Legal

Privacy Policy

Versión en español · Last updated: October 8, 2026 · Applies to market.wits.mx and the WITS Market Intelligence service. If the two versions differ, the Spanish version prevails.

1. Who we are

WITS ("WITS", "we"), based in Jalisco, Mexico, is responsible for the processing of the personal data described in this policy, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP). Contact: ventas@wits.mx.

2. Data we access

• Contact data you send us through the form or WhatsApp: name, company, email, phone and your message.
• Account data of the people each client company authorizes: email, password (stored as a hash), sign-in dates and IP address, to operate and protect the account.
• Google user data, only after the client company explicitly authorizes it through Google's consent screen, with read-only scopes:
  • https://www.googleapis.com/auth/webmasters.readonly (Google Search Console): search queries, pages, country and device with their clicks, impressions, CTR and average position; sitemaps and indexing status of the company's own site.
  • https://www.googleapis.com/auth/analytics.readonly (Google Analytics 4): aggregated reports of the company's own property: users, sessions, channels, pages, devices, cities, UTM campaigns and conversions.
  • openid and email: the email address of the Google account that authorized the connection, to show who connected it.
  These are aggregated reports as returned by the Google APIs: we do not receive data about individual visitors, and we never create, modify or delete anything in the user's Google account or properties.
• Public market information (search results, public websites, trends), which is not personal data.
• Website usage data (analytics) on our public pages, only if you accept cookies.

3. How we use Google user data

Google user data is used only to provide user-facing features of WITS Market Intelligence to the people authorized by that same company: showing their search and traffic analytics in the dashboard, and computing their content opportunities, reports and follow-up. Aggregated values derived from it (for example, totals and period comparisons) are used for the same purpose and shown only to that company.

We do not use Google user data, raw or aggregated, for advertising, retargeting, user profiling, credit or lending decisions, or any purpose other than providing or improving these user-facing features. We do not use it to develop, improve or train artificial intelligence or machine learning models.

Limited Use. WITS Market Intelligence's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

4. Sharing and transfer

We do not sell, share or transfer Google user data, raw or aggregated, to third parties, including data brokers, advertisers and AI providers. Google user data is never sent to third-party AI or language-model services. It is processed only by our hosting infrastructure to operate the service, and disclosed only if required by law. Each client company's data is visible only to the people that company authorizes.

WITS staff do not read a company's Google data except with that company's permission (for example, to provide support), for security purposes, or when required by law.

5. How we protect data

• All traffic is encrypted in transit with HTTPS (TLS).
• Google authorization tokens are stored encrypted at rest (Fernet: AES-128 with HMAC); the database is not exposed to the internet.
• Each company is isolated in the database with row-level security: users of one company cannot see another company's data.
• Dashboard access requires a password (stored with scrypt), email verification and bot protection; sessions can be revoked.

6. Retention and deletion

We keep a client company's data while the service is active. When the service ends, we delete it within 30 days (the company may request an export first).

The company can revoke Google access at any time at myaccount.google.com/permissions; from then on we stop retrieving new data. On revocation or upon request to ventas@wits.mx, we immediately delete the stored Google authorization token and, within 30 days, the Search Console and Analytics data already synchronized.

Prospect contact data is kept for up to 24 months or until you ask us to delete it.

7. Cookies and analytics

Our public pages use Google Analytics 4 and PostHog to measure visits and conversions only if you accept cookies. Advertising signals are disabled. The sign-in page and the dashboard do not load third-party analytics. Cloudflare Turnstile is used to protect sign-in against bots.

8. Your rights

You can access, correct, delete or object to the processing of your data, and withdraw your consent, by writing to ventas@wits.mx. We reply within 20 business days.

9. Changes

We will publish any change on this page with its update date.