Privacy Policy

1. Identity of the Data Controller

This policy describes how DOQSOFT INC. (hereinafter “DOQSOFT,” “we,” or “the company”) processes the personal data it collects through the doqsoft.com website, its subdomains, forms, sales calls, events, and any other channels operated under the DOQSOFT brand.

2. Information We Collect

We collect personal information in the following ways and categories:

2.1 Information You Provide to Us Directly

When you request a demo, subscribe to our newsletter, or contact us via a form, we collect:

• Identifying information: first name, last name, and job title (if you provide it voluntarily).
• Contact information: corporate email address and, optionally, phone number.
• Organization details: company name, industry, company size.
• Message content: any information you choose to include in open-ended fields such as "How can we help you?"

2.2 Information Collected Automatically

When you browse our site, we automatically collect technical information:

• Browsing data: IP address, browser type and version, operating system, pages visited, time spent on the site, referring URL, and behavior on the site.
• Approximate geolocation data: derived from your IP address, used solely to suggest your country on forms and your area code (your precise location is not stored).
• Device identifiers: cookies, local browser storage, and session tokens.

2.3 Information Received from Third Parties

If you interact with us through our partner program or through a customer referral, we may receive your contact information from the referring organization, always based on an appropriate legal basis (prior consent or justified legitimate interest).

3. How We Use Your Information

We process your personal data for the following purposes:

• Answer your sales, technical, or support questions.
• Schedule diagnostic, demo, or consulting meetings through our booking platform.
• To send you relevant marketing communications (newsletters, case studies, event invitations), provided that you have given your consent or there is a pre-existing business relationship. You can unsubscribe at any time.
• To operate and improve our products and services, including analyzing website usage to optimize content and the user experience.
• To comply with legal, tax, and contractual obligations applicable in the jurisdiction where we operate.
• Prevent fraud, abuse, and violations of the terms of service.

4. Legal Basis for Data Processing

We process your personal data based on one or more of the following legal grounds, depending on the regulatory framework applicable to your jurisdiction:

• Consent: When you fill out a contact, demo, or subscription form, you expressly consent to the processing of your data. You may withdraw your consent at any time.
• Contract performance: When you are an active customer, we process your data to provide the contracted service, issue invoices, and offer support.
• Legitimate interest: for anonymized traffic analysis, fraud prevention, and product development, where the impact on your privacy is minimal and proportionate.
• Compliance with legal obligations: when required by a law, regulation, court order, or other competent authority.

5. Sharing with Third Parties

We share personal information only with service providers necessary for the operation of our platform, under confidentiality and data processing agreements:

5.1 Commercial Infrastructure Providers

• Zoho Corporation (CRM, Marketing Automation, Bookings, PageSense): for managing leads, sending transactional emails, scheduling meetings, and analyzing website behavior. Zoho is compliant with SOC 2 Type II, ISO 27001, and GDPR.
• IP geolocation services (geojs.io, ipapi.co): to determine your approximate country and customize the form. Your IP address is not stored on our systems; these services process the query in real time without retaining any data.

5.2 Authorities and Legal Obligations

We may disclose information when required by:

• Court order, subpoena, government order, or valid legal proceeding.
• Investigation of alleged violations of the terms of service or fraudulent activities.
• Protection of the rights, property, or safety of DOQSOFT, its customers, or the public.

5.3 Corporate Transactions

In the event of a merger, acquisition, reorganization, or sale of assets, personal data may be transferred to the successor entity, subject to the same privacy obligations described in this policy.

6. Cookies and Tracking Technologies

Our site uses cookies and similar technologies (local storage, pixels, session identifiers) for the following purposes:

• Strictly necessary cookies: required for the basic functioning of the site (session, language preferences).
• Analytics cookies: Zoho PageSense and similar tools measure traffic, browsing behavior, and page performance. The data is processed in aggregate form and, where possible, anonymized.
• Marketing and lead capture cookies: When you fill out a form, we associate your submission with the current session to prevent duplicates and correctly attribute the source of the lead.

You can disable cookies in your browser settings at any time. Please note that some features of the site may be limited if strictly necessary cookies are rejected.

7. International Transfers

Since DOQSOFT INC. is incorporated in the United States and operates in Latin America, your personal data may be transferred, processed, and stored on servers located outside your country of residence, primarily in the U.S. and the European Union (on servers belonging to providers such as Zoho).

When this occurs, we implement the safeguards required by applicable laws:

• Standard Contractual Clauses approved by the European Commission for data transfers from the EU.
• Data Processing Agreements (DPAs) with all of our vendors that process information on our behalf.
• Equivalent mechanisms under Latin American laws governing cross-border data transfers, such as the LFPDPPP in Mexico and the LGPD in Brazil.

8. Your rights as a data subject

Depending on your jurisdiction, you have the following rights regarding your personal data. We honor all of the following rights regardless of where you live:

8.1 Universal Rights

• Access: Request a copy of the personal data we have about you.
• Correction: to correct inaccurate or incomplete information.
• Deletion / Cancellation: Request the deletion of your data when it is no longer necessary for the purposes for which it was collected.
• Objection: to object to the processing on legitimate grounds.
• Portability: Receive your data in a commonly used, structured format so you can transfer it to another data controller.
• Withdrawal of Consent: You may withdraw your consent at any time without affecting the lawfulness of the processing that took place prior to the withdrawal.

8.2 Applicable Regulatory Framework

In addition, depending on your jurisdiction of residence, you may be able to invoke specific rights provided for in:

• Mexico — LFPDPPP: ARCO rights (access, rectification, cancellation, and objection) and revocation.
• Brazil — LGPD: including the right to anonymization and the right to information regarding data sharing.
• European Union — GDPR: including the right not to be subject to automated decision-making and the right to lodge a complaint with the national supervisory authority.
• California, U.S. — CCPA / CPRA: the right to know, delete, correct, and restrict the use of sensitive information.
• Other Latin American countries: Argentina (Law 25,326), Colombia (Law 1581), Chile (Law 19,628), Peru (Law 29,733).

8.3 How to Exercise Your Rights

To exercise any of these rights, please send us a request to privacy@doqsoft.com, including:

• Full name and contact information.
• A clear description of the right you wish to exercise.
• Documentation proving your identity (to prevent fraud).
• Any additional information that may help us process your request (e.g., the approximate date the form was submitted).

We will respond within a maximum of 20 business days for residents of Mexico and within the applicable legal timeframes for other jurisdictions (typically between 15 and 30 days).

9. Data Retention

We retain your personal data only for as long as necessary for the purposes for which it was collected, unless a legal obligation requires a longer period:

• Active leads that have not converted: up to 24 months from the last contact, after which they are anonymized or deleted unless there is an express request to maintain the relationship.
• Active customers: throughout the term of the contract and for up to 7 years after its termination, due to applicable tax and audit requirements in the U.S. and Mexico.
• Newsletter subscribers: until you explicitly unsubscribe or 24 months have passed without any interaction with our emails.
• Browsing data and cookies: depending on the duration set for each individual cookie (typically ranging from the current session to 12 months).

10. Information Security

We implement reasonable technical, administrative, and physical measures to protect your personal information from unauthorized access, loss, destruction, alteration, or improper disclosure:

• Encryption in transit: TLS 1.3 for all communications between your browser and our servers.
• Encryption at rest: AES-256 for databases and backups that store personal information.
• Role-based access control (RBAC) and multi-factor authentication (MFA) for employees with access to systems that handle personal data.
• Periodic audits of configuration, dependencies, and vulnerabilities.
• Mandatory training for all staff on the handling of personal data and incident response.

Despite these measures, no system is completely secure. In the event of a security incident affecting your personal data, we will notify you within the timeframes required by applicable law and describe the steps taken to mitigate the impact.

11. Privacy of Minors

Our services are intended exclusively for businesses and professionals who are of legal age. We do not intentionally collect personal information from individuals under the age of 18. If we discover that we have collected data from a minor without the consent of their parents or legal guardians, we will delete that information as soon as it is identified.

If you are a parent or guardian and believe that a minor in your care has provided us with personal information, please contact us at privacy@doqsoft.com to arrange for its deletion.

12. Changes to This Policy

DOQSOFT may update this privacy policy as necessary to reflect changes in our practices, technology, legal requirements, or other circumstances. The "Last Updated" date at the top of this document indicates the current version.

For material changes, we will notify you in a timely manner via a prominent notice on our website and, if there is an active business relationship, by email to your registered contact address. Your continued use of our services after the changes take effect constitutes your acceptance of the updated policy.

13. How to Contact Us

If you have any questions, requests, or complaints regarding this privacy policy or DOQSOFT’s processing of your personal data, you can contact us through any of the following channels:

If you believe that your rights have not been adequately addressed, you have the right to file a complaint with the competent data protection authority in your jurisdiction (in Mexico, the INAI; in Brazil, the ANPD; in the European Union, the relevant national authority).