Who we are

AKRI Technology, S.A. de C.V. ("AKRI", formerly known as CODES) is a technology company incorporated and operating under the laws of Mexico. We provide cloud, AI, software development, consulting and managed IT services. We are the party responsible for the personal data described in this policy, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties.

Our main office is at Circuito Circunvalación Poniente 149-B, Ciudad Satélite, Naucalpan de Juárez, State of Mexico, 53100, Mexico. Data protection enquiries can be sent to ventas@akri-tech.com, marked for the attention of the data protection contact.

What we collect

When you contact us. Your name, company, job title, email address, telephone number if you give it, and whatever you choose to tell us about your project. This comes from you directly, by email, telephone, our contact form or in meetings.

When you work with us. Contact details for you and your colleagues, correspondence, meeting notes, and the commercial records associated with an engagement, such as proposals, contracts, invoices, tax details and payment information.

When we work on your systems. During cloud migrations, managed services, software development and support, we may have access to data stored in your systems, including personal data about your employees or customers. We handle that data only on your instructions, on your behalf, under the service contract and confidentiality agreement we sign with you.

When you visit this website. Pages visited, approximate location derived from your IP address, referring site, browser and device type. This is aggregate analytics data and we do not attempt to identify individuals from it.

When you apply for a job. Your CV, portfolio, cover letter, correspondence and interview notes.

We do not buy contact lists, and we do not intentionally collect sensitive personal data. If a job applicant chooses to share it, we use it only for the hiring process and with their express consent.

Why we hold it

Primary purposes. These are necessary for our relationship with you: responding to enquiries and preparing proposals; delivering the services we have agreed with you; managing contracts, invoicing and payments; meeting our legal, tax and accounting obligations; and assessing job applications.

Secondary purposes. These are not necessary for the services and you can refuse them at any time: sending you news about our services, events and partner offers; inviting you to satisfaction surveys or to take part in case studies and testimonials; and understanding how this website is used.

If you do not want your data used for secondary purposes, email us and we will stop. Refusing will not affect the services you receive from us.

We do not use your data for automated decision-making or profiling.

Confidentiality of client information

We treat the information our clients share with us as confidential. Before starting a project, we sign a confidentiality agreement with each client. Under it:

We use your confidential information only for the purposes of the engagement, and never for our own benefit or for the benefit of third parties.

Access is limited to the members of our team who need it to do the work. They are informed of its confidential nature and are bound to protect it.

When the engagement ends, we return or securely delete the documents and materials that contain your confidential information.

These obligations remain in force for three years after our joint activities end.

If a court or competent authority legally requires us to disclose confidential information, we will notify you as soon as possible so you can take steps to protect it.

Cookies and analytics

This site uses a small number of cookies. Some are necessary for the site to function and cannot be turned off. Others are analytics cookies that tell us which pages are read and for how long. We ask for your consent before setting anything that is not strictly necessary, and you can withdraw it at any time through the cookie settings in the footer. Our Cookie Policy explains each cookie in detail.

Who we share it with

We share personal data only where it is necessary, and never for payment.

Technology providers. Services that host or process data on our behalf, such as Google Cloud, Google Workspace, Zoho, and our accounting and website hosting providers. They act on our instructions under written agreements and cannot use your data for their own purposes.

Partners and subcontractors. Specialists involved in delivering your project, only to the extent they need it and under confidentiality obligations equivalent to ours.

Authorities. Where we are legally required to provide information, such as to the Mexican tax authority (SAT) or in response to a court order.

We do not sell personal data, and we do not share it with third parties for their own marketing.

International transfers

Some of our providers store data on servers outside Mexico, including in the United States. Where this happens, we require them to protect your data to a standard equivalent to the one described in this policy.

How long we keep it

Enquiries that don't become projects. Two years, then deleted.

Client and project records. For the duration of the engagement and up to five years after it ends, consistent with the confidentiality obligations in our agreements.

Accounting and tax records. Five years, as required by Mexican tax law.

Unsuccessful job applications. Twelve months, so we can consider you for other roles. Tell us if you would rather we deleted it sooner and we will.

Your rights

You have the right to access the personal data we hold about you; to rectify it if it is inaccurate or incomplete; to cancel it when it is no longer needed; and to oppose its use for specific purposes. These are known in Mexico as ARCO rights. You can also revoke your consent, or limit how we use or disclose your data.

To exercise any of these rights, email ventas@akri-tech.com with your name, a copy of an official ID (or proof of your representative's authority), a clear description of the data and the right you want to exercise, and any document that helps us locate your data. We will reply within 20 business days and, if your request is valid, act on it within 15 business days after that. There is no charge.

If you believe we have not handled your data properly, you can file a complaint with the Mexican data protection authority. We would rather you told us first, but you are not obliged to.

Security

We protect personal data with administrative, technical and physical safeguards: encrypted systems, access limited to the people who need it, multi-factor authentication, and the security practices we apply as a managed services provider. We keep a record of any security breach and will notify you without delay if one significantly affects your rights.

Changes to this policy

We update this policy when our practices or the law change. The date at the top shows when it was last revised. Material changes will be flagged on this page rather than made quietly.

Governing law

This policy is governed by the laws of Mexico. Any dispute about it will be submitted to the competent courts in Mexico City. If a Spanish version of this policy is published, the Spanish version will prevail.

Contact

Email ventas@akri-tech.com or write to AKRI Technology, S.A. de C.V., Circuito Circunvalación Poniente 149-B, Ciudad Satélite, Naucalpan de Juárez, State of Mexico, 53100, Mexico, for the attention of the data protection contact.