Acteva
ES EN

Privacy notice

Last updated: October 15, 2026

This English version is provided for convenience. If there is any difference, the Spanish version prevails.

This notice explains what personal data we process at Acteva, what we use it for and how you can exercise your rights, under Mexico’s current Federal Law on the Protection of Personal Data Held by Private Parties. It also describes the rights of people who live in the United States.

1. Data controller

Acteva, based in Mexico City, Mexico, is responsible for processing the personal data described in this notice. Contact: contactoacteva@gmail.com or (+52) 55 3486 1351.

2. Data we process

  • Identification and contact: name, email address, company name and, if you choose to add it, phone number.
  • Account: login credentials. Passwords are stored encrypted by our authentication provider; we cannot see them.
  • Operations: what you and your team record in Acteva: equipment, customers, reports, work orders, readings, notes, photos, sign-off signatures and other evidence. This may include names and contact details of people at your company or your customers.
  • Technical data: IP address, browser type and access logs generated by our infrastructure providers for security.
  • Security and consent records: who joins a company, changes role or leaves, which histories are shared, who downloads the company’s data, and the date and version of these documents you accepted.

We do not request sensitive personal data. Please do not record it in Acteva.

3. What we use it for

We use your data for these purposes, which are necessary to provide the service:

  • Creating and managing your account and your company’s account, and verifying your identity when you log in.
  • Storing, displaying and organizing the information you record, and generating alerts about your equipment.
  • Interpreting written reports and suggesting records, including the use of artificial intelligence when it is enabled.
  • Sending you service emails, such as account confirmation or password recovery.
  • Keeping the service secure and fixing problems.

We do not currently use your data for secondary purposes such as advertising or marketing. If we ever want to, we will tell you first and you will be able to say no.

4. Who we share it with

We do not sell or rent your data. To run Acteva we use providers that process data only on our behalf and according to our instructions:

  • Supabase: database, authentication and file storage.
  • Vercel: hosting for the website and the app.
  • Anthropic: processing the text of reports when AI interpretation is used.

These providers may store or process data outside Mexico, mainly in the United States. We would only share data with other third parties when required by a competent authority under the law.

5. Your rights

You have the right to access, rectify and cancel your data or object to its processing (ARCO rights), as well as to withdraw your consent and limit its use or disclosure.

If you have an account, you can exercise them in the app, under Team › Privacy and data: there you can correct your profile, make your request (know what data we have, correct it, object to a use or delete your account) and see its status. The owner and admins can also download all of the company’s data in a file. You can also write to contactoacteva@gmail.com with your name, your account email and your request.

We verify that the request comes from the data subject (for example, from their account or registered email) and respond within 20 days. If it is granted, we carry it out within 15 days of our response.

6. Your company’s information

When your company records data about people (for example, its technicians or customers), the company decides what is recorded and is responsible for having the necessary authorizations. For that information, Acteva acts as a processor: it processes it only on the company’s behalf and to provide the service. We offer companies a data processing agreement that formalizes these obligations; request it at contactoacteva@gmail.com.

7. Cookies and similar technologies

The website does not use advertising or tracking cookies. The app stores your session and preferred language in your browser so it can work. The website loads fonts from Google Fonts and images from Unsplash; these services receive your IP address when displaying them.

8. Retention

We keep data while your account or your company’s account is active. When an account or company is deleted, we erase its data from the live database within 30 days; backups are erased according to their rotation cycle. We only keep data longer when a law requires it, blocked and not used for anything else.

9. Security and breaches

We protect information with encrypted connections, our providers’ encryption at rest, encrypted passwords, separation of each company’s data at the database level, access roles and a security log that no one can edit or delete.

If a security breach significantly affects your rights, we will tell you without delay what happened, which data was affected, what we did and what you can do to protect yourself. We will also notify authorities when the law requires it.

10. If you live in the United States

We do not sell your data or share it for targeted advertising. You can ask to know what data we have, correct it, delete it or get a copy, through the same channels described in “Your rights”. We will not treat you differently for exercising these rights. If you disagree with our response, you can ask us to review it by writing to contactoacteva@gmail.com.

11. Changes to this notice

We will publish any change on this page with its update date. If the change is significant, we will also let you know by email or in the app.

12. Authority

If you believe your right to the protection of personal data has been violated, you may contact Mexico’s Secretaría Anticorrupción y Buen Gobierno, the authority on the matter, or the relevant authority where you live.