1. Data Controller
The data controller responsible for your personal information is Kublets Admin (referred to as "Kublets", "we", "us", or "our"). Kublets is legally constituted in Mexico and operates in accordance with the Federal Law on Personal Data Protection Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, LFPDPPP). For privacy inquiries, contact us at support@kublets.com.
2. Personal Data We Collect
We collect the following categories of personal data:
- Identity and contact data: name, institutional email address, job title, and institution name.
- Account credentials: email address and securely hashed password.
- Institutional data: school or campus details you enter when configuring your Kublets workspace.
- Usage and interaction data: pages visited, features used, session duration, and in-app behavior.
- Technical data: IP address, browser type and version, operating system, device identifiers, and time zone.
- Communications: messages you send us through contact forms or support channels.
- Payment data: billing address and payment method details processed exclusively by our certified payment processor (Stripe). Kublets does not store full card numbers.
3. Purposes of Processing
We process your personal data for the following purposes:
- Service delivery: to create and manage your account, provide access to the platform, and fulfill our contractual obligations.
- Billing and payments: to process subscriptions and maintain billing records as required by Mexican tax law (SAT).
- Product improvement: to analyze usage patterns and improve platform features and performance.
- Security: to detect and prevent fraud, unauthorized access, and abuse of our services.
- Communications: to send transactional emails, product updates, and service notifications. Marketing communications are sent only with your prior consent.
- Legal compliance: to meet obligations under applicable law, including tax and regulatory requirements.
4. Cookies and Tracking Technologies
We use cookies and similar tracking technologies to operate and improve our website. You may adjust cookie preferences through your browser settings or our consent banner.
Types of cookies we use:
- Essential cookies: necessary for the website and platform to function. Cannot be disabled.
- Analytics cookies: help us understand how visitors interact with our website (e.g., Google Analytics). Collected in anonymized form.
- Preference cookies: store your language and display preferences.
- Marketing cookies: used only with your explicit consent to deliver relevant content.
5. Sharing with Third Parties
We may share personal data with trusted third parties in the following circumstances:
- Service providers: cloud infrastructure (e.g., AWS, Vercel), payment processors (Stripe), email delivery providers (e.g., Resend), and analytics providers who process data on our behalf under data processing agreements.
- Legal requirements: when required by applicable law, court order, or government authority.
- Business transfers: in the event of a merger, acquisition, or sale of assets, with prior notice to affected users.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
6. International Data Transfers
Kublets is based in Mexico and your data may be processed in the United States and other countries where our service providers operate. When transferring personal data internationally, we implement appropriate safeguards in accordance with applicable law, including contractual clauses and data processing agreements consistent with LFPDPPP Article 36 and, where applicable, GDPR Standard Contractual Clauses.
7. Data Retention
We retain your personal data for as long as your account is active or as needed to provide you with our services. After account closure, we retain data for a maximum of five (5) years for tax and legal compliance purposes as required under Mexican law (Código Fiscal de la Federación). Data that is no longer necessary is securely deleted or anonymized.
8. Your Rights
You have rights regarding your personal data. The specific rights available to you depend on your jurisdiction.
All users — ARCO Rights (LFPDPPP, Mexico):
- Access (Acceso): request information about the personal data we hold about you.
- Rectification (Rectificación): request correction of inaccurate or incomplete data.
- Cancellation (Cancelación): request deletion of your personal data when it is no longer necessary.
- Opposition (Oposición): oppose the processing of your data for specific purposes.
California Residents (CCPA/CPRA):
- Right to know: the categories and specific pieces of personal information collected about you.
- Right to delete: request deletion of personal information we have collected.
- Right to correct: request correction of inaccurate personal information.
- Right to opt-out: we do not sell personal information. No opt-out is required.
- Right to non-discrimination: we will not discriminate against you for exercising any of the above rights.
Brazil Residents (LGPD):
- Confirmation and access to your data.
- Correction of incomplete, inaccurate, or outdated data.
- Anonymization, blocking, or deletion of unnecessary data.
- Portability of your data to another service provider.
- Deletion of data processed with your consent.
- Information about third parties with whom we share your data.
- Right to revoke consent at any time.
9. How to Exercise Your Rights
To exercise any of the rights described above, submit a written request to our Data Protection contact:
We will respond within 20 business days for ARCO requests (as required by LFPDPPP). For CCPA requests, we will respond within 45 calendar days. For LGPD requests, within 15 business days. Include your full name, the email address associated with your account, and a description of your request. We may request identity verification before processing your request.
10. Security Measures
Kublets implements industry-standard technical and organizational security measures, including data encryption in transit (TLS 1.2+) and at rest, role-based access controls, regular security assessments, and employee data handling training. While we work diligently to protect your data, no electronic transmission or storage system is 100% secure. We encourage you to use a strong, unique password and keep your credentials confidential.
11. Children's Privacy
Kublets is a professional platform intended for educational institutions and their administrative staff. It is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us at support@kublets.com and we will promptly delete it.
12. Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. We will notify registered users of material changes via email or in-app notification at least 30 days before they take effect. The "Last updated" date at the top of this page reflects the most recent revision. Continued use of our services after the effective date of a revised policy constitutes acceptance of the updated terms.
13. Contact
For questions, complaints, or requests related to this Privacy Policy or our data practices, contact our Data Protection Officer at:
If you are a resident of Mexico and believe we have not adequately addressed your privacy concerns, you may file a complaint with INAI (Instituto Nacional de Transparencia, Acceso a la Información y Protección de Datos Personales) at www.inai.org.mx.