Privacy notice

1. Who is responsible for your data

DataRev — Data Revolution (“DataRev”), based in Mexico City, Mexico, is the controller of the personal data collected on this site, under Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).

For anything related to this notice you can email hello@datarev.solutions or call +52 (55) 9199-6815.

2. What data we collect

We collect only what you give us and what is needed to run the assessment. We do not collect sensitive personal data: we do not ask for health information, ethnic origin, beliefs, union membership, sexual preferences or biometric data.

• Identification and contact: name, email address, phone (if you provide it), and profile photo when you sign in with Google.
• Work details: company, job title, industry and organisation size.
• Assessment answers: your responses, the calculated maturity level, dimension scores and the gaps identified.
• Session requests: the type of session, your preferred time and any message you write us.
• Usage data: navigation events (which sections you opened), a session identifier, and campaign parameters (UTM) showing how you reached the site. These do not include your email.
• Subscription data: if you buy a plan we store your Stripe customer identifier, the plan and its period. Your card details are processed by Stripe directly — DataRev never receives or stores them.

3. What we use your data for

Primary purposes, necessary to provide the service:

• Create your account, authenticate you and keep your session active.
• Calculate your maturity level, generate your report and let you retrieve it later.
• Handle your session requests with a consultant and coordinate scheduling.
• Process your payment and grant access to the plan you purchased.
• Send you transactional email: registration and request confirmations, and your report.
• Understand which sections are used, through aggregate metrics, to improve the tool.

4. Secondary purposes and how to opt out

With your consent, we use your email to send you content about data and AI and to tell you about DataRev's services. This purpose is not necessary for the assessment: you may refuse it and still use the tool normally.

To opt out, leave the communications checkbox unticked when you register, use the unsubscribe link in any email, or write to hello@datarev.solutions. Refusing does not affect the service or any access you have paid for.

5. Who we share your data with

We do not sell your data. We share it only with the providers that make the service work, each limited to the stated purpose. These providers run servers outside Mexico — mainly in the United States — so there is an international transfer of data that you accept by using the site.

• Supabase — database and authentication. Stores your data in the us-east-2 region (United States).
• Google — solely to verify your identity when you sign in. We receive your name, email and photo; Google does not receive your assessment answers.
• Stripe — payment processing. Receives your billing and card details directly from you.
• Resend — transactional email delivery.
• Calendly — session scheduling, when you choose to book one.
• Vercel — site hosting and aggregate usage metrics.
• Competent authorities, where there is a duly founded legal requirement.

6. Your ARCO rights

You have the right to Access your data, Rectify it if inaccurate, Cancel it when you consider it unnecessary, and Object to its use for specific purposes. You may also revoke any consent you gave us.

Send your request to hello@datarev.solutions with your name, a contact method, a clear description of the data and the right you wish to exercise, and proof of identity. We will respond within 20 business days at most and, where the request is well founded, act on it within the following 15 business days.

If you believe your right was not honoured, you may turn to the Secretaría Anticorrupción y Buen Gobierno, the competent data protection authority since the 2025 law took effect.

7. How long we keep your data

We keep your data while your account is active and for as long as needed to fulfil the purposes in this notice. If you close your account we delete your contact details and your answers, except records we must retain for tax or legal obligations — mainly payment receipts.

8. Security

We apply administrative, technical and physical measures proportional to the risk: encryption in transit, row-level access control in the database, and writes through narrowly scoped functions that prevent one visitor from reading another's data. No system is infallible, but if a breach materially affecting your rights occurs, we will tell you.

9. Cookies and local storage

We use a session cookie to keep you signed in and browser local storage to hold your assessment progress before you register, so you do not lose your answers. We use no advertising or cross-site tracking cookies. You can clear them from your browser at any time; doing so loses unsaved progress.

10. Changes to this notice

We may update this notice when our practices or the applicable rules change. The current version is always published on this page with its update date. If a change materially affects how your data is used, we will notify you by email before it takes effect.