Your contacts, protected as if they were ours.

Who is who

When you load your prospects’ and customers’ data into PAWWER —or it arrives through the channels you connect—, your business is the controller of that data and Pawwer S.A.S de C.V. is the processor: it handles the data on your behalf, following your instructions and only to provide the service, under Mexico’s Federal Law on the Protection of Personal Data Held by Private Parties and its regulations.

This agreement is part of the terms and conditions and you accept it when you create your account. The data of your own account —your name, your email, your plan— is handled by PAWWER as controller, as described in the privacy policy.

Which data and what for

The data of your contacts that enters PAWWER: name, phone, email, approximate location, form answers, messages and conversations from your channels, your team’s notes, appointments, visits, quotes, contracts and the files you upload.

We process it to: receive and reply to messages from your connected channels, organize them in your CRM, schedule appointments, prepare quotes and contracts, measure your results and —only if you turn it on— let the AI assistant reply to and qualify your prospects.

PAWWER does not use your contacts’ data for its own purposes: it does not sell it, does not share it for advertising, does not use it to write to them on its own and does not use it to train artificial intelligence models.

Your instructions

You decide which channels you connect, which contacts you load, which automations you turn on and who on your team sees what. Those decisions, made in the application, are your instructions.

If an instruction seems unlawful to us, we tell you before following it. You are responsible for having the consent or legal basis to process your contacts’ data and to write to them on each channel.

Confidentiality and who can get in

Only the PAWWER staff who operate the service can enter an account, and they do so to give support, fix failures or comply with the law. Customer service staff enter only while handling a ticket of yours that you verified with a code.

Everyone at PAWWER with access is bound by confidentiality, also after they stop working with us. Every entry into your account is logged, and you can check it in “Who has seen your data”.

How we protect it

Mandatory two-step verification for every person; only the devices the account authorized can get in; each business is isolated from the others in the database, so no account can read another’s data; files live in private storage and are shared through links that expire; connections are encrypted and the data is stored encrypted by our database provider.

We review these measures when the product changes or a new risk appears. No measure is infallible: that is why the security breach section below exists.

Providers that process data for us (sub-processors)

Supabase — database, sign-in and files (United States).

Vercel — application hosting (United States).

Anthropic — the artificial intelligence model that drafts the assistant’s replies and reads inspiration images, only when you use those features (United States). Under its commercial terms, it does not use what we send it to train its models.

Zernio — the bridge with WhatsApp, Instagram, Messenger and the other networks you connect: messages from those channels go through its service.

Kie.ai — AI image generation: it receives the design instruction and the photos you choose, not your contacts’ data.

Resend — system emails, such as authorizing a new device; they go to the people on your team, not to your contacts (United States).

OpenFreeMap — map tiles; it receives no data about your contacts.

Dodo Payments — bills your subscription as authorized reseller; it receives no data about your contacts.

The platforms you connect (Meta, WhatsApp, Google, TikTok and others) are not PAWWER sub-processors: they are your services, with their own terms and their own responsibility for what they process.

If you choose a Meta pixel in Connections, PAWWER tells Meta, through Zernio, when one of your leads arrives, books an appointment, shows up or closes, so your ads find more people like those who actually buy. Each notice carries the lead's email, phone and name encrypted (SHA-256) — never in plain text — and, if they came through a Meta form, that form's identifier. It only goes to the pixel of your own ad account, and you turn it off by removing the pixel in Connections.

If we add or change a sub-processor, we publish it on this page with its date at least 15 days before it starts processing data. If you have a reasonable objection, write to cuentamelo@pawwerapp.com: we work it out with you or you can cancel without penalty.

Transfers outside Mexico

Several sub-processors are outside Mexico, mainly in the United States. Those transfers are necessary to provide the service you purchase, and we contractually require each provider to offer a level of protection equivalent to this agreement.

Your contacts’ rights

If one of your contacts exercises their rights of access, rectification, cancellation or objection, or withdraws consent, you are the one who answers them. From PAWWER you can look up, correct, export and delete their data.

If the request reaches us, we pass it on to you without answering it on our own. And if you need help handling it, write to cuentamelo@pawwerapp.com: we reply within 20 business days.

If something fails: security breaches

If we confirm a breach affecting your contacts’ data, we notify you without delay and no later than 72 hours after confirming it: what happened, which data was affected, what we did and what we recommend. That way you can notify your contacts when the law requires it.

We document every incident and what we changed so it does not happen again.

How long we keep it

While your account is active. If you close it, your contacts’ data is deleted within the following 90 days, except what the law requires us to keep. Before closing it you can export it from the application.

If you ask us to delete something sooner, we do it, unless the law requires us to keep it.

Reviews and accountability

We give you the reasonable information you need to verify that we comply with this agreement: once a year, or when an authority requires it, without affecting operations or the confidentiality of other businesses. Write to cuentamelo@pawwerapp.com.

Term

This agreement lasts as long as you use PAWWER. The confidentiality and deletion obligations remain in force after it ends.

AI-generated content and copyright

AI-generated content. Pawwer uses AI tools to generate text, images and videos. Under copyright law in Mexico and other jurisdictions, including the United States, protection is granted to works created by people. Content generated entirely by AI may therefore be ineligible for registration or copyright protection, and Pawwer does not guarantee exclusivity. Human creative contributions (substantial editing, selection, arrangement or integration into a larger work) may be eligible for protection. Users are responsible for reviewing generated content before publishing and verifying that it does not infringe third-party rights, trademarks or applicable advertising rules.