ESEN
Request a demo

This English version is provided as a courtesy translation. The Spanish version is the legally binding document under applicable Mexican law.

Privacy Notice and Personal Data Protection

Last updated: July 2026

Primavatech Innovación y Desarrollo, S.A. de C.V. (hereinafter, "Klya.ai" or the "Data Controller"), domiciled in Guadalajara, Jalisco, Mexico, owns and operates the Klya.ai platform and the website www.klya.ai. This Privacy Notice ("Aviso de Privacidad") is issued in compliance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (LFPDPPP — Mexico's Federal Law on the Protection of Personal Data Held by Private Parties), its Regulations and the Privacy Notice Guidelines, and applies to the Klya.ai platform, its website and all services offered through them (the "Services").

Klya.ai is an intelligent business management platform that integrates, among other modules, customer relationship management (CRM), quotations, electronic invoicing, digital forms, document management, human resources and artificial intelligence assistants configurable by each organization.

1. Personal data we collect

Depending on your relationship with Klya.ai, we may process the following categories of data:

  • Identification and contact data: full name, corporate email address, phone number, job title and the organization you belong to.
  • Account and access data: authentication credentials, assigned role, account preferences and sign-in records.
  • Tax and billing data: RFC (Mexican tax ID), legal business name, tax regime, tax address, CFDI usage and the payment data required to contract and invoice the Services.
  • Usage data: interactions with the platform, queries submitted to the artificial intelligence assistants, generated documents and activity records (audit logs).
  • Technical data: IP address, browser type, operating system, device identifiers and session data.
  • Information uploaded by your organization: business data that each user organization brings into the platform (for example, information about its own customers, suppliers, employees, projects and documents).
  • Website contact form data: when you submit the contact or demo request form on www.klya.ai, we collect your name, company, email address, phone number (optional) and the message you share with us.

Klya.ai does not deliberately collect sensitive personal data. We ask you to refrain from uploading sensitive data to the platform unless strictly necessary for your organization's operations and you have obtained the corresponding consent from the data subjects.

2. Klya.ai as data processor

With respect to the information that each user organization uploads to the platform about its own customers, employees or third parties, that organization acts as the data controller and Klya.ai acts solely as a data processor, processing such data on behalf of the organization and in accordance with its instructions. Each organization is responsible for having its own legal bases and privacy notices vis-à-vis its data subjects.

3. Purposes of processing

Primary purposes (necessary for the legal relationship):

  • Handle contact and demo requests submitted through the website and follow up on your request.
  • Create and manage your account, authenticate your identity and control role-based access.
  • Provide the contracted Services, including the operation of the platform modules and artificial-intelligence-powered assistance.
  • Generate the documents, quotations, tax receipts and reports you request.
  • Invoice and collect payment for the Services, and manage the business relationship.
  • Provide technical support and respond to requests.
  • Ensure the security of the platform and prevent fraud and unauthorized use.
  • Comply with applicable legal, tax and regulatory obligations.

Secondary purposes (you may object to these without affecting the service):

  • Produce aggregated statistics and reports to improve the platform.
  • Communicate news, improvements and new features of the Services.

If you do not want your data processed for the secondary purposes, you may say so at any time by writing to privacidad@aivara.mx.

4. Use of artificial intelligence

The platform uses artificial intelligence models from enterprise-grade providers to assist with analysis, drafting and management tasks. Data processed by these models is transmitted over encrypted channels, under agreements that prohibit its use for training third-party models. Artificial-intelligence-generated results are assistance tools: every relevant deliverable requires human review and approval before its final use, and critical calculations are performed with specialized deterministic tools.

5. Transfers and processors

We do not sell or rent your personal data. We only share it in the following cases:

  • Service providers (processors): providers of cloud infrastructure, artificial intelligence models, payment processing, and authorized tax receipt certification providers (PAC), exclusively to operate the Services and under contractual confidentiality and security obligations.
  • Authorities: when required by law or by a competent authority through a duly founded and motivated request.

Outside these cases, any transfer requiring your consent will be notified to you in advance.

6. Security measures

Klya.ai implements administrative, technical and physical security measures aligned with international industry standards: encryption of information in transit and at rest, logical isolation of each organization's information, management of secrets and credentials in encrypted stores with restricted access, role-based access controls under the principle of least privilege, and audit logs.

7. Data retention

We retain your data while your account remains active and for the periods necessary to comply with legal, tax and contractual obligations. Once those periods end, the data will be securely deleted or anonymized. You may request early cancellation as described in the ARCO rights section.

8. ARCO rights and withdrawal of consent

You have the right to Access, Rectify and Cancel your personal data, as well as to Object to its processing (the "ARCO" rights under Mexican law) and to withdraw any consent you have given us. To exercise them, send a request to privacidad@aivara.mx stating: (i) your full name and a means of contact; (ii) documents proving your identity or legal representation; (iii) a clear and precise description of the data regarding which you seek to exercise any of these rights; and (iv) any element that helps locate the data.

We will respond to your request within a maximum of 20 business days from its receipt. If you believe your data protection rights have been violated, you may file a complaint with the Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales (INAI), Mexico's data protection authority.

9. Cookies and tracking technologies

The platform uses strictly necessary cookies for authentication and session operation. We do not use third-party advertising cookies. You may configure your browser to reject cookies, in which case some platform features may not work correctly.

10. Changes to this notice

This Privacy Notice may be amended to reflect legislative, regulatory or Service changes. Any amendment will be published on this same page with its update date and, when the change is substantial, we will notify you through the platform or by email.

11. Contact

To exercise your ARCO rights, limit the use or disclosure of your data, or receive more information about this Notice: privacidad@aivara.mx

For any other inquiry about the platform or the Services: contacto@aivara.mx