Privacy notice

1. Responsible party

The responsible party is El Sheimus Platform, at P.º de San Francisco, Col. Misión de Guadalupe, C.P. 67117, Guadalupe, N.L., Mexico. Privacy contact: soporte@tatamo.app.

2. Data and purposes

The contact form collects your name, email, dojo name, and WhatsApp number to review and respond to your request. Do not submit student or other third-party information through this form.

The website stores your selected language in browser local storage. It initializes Grafana Faro performance and error monitoring; persistent session information is stored in local storage and diagnostics may be sent to Grafana Cloud. Authentication features use session and CSRF cookies. See Cookies and similar technologies.

3. Secondary purposes

The form is used to respond to your request. Any marketing or other secondary purpose must be described here and implemented with consent where required by law. Submission is not consent to unrelated marketing.

4. Limit use or disclosure

To ask us to limit use or disclosure, contact soporte@tatamo.app. The website currently has no self-service privacy preference or deletion control.

5. ARCO rights

You may request access, rectification, cancellation, or opposition by writing to soporte@tatamo.app. Include your name, a way to receive our response, the right you wish to exercise, and information to locate your data. We may request information to verify your identity or, when a representative submits the request, evidence of representation. We will communicate our determination within 20 days after receiving a complete request and, if granted, make it effective within 15 days after communicating that determination; applicable periods may be extended once for a justified reason. You may revoke consent where applicable; revocation does not undo processing already carried out.

6. Service providers

Waitlist information is sent to the Tatamo service to manage your request. Grafana Cloud may process website diagnostics under the configured monitoring service.

7. Retention and security

Waitlist data is retained as needed to manage the request and applicable obligations; a specific retention schedule is pending confirmation. Security measures are used, but absolute security cannot be guaranteed.

8. Changes and contact

Changes will be posted here. For questions or requests, contact soporte@tatamo.app; address: P.º de San Francisco, Col. Misión de Guadalupe, C.P. 67117, Guadalupe, N.L., Mexico. Material changes will be announced on this page.

9. The Tatamo service (workspaces)

This section applies to anyone who creates or uses a Tatamo account. It supplements the sections above, which cover the website and contact forms.

• Dojo account data (name, email, phone and usage log with IP): Tatamo is the controller. It uses it to provide the service, give support, keep it secure and meet legal obligations. It also keeps the accepted terms version, the date, the IP and the browser.
• For data the dojo enters about students, guardians or staff, the dojo is the controller and Tatamo is the processor. The Data Processing Agreement (DPA) is available on request at soporte@tatamo.app. Data subjects exercise their ARCO rights through the dojo, with support from Tatamo when requested.
• Minors: if the dojo records data of minors, it must have the consent of their parent or guardian. Tatamo does not collect minors' data directly.
• Subprocessors: Neon (database, United States), Cloudflare (hosting, storage and email), Google Cloud (API compute, United States), Grafana Cloud (monitoring), Stripe (payments), Anthropic (AI, United States) and OpenRouter (AI routing, only if enabled).
• Processing may involve international transfers, including to the United States, under the LFPDPPP and applicable data protection safeguards and obligations.
• Billing: we process Tatamo IA subscription data, pack purchases, amounts, payment status and identifiers. Stripe processes payment-method data; Tatamo does not store the full card number. If you request a CFDI, we process the tax details needed to issue it and meet legal obligations.
• Security breaches: notified to the dojo without undue delay.
• Retention: data is kept while the account is active, plus 30 days after closure. It is then deleted, except for legal retention obligations.
• Feedback and problem reports: what you write and the optional screenshot are stored to improve the service and may be processed by an AI assistant to create internal tickets. They are never sold.
• Contact: soporte@tatamo.app.

10. AI assistant

If you use the optional AI assistant, your messages and relevant dojo data your user can access are currently sent to Anthropic (Claude, United States) to generate a response. Student medical and contact data are not sent. The assistant only reads data and does not modify it. Tatamo records the date, workspace, tokens and cost per message without storing conversation content; chat history is kept only in your browser during the session.

We may switch to other model providers through OpenRouter, only if enabled, with notice in this Privacy notice. We do not use your messages or dojo data to train models. We only use paid providers and models that do not train on that data or retain it (zero data retention); we never use free models with dojo data. Do not include information you do not want to share with them.