding storage, access, modification, deletion, sharing, and retention of personal data and Content, which may apply to your use of the Services. Please check with that customer about the policies and settings it has in place.

Changes to this Privacy Policy

We may make changes to this privacy policy at any time to reflect updates to our Services, applicable laws, and other factors. We will include a prominent notice on this website and/or our Services if we make any material changes, but we encourage you to stay informed by reviewing this policy periodically.

How to Contact Us

If you have any questions, concerns, or comments, please feel free to contact us at w@wativo.com or via WhatsApp at +1 920-828-6435

Wa.me/19208286435

If we are unable to resolve your concerns, you also have the right to contact your local data protection authority.