Privacy Policy
Last updated: August 4, 2026
At Quetzalty (operated by Smartydreams) we value your privacy. This policy explains what personal data we process, in which role and how, in line with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).
Two distinct roles
Quetzalty processes personal data in two different ways, and the difference matters. For your account data and your team's, we are the controller: we decide what it is used for. For the data of your clients or patients that you upload, or that the platform captures for you, you are the controller and we act as processor: we handle it only on your instructions and to provide you the service, never for our own purposes.
Controller of your account data
For your account and team data, the controller is Quetzalty, operated by «[COMPLETAR ANTES DE PUBLICAR: denominación social, RFC y domicilio fiscal de Smartydreams]». For any privacy matter you can write to privacidad@quetzalty.com or reach us via our Contact page.
Processor of your clients' data
The information about your clients or patients that you record in Quetzalty remains yours, and you are its controller before them and before the authority. We only process it on your behalf to operate the service. It is up to you to have the legal basis or consent required to process it, all the more so where it includes sensitive data such as health data, which requires express written consent.
Data we collect
As controller: your account data (name, email, phone and company) and platform usage data. As processor: the information about your clients or patients and the financial data you upload, depending on the module you use.
How we use the data
We use your account data to provide the service, authenticate you, give support, improve the product and communicate with you. Your clients' data is processed solely to operate the service you provide to them. We do not sell personal data to third parties.
Providers that help us operate
We rely on providers for cloud hosting, payment processing, messaging (such as WhatsApp/Meta) and artificial intelligence services. They access only the information needed to provide the service and act on our instructions.
What we use the data for and what you can refuse
We use your data for purposes necessary to provide the service: identifying you, giving you access, charging you, invoicing you, supporting you and preventing fraud. Without them we cannot operate your account. In addition, and only if you do not object, we use it for secondary purposes: sending you commercial communications about our products and producing usage statistics to improve the service. You may object to the secondary purposes at any time, without this affecting provision of the service.
Withdrawing consent
You may withdraw the consent you have given us to process your personal data. Note that in some cases withdrawal may mean we can no longer provide you the service, and that it will not have retroactive effect on processing already carried out or on what we must retain by legal obligation.
Where data is hosted and transferred
The Platform runs on cloud infrastructure located outside Mexico, and some of our providers process information from other countries. In all cases we require those providers to give confidentiality and security commitments equivalent to those we undertake ourselves.
Cookies and similar technologies
We use our own cookies, necessary for the site and the Platform to work and to keep your session, and third-party analytics cookies to understand usage and improve the product. You can configure your browser to block or delete them; if you block the necessary ones, some features will stop working.
Retention
We keep your data while your account is active. After termination, we keep it available for export for 30 calendar days and delete it within the following 90 calendar days, save for what we must retain by legal or tax obligation or to defend claims.
Security
We apply encryption in transit and at rest, plus role-based access controls, to protect your information and your clients'.
ARCO rights
If you hold a Quetzalty account, you can access, rectify, cancel or object to the processing of your data by writing to privacidad@quetzalty.com. We will reply within a maximum of 20 business days and, where the request is well founded, give effect to it within the following 15 business days. If you are a client or patient of a business that uses Quetzalty, your request must be addressed to that business, which is the controller of your data; we will assist them in handling it.
Changes to this policy
We may update this policy; the current version will always be published on this page, with its last-updated date.