Privacy notice

1. Who is responsible

ZENBIT S.A.S. DE C.V. (“Zenbit”), domiciled in Santiago de Querétaro, Querétaro, México, is responsible for the processing of your personal data.

Contact for anything in this notice: hola@zenbit.mx

2. What we collect

From you, only what you type into the contact form, and only when you submit it — plus one thing you don't type:

• Name
• Organization
• Email address, so we can reply
• Your context — what you are building or running
• What you expect from working together
• Your IP address — not typed, but visible to our host as part of the request, as on any website. We use it only to limit automated abuse of the form. It is never attached to your message and we never store it ourselves.

3. What not to send us

Please don't send sensitive personal data, financial or patrimonial data, or anything about minors. We don't ask for it and have no use for it. The two message fields are free text, so nothing stops you from typing it — but if it reaches us, we delete it.

The same applies to confidential material. This is a first contact, not a protected channel: your message passes through our email providers and lands in an ordinary inbox. Describe what you are working on in general terms, and keep the specifics — unpublished inventions, trade secrets, anything you would normally put under a confidentiality agreement — until there is an agreement to hold them under.

If you send something confidential anyway, we will handle it carefully, but receiving it does not place us under a duty of confidence, and it gives you no claim over work we are already doing or may take on later. We work in a narrow field, and the problems in it resemble each other.

4. Why we use it

Necessary purpose, and the only one: to read your enquiry, reply to it, and where relevant continue the conversation about working together.

There are no optional purposes. We do not send marketing, build profiles, or add you to any list.

This notice is linked from the form, so you can read it before sending anything. Submitting the form is how you consent to what it describes, and you can withdraw that consent at any time (section 7).

5. How long we keep it

There is no server-side storage: the form does not write to any Zenbit database, and nothing is retained by the site itself.

The resulting email stays in the hola@zenbit.mx inbox for up to 24 months, after which it is deleted. You can ask us to delete it sooner at any time (section 7).

Resend keeps its own copy for about 30 days (section 6). If we end up in a conversation, those emails live in the same inbox under the same 24-month limit.

6. Who processes it on our behalf

We do not sell, rent or share your data, and we transfer it to no third party. Three service providers handle it on our behalf, each strictly as a processor acting on our instructions:

• Resend, Inc. (United States) — delivers the message. It retains delivery logs and message content for approximately 30 days.
• NEUBOX Internet, S.A. de C.V. (México) — hosts the hola@zenbit.mx mailbox that receives your message.
• Vercel Inc. (United States) — hosts this site and serves the form endpoint.

7. Your ARCO rights

You may at any time request access to your personal data, ask us to rectify it if it is inaccurate, request its cancellation, or object to its processing. You may also withdraw consent, or ask us to limit its use and disclosure.

Write to hola@zenbit.mx from the address you used in the form, and tell us which right you are exercising and what you want done. Since we hold nothing but the message itself, that address is how we confirm the request is yours — if you write from another address we will ask for something that establishes your identity first, so that nobody can obtain or delete someone else's enquiry.

We will tell you our decision within the period the law sets — twenty days from when we receive the request — and where we grant it, we will act on it within the fifteen days after that. Exercising these rights is free.

8. Cookies and local storage

One cookie, and it is functional: NEXT_LOCALE, which remembers your language for a year. It holds no personal data and is not used for tracking.

Two values are kept in your browser's local storage — your colour theme and your reduced-motion preference. They never leave your device and are never transmitted to us.

There is no analytics on this site, no tracking pixels and no third-party cookies. Nothing here profiles you or follows you elsewhere.

9. Security

The form is transmitted over an encrypted connection. Because nothing is stored server-side, there is no Zenbit database holding your message; the copy that persists is the email in the inbox. Automated abuse is limited by a honeypot field, a signed timing token and a per-address rate limit. Access to the receiving inbox is restricted.

10. Changes to this notice

Any change is published on this page, and the date at the top is updated to match. Material changes affecting how we use your data will be described here rather than applied silently.

11. Supervisory authority

If you believe your right to the protection of personal data has been infringed, you may bring the matter before Mexico's supervisory authority for data protection. Since 2025 that function sits with the Secretaría Anticorrupción y Buen Gobierno, which took it over from the extinct INAI.