Privacy Policy

José Antonio Jiménez Aldana, trading as JAANTONIO, operates Transitive and is responsible for your personal data. Address: Col. Ciudad del Sol, C.P. 76116, Querétaro, Qro., México (full address on request). Contact: support@transitive.app.

Responsible party. For the data of people who contact us and of our customers’ users, we decide how the data is used.

Processor. Our customers send us fiscal documents that contain personal data of their own clients and suppliers, such as names, tax IDs (RFC) and addresses. We process that data only on our customer’s instructions (as an encargado). Our customer is responsible for it, and requests about it go to them.

• Contact form: name, work email, company, role and your answers about how your team works.
• Account: name, work email, company, role and permissions.
• Sign-in and security: sign-in codes, sessions, IP address, browser and device type, dates of access, and a browser fingerprint on the sign-in page that we use only to block bots and automated abuse.
• Fiscal and operational data from CargoWise and your settings: invoices, receipts, payments, shipment references, tax IDs, names, addresses, amounts and your digital seal certificate (CSD).
• Assistant: the questions your team asks and the answers.
• Billing: billing contact and payment records. Stripe processes card numbers; we do not see or store them.
• Usage: pages and features used in the Workspace, and error reports.

We do not ask for sensitive personal data, such as health, religion, political views or biometrics. Please do not send it to us.

We use personal data only for these purposes, which are needed for the Service:

• Answer your inquiry and prepare a proposal.
• Create and secure accounts and sign people in.
• Receive, check, stamp and return fiscal documents, and keep their history.
• Answer questions through the assistant.
• Bill, collect payments and issue our own invoices.
• Give support, send service notices, and find and fix errors.
• Comply with the law and respond to authorities.

We do not use personal data for advertising, we do not sell it, and we do not use it for any secondary purpose. If that ever changes, we will ask for your consent first.

The assistant sends the relevant documents and the question to Google’s Gemini API to produce an answer. Neither we nor Google train AI models on your data.

We share personal data only with the providers below, and only to run the Service:

• Cloudflare (United States): hosting, file storage and logs.
• PlanetScale (United States): databases.
• Facturapi (Mexico): the PAC that stamps CFDIs and sends them to the SAT.
• Google, Gemini API (United States): the assistant’s AI model.
• Stripe (United States): card payments.
• Better Auth: sign-in protection against bots and automated abuse.
• Resend (United States): sign-in codes and notification email.
• Sentry (United States): error monitoring.

Each provider may use the data only to provide its service to us. When a CFDI is stamped, the PAC sends it to the SAT, as the tax law requires. We also share data with authorities when the law requires it.

These transfers are needed to perform our contract with you or to comply with the law, so the LFPDPPP does not require your consent for them.

Several providers store or process data in the United States. We choose providers that protect data at least as well as this policy requires.

• This website uses no cookies and no tracking.
• The Workspace uses cookies only to keep you signed in and to finish sign-in safely. They are needed for it to work.

• Account and fiscal data: while your contract is active and up to 5 years after it ends, so you can recover your fiscal records. After that we delete it.
• Contact form answers from people who do not become customers: up to 2 years.
• Earlier deletion: your company can ask us in writing to delete its data sooner. We do it within 30 days, except what the law requires us to keep.
• Backups and logs expire on their own schedule after deletion.

We protect data with encryption in transit, access controls, separate databases for each customer and the security measures of our providers. No system is perfectly secure. If a breach significantly affects your rights, we will tell you without undue delay.

You can access, correct, delete or object to the use of your personal data (ARCO rights), revoke your consent, or limit how we use or share it. Email support@transitive.app with:

• Your name and an email to answer you.
• A document that proves your identity, or that of your representative.
• A clear description of the data and the right you want to exercise.

We answer within 20 business days and, if your request is valid, apply it within 15 business days after we answer. If the data belongs to one of our customers’ documents, we send your request to that customer.

If you think we did not respect your rights, you can contact the Mexican data protection authority.

The Service is for businesses. It is not for people under 18.

We will post any change here and update the date at the top. If a change is material, we will also email account owners before it applies.