Privacy notice

Who is responsible for your data

David José Abraham Aguilar, doing business as DabyChos, based in Mérida, Yucatán, Mexico, is responsible for the personal data collected on dabychos.com (“the site”). For anything related to your data, write to [email protected].

What we collect

• Contact form: your name, your email and your message, plus the language and the page you sent it from.
• Booking calendar: the date and time you pick, your name, your email, your WhatsApp (optional), your time zone and your answers to the basic questionnaire (type of app, your line of business, what you want to solve and where you are today). These are received and stored by the client portal at dabychos.com/app, where you can also see your booking.
• Anonymous performance metrics: how fast the page loads in your browser (Web Vitals), which page you were on, whether you use a phone, tablet or computer, and the connection type. They don’t include your IP, your browser or cookies, and can’t be linked to you.
• Security data: to stop form abuse we compute an irreversible fingerprint of your IP address (HMAC); the IP itself is never stored. Cloudflare Turnstile checks browser signals to confirm you’re a person.
• We don’t collect sensitive or financial data, or data from minors.

What we use it for

1. Replying to your message and preparing a quote.
2. Holding, confirming or rescheduling your call and giving you access to your portal.
3. Measuring and improving the site’s speed (anonymous metrics).
4. Protecting the site from spam and abuse.

There are no secondary purposes: we don’t use your data for advertising or profiling.

Who we share it with

Only with the providers that run the service on behalf of DabyChos, and only for that: Cloudflare (network, security and Turnstile), Hostinger (the server, located in the United States), Resend (email delivery) and CallMeBot (WhatsApp notices to DabyChos that a message arrived). That means your data is transferred to the United States; it always travels encrypted. We don’t sell or hand over your data to anyone.

How long we keep it

Contact form messages are anonymized after 12 months: your name, email and message are deleted and only the date, language and page remain. Booking data follows the client portal’s privacy notice. Anonymous metrics are kept raw for 90 days and then only as daily aggregates.

Cookies and storage

The site uses no first-party cookies and no third-party trackers. Cloudflare may set the __cf_bm cookie, which lasts 30 minutes and is only used to tell people from bots. Your browser keeps your theme and animation preferences in local storage, and if you install the site as an app it keeps a copy of the pages so they work offline; none of that leaves your device.

Your rights

You can access your data, correct it, ask for it to be deleted, object to its use, and withdraw your consent. Write to [email protected] with your name, the right you want to exercise and how you’d like us to reply. We answer within 20 business days at most.

Changes to this notice

Any change is published at this same address, with the date of the new version.