Privacy Policy

1. Who is responsible for your data

Sythera Labs is the data controller responsible for the personal data collected through this website. All privacy matters are handled by our privacy team, which you can reach at info@sytheralabs.com with any question about this policy or about how we handle your information.

2. What we collect

We collect two kinds of information:

• Information you give us: when you submit the contact form or email us, we receive your name, email address, company name if you provide one, and whatever you write in your message.
• Information collected automatically: if you accept analytics cookies, Google Analytics records pages viewed, approximate location derived from a truncated IP address, device and browser type, language, and how you arrived at the site.
• Server logs: our hosting provider records standard technical data such as IP address and request time for security and reliability purposes.

3. Why we use it

We use personal data only for the purposes below:

• To answer your enquiry and, if relevant, prepare a proposal for your project, a care plan, or a retainer.
• To arrange a discovery call or a product demo, such as a Suitera demo, when you ask for one.
• To keep a record of our commercial conversations with you.
• To understand which parts of the site are useful, so we can improve it. This purpose depends entirely on your consent to analytics cookies.
• To keep the site secure and operating correctly.

4. Legal basis and consent

When you send us a message, we process your data on the basis of your request and our legitimate interest in responding to it. Analytics cookies are set only after you accept them; no analytics cookie is written before you make a choice, and rejecting them has no effect on your use of the site.

We do not collect sensitive personal data, and we do not make automated decisions that produce legal effects about you.

5. Cookies and similar technologies

Necessary storage: we save your cookie choice in your browser's local storage so we do not ask again on every visit. This is required for the site to respect your decision and cannot be switched off.

Analytics cookies: with your consent, we use Google Analytics 4, which sets cookies to distinguish visitors and sessions. We run Google Consent Mode with analytics storage denied by default, IP anonymization enabled, and no advertising or remarketing features. We do not sell your data and we do not use it to build advertising profiles.

You can withdraw your consent at any time using the cookie settings link in the footer, or by clearing this site's data in your browser.

6. Who we share it with

We do not sell personal data. We share it only with service providers that help us run this site and our business, and only to the extent they need it:

• Vercel, which hosts the website and processes technical request data.
• Google, which provides Google Analytics, when you have accepted analytics cookies.
• Our email provider, which delivers and stores the messages you send us.
• Calendly, when you book a discovery call through it; Calendly collects your booking details under its own privacy policy.
• Authorities, where disclosure is legally required.

7. International transfers

Our providers may process data on servers outside Mexico, including in the United States and the European Union. When personal data is transferred, we rely on the provider's contractual safeguards, including standard contractual clauses where applicable.

8. How long we keep it

Enquiries and the related correspondence are kept for as long as the commercial relationship is active, and for up to twenty-four months afterwards so we can refer back to the conversation. Analytics data is retained by Google Analytics for fourteen months. Cookie preferences stay in your browser until you clear them.

9. Your rights

You have the right to access your personal data, to have it rectified if it is inaccurate, to have it cancelled or deleted, and to oppose specific uses of it. These are known as ARCO rights under Mexican law. Where GDPR applies to you, you also have the right to restrict processing, to receive your data in a portable format, and to lodge a complaint with your supervisory authority.

To exercise any of these rights, write to info@sytheralabs.com describing your request and how we can identify your records. We will reply within twenty days, as required by the LFPDPPP. You may also withdraw your consent to analytics at any time without giving a reason.

10. Security

We use encrypted connections (HTTPS), reputable providers, and access controls limited to the people who need them. No system is completely secure, but we take reasonable technical and organizational measures to protect your information, and we will notify you of a breach affecting your data where the law requires it.

11. Children

This site is aimed at businesses and is not directed at children. We do not knowingly collect personal data from anyone under 18. If you believe a minor has sent us information, contact us and we will delete it.

12. Changes to this policy

We may update this policy as our practices or the law change. The date at the top always reflects the current version, and material changes will be announced on this page. If a change affects how we use analytics, we will ask for your consent again.

13. Contact

Questions, requests, or complaints about this policy: write to info@sytheralabs.com and our privacy team will respond. If you are not satisfied with our response, you may contact Mexico's INAI or your local data protection authority.