Data Deletion Instructions

At Mexus CRM, operated by Soluciones de Software Toracom (“Toracom”, “we”), we respect your right to privacy and provide you with clear mechanisms to request the deletion of your personal data stored on the platform, as well as the information obtained through third-party integrations (Meta/WhatsApp Business, Google Calendar, Google Drive) that you have authorized.

1. Who This Procedure Applies To

This process may be used by:

• Registered users of Mexus CRM (sales agents, managers, or administrators of a tenant).
• Contacts, prospects, or companies whose information has been recorded on the platform by one of our customers and who wish to exercise their ARCO rights.
• Individuals who interacted via WhatsApp Business with a number connected to Mexus CRM through Meta’s official integration (WhatsApp Business Platform / Coexistence).

2. What Data Is Deleted

When processing your request, we delete or anonymize, as applicable:

• Identification and contact data (name, email address, phone, WhatsApp, address, RFC).
• Commercial records associated with you: prospects, deals, activities, notes, and uploaded documents.
• The history of WhatsApp conversations synchronized through the Meta integration, including messages, attachments, and conversation metadata.
• OAuth tokens and references to events, invitations, or files created through your Google account (Calendar and Drive).
• Session logs, recent IP addresses, preference cookies, and stored profile photo.

Legal exceptions: certain records may be retained in a restricted and encrypted form when a legal, tax, or accounting obligation exists (for example, issued invoices), or when they are necessary for the defense of claims. In these cases, they are blocked from any other use until the legal period expires.

3. How to Request Deletion

There are two ways to request the deletion of your data:

Option A — By email

1. Send an email to privacidad@mexuscrm.com with the subject line “Data deletion request”.
2. Include the following information so that we can identify you:
   • Full name.
   • Email address and/or WhatsApp number with which you interacted with the platform.
   • Name of the Mexus CRM company or tenant where your data appears (if you know it).
   • A simple copy of a valid official identification (INE, passport, or equivalent) to validate your identity.
   • A clear description of the scope of the request (all data or specific data).
3. You will receive an acknowledgment of receipt within 2 business days and confirmation of deletion within a maximum of 20 business days.

Option B — Deletion of data originating from Meta (WhatsApp)

If you interacted with a business that uses Mexus CRM through WhatsApp and wish to delete the information derived from that conversation, you may additionally:

• Write to the business that contacted you requesting that it delete the thread, or request it directly from privacidad@mexuscrm.com, indicating the business’s WhatsApp number and yours.
• Revoke the permission granted to the application from Meta’s business tools settings.

Upon receiving the request, we will delete from our systems the messages, media, and metadata associated with the indicated number. Any information that Meta retains on its servers is governed by Meta’s privacy policies.

4. Response Times

5. What Happens After Deletion

• Your account, if you had one, will become inaccessible and cannot be recovered. To use Mexus CRM again, you will need to register anew by invitation.
• Business records (prospects, deals, activities) associated exclusively with you will be deleted. Those that form part of a customer’s commercial history will be anonymized so that they can no longer be identified.
• Google OAuth tokens will be revoked, and the integration with your Google account will stop working immediately.
• The history of WhatsApp conversations synchronized through Meta will be erased from our systems; it is also recommended that you delete the thread from your own device.

6. Identity Verification

To protect your data, we only process requests in which we can reasonably confirm that you are the data owner or an authorized person. We may request additional documentation or clarifications before carrying out the deletion. If it is not possible to confirm your identity, the request will be rejected with written notification.

7. Contact

• Data Controller: Soluciones de Software Toracom
• Privacy email: privacidad@mexuscrm.com
• Address: Av. Faro 2350 1E, Verde Valle, CP 44550, Guadalajara, Jalisco, Mexico
• Support hours: Monday to Friday, 9:00 a.m. to 6:00 p.m. (Central Mexico Time).
• Website: www.toracom.net

For more information about the general processing of your data, please see our Privacy Notice and our Terms and Conditions.