Legal

Privacy Notice

What data we handle, what we use it for, who we share it with, and how we delete it.

Last updated: 3 October 2026

Who answers for your data

Denumeris Interactive SC, a Mexican digital marketing agency, is responsible for the personal data it handles and for complying with this notice.

You can reach us at hola@denumeris.com and +52 55 5664 3171.

What data we collect

We collect two kinds of information, by different routes.

From people who visit the site or write to us: name, email, phone and company when you fill in the contact form. Also aggregated browsing data that does not identify you.

From the accounts we operate: when a client hires us to run their account on Amazon, Meta, Google or TikTok, they authorize us to read that account's information through each platform's official API. The client grants that authorization from their own account and can revoke it at any time.

What we use it for

We use the information for these purposes and no others:

  • Answering what you ask and following up.
  • Running the account the client put in our hands: listings, inventory, pricing, campaigns and shipping.
  • Building the performance reports we deliver to each client.
  • Invoicing and meeting tax obligations.

Information obtained from Amazon

When a client authorizes us on Amazon, we read their selling and advertising account information through the API: orders, inventory, pricing, Buy Box position, financial reports and campaign performance. We use it only to run that account.

For orders the client ships themselves, the API returns the buyer's name, address and telephone. The carrier prints them on the label and needs them to deliver the parcel: without them there is no label. We request them at the moment of generating it, use them to produce it, and discard them when it is done. We do not write them to a database, to files or to logs, and the application offers no way to export them.

We never use Amazon information for advertising outside the account that authorized it, to build audiences, to resell it, or for any purpose other than running that account. Nor do we obtain it from outside sources: only from Amazon's APIs.

If the client revokes the authorization or ends the contract, we delete all Amazon information within the following 30 days.

Who we share it with

With the providers that host and process the information on our behalf, under contract: Vercel for hosting, Supabase on AWS for the database, and 1Password for credential storage. We assess each one's risk once a year.

For shipping, we pass the carrier chosen by the seller the data it needs to deliver the parcel.

With no one else, unless the law requires it. We do not sell data, we do not trade it, and we do not build profiles of people to resell.

How we protect it

Everything travels encrypted with TLS 1.2 or higher, and what we store is encrypted with AES-256.

Each person signs in with their own account and mandatory second factor, holding the permissions their job asks for and no more. Credentials live in an encrypted manager, never in the code.

On a security incident we notify those affected and the relevant platform within 24 hours of detecting it.

How long we keep it

Contact data, for as long as the relationship lasts and three years more, for tax obligations.

Information from the accounts we operate, for as long as the contract lasts.

Amazon buyer personal data is not kept: it is discarded when each label is done.

When the relationship ends we delete everything within the following 30 days.

Your rights

You can ask us to access your data, correct it, cancel it, or object to our using it. These are the ARCO rights recognized by Mexico's Federal Law on Protection of Personal Data Held by Private Parties.

Write to hola@denumeris.com with your name, proof of identity and what you are asking for. We answer within twenty business days.

You can also withdraw your consent whenever you want. If you are a client and want to cut our access to your Amazon, Meta, Google or TikTok account, you do it from your own account and the cut is immediate.

If our answer does not satisfy you, you can take it to INAI, Mexico's data protection authority.

Requests from public authorities

If a public authority asks us for personal data, we first check that the request is lawful and comes from someone empowered to make it. If it is not, we challenge it.

When it applies, we disclose only the minimum the request requires, and we keep a record of the request, our answer and the legal basis.

Changes to this notice

If we change this notice, we publish the new version on this page with its date. We email active clients about substantive changes.

Contact

Any question about this notice goes to hola@denumeris.com or +52 55 5664 3171.

hola@denumeris.com