1. Identity and address of the responsible party

Aurora Inbox, SAPI de CV (“Aurora”), with address at Av. Cto. Frida Kahlo 303, Valle Oriente, 66260 San Pedro Garza García, NL, is responsible for the processing of your personal data in accordance with the Federal Law on the Protection of Personal Data Held by Individuals, its Regulations and other applicable provisions.

2. Personal data that we process

• Identification and contact: name, email address, telephone number, position, company or firm name, company RFC (optional), federal entity.
• Account details and service usage: user identifiers, roles, settings, access dates and times, actions performed on the account, IP address, device type and browser.
• Registration responses: Information about your business that you provide to us, for example how many people work with you, how you manage your payroll, or whether you are an accountant or a firm.
• Communications: messages that you exchange with our support, including via WhatsApp.
• Campaign data: the ad or campaign that brought you to our pages (click identifier and campaign parameters), if any.

We do not collect sensitive personal data from account holders.

3. Purposes of the processing

Primary purposes, necessary for the service:

• Register you on the waiting list, create and manage your account, and authenticate users.
• Provide the electronic time registration service, including reports, exports and verification.
• Provide support and attend to your requests, even via WhatsApp.
• Send service-related communications: access notices, security notices, changes to terms, and activity summaries.
• To ensure the security of the service and prevent misuse.
• To comply with legal obligations and attend to requests from authorities.

Secondary purposes, which require your consent:

• To inform you about other products and services from Aurora Inbox and its affiliated companies that may be of interest to your business.
• Invite you to participate in surveys and studies to improve our products.
• Measuring the effectiveness of our advertising campaigns (see section 9).

You decide whether to receive information about other products and participate in surveys by checking the box on the registration form. Campaign tracking is applied unless you opt out: you can reject or delete attribution cookies from your browser or contact us to have campaign data removed from your account. You can change your decision at any time in your account settings or by writing to contacto@aurorainbox.com. Your refusal will not affect the provision of the service.

4. Employee data

Employee data (name, phone number, work hours records, location at the time of registration, QR code of the workplace when scanned, device, acceptances, corrections and clarifications, confirmations of hours, attendance incidents and justified absences; for disability leave, only the IMSS (Mexican Social Security Institute) registration number and dates are stored, never medical documents) is processed by Aurora exclusively on behalf of and under the instructions of the employer, in its capacity as data controller. Aurora does not use this data for its own purposes, does not use it to offer products, nor does it share it with third parties except as instructed by the employer or required by law. Employees exercise their rights with their employer; Aurora assists the employer in addressing these rights.

5. Transfers and remittances

Aurora does not transfer your personal data to third parties that require your consent. Your data may be shared with providers who process data on Aurora's behalf, under contractual obligations of confidentiality and security: cloud infrastructure (Microsoft Azure, in Mexico, with an encrypted backup copy in the United States used only for disaster recovery), SMS and WhatsApp messaging, email, and integrity certification services. Aurora may disclose data to competent authorities when there is a well-founded and justified request or when required by law.

6. ARCO rights and revocation of consent

You can exercise your rights of access, rectification, cancellation, and opposition, as well as revoke your consent, by sending a request to contacto@aurorainbox.com with your name, a means of contacting you, a document proving your identity or representation, and a clear description of the data and the right you wish to exercise. We will respond within the timeframes established by law.

7. Options to limit use or disclosure

In addition to refusing secondary purposes, you can limit the use of your email and phone for communications unrelated to the service by writing to contacto@aurorainbox.com.

8. Conservation

We retain your data for as long as your registration or account exists and subsequently for the periods necessary to comply with legal obligations and address liabilities. After that, we block and delete it.

9. Cookies and similar technologies

We use cookies and local storage necessary for session, security and preferences; analytics tools that measure site and service usage in aggregate; and advertising campaign attribution cookies.

Attribution cookies store, for up to 90 days, the ad or campaign that brought you to our pages: the click ID and campaign parameters. When you register your business, we keep this information along with your account to understand which campaigns attract new business. Upon completing your registration, our pages communicate this information to the advertising platform you came from (for example, Google or Meta), using that platform's tag, to measure ad performance. This measurement never uses or shares employee data.

You can reject or delete these cookies through your browser settings and limit personalized advertising through Google's ad settings or Meta. If you reject necessary cookies, some features may not work.

10. Changes to this notice

We will post changes on this same page with their update date and, when they are substantial, we will notify you by email or within the service.

Version 1.1. Last updated: October 23, 2026. Contact: contacto@aurorainbox.com.