Privacy notice

Last updated: September 13, 2026.

CONSULTORA Y COMERCIALIZADORA VIAL, S.A.S. de C.V. ("Chultún", "we"), with its registered address at Calle 4 368-A Interior x 7 y 9, Mérida, Yucatán, ZIP 97130, Mexico, is the data controller for the personal data described in this notice. Chultún is the brand under which we offer automation for Odoo and automated customer service on Messenger, Instagram and WhatsApp.

This notice applies to www.chultun.com, to the "Chultún" application registered with Meta and to the services we provide to the businesses that hire them. For any question or request about your data, write to us at hola@chultun.com.

On behalf of our customers. When a business hires Chultún, its customers' messages, contacts and opportunities are recorded in that business's Odoo. The business is the controller of that data; we process it on its behalf and following its instructions, solely to provide the service. If you messaged a business that uses Chultún, your relationship is with that business; you can direct your requests to it or to us, and we handle them together with the business.

For our own purposes. We process the data of the businesses that sign up and their representatives, of the people who write to us or join the waiting list, and of visitors to the site.

• Contact and identification data: name, email address, phone number, company and job title.
• Business account data: the name and identifiers of its Pages and its Messenger, Instagram and WhatsApp accounts, and the Odoo access credentials the business gives us to provide the service.
• Messages and content: the messages, comments and images people send to a business through the connected channels, and those you send to us.
• Usage and technical data: IP address, browser type, pages visited, date and time, and the technical logs needed to operate the service.

We do not request sensitive personal data (ethnic origin, health, beliefs, sexual orientation, among others). We ask you not to send it through the service's channels.

• Providing the service: receiving the messages that reach a business, answering them with an automated assistant, recording the contact and the opportunity in the business's Odoo and notifying its team.
• Managing the relationship with businesses: onboarding, support, billing and communications about the service.
• Handling requests: replying to whoever writes to us and managing requests about personal data.
• Protecting the service and complying with the law: security, abuse prevention and responding to requests from authorities.
• Secondary purpose: letting you know about Chultún news if you joined the waiting list. You can ask us to stop at any time by writing to hola@chultun.com.

On the connected channels, an automated assistant handles the conversation. It says so in its first message, and at any time you can ask to be attended by a person from the business. To write its replies we use an artificial intelligence service from Google, contracted under its paid tier, whose terms establish that it does not use the messages or the replies to improve its products. The prices and details the assistant writes come from the business's catalog.

We do not sell personal data. We share it only with:

• The business you're talking to, in its Odoo.
• Providers that supply us with messaging, hosting, computing, database and artificial intelligence services: Meta Platforms, Odoo S.A., Google, Vercel and Supabase. They process the data on our behalf, under their contracts, and some of them operate from the United States.
• Authorities, when required by law.

For as long as the business uses the service. The data stored in the business's Odoo is kept by the business, which decides about it. When a business cancels, we delete its registration within the following 30 days. Technical logs are kept for a maximum of 30 days. Billing data, for as long as tax law requires.

You can access your data, correct it, delete it or object to its processing (the ARCO rights under Mexican law), as well as withdraw your consent or limit the use of your data, by writing to hola@chultun.com with your name, the business you spoke with and what you're requesting. We acknowledge receipt within 2 business days and respond within 10 business days at most. If your data is in a business's Odoo, we handle the request together with that business. The deletion procedure is described in Data deletion. If you're not satisfied with our response, you can turn to the competent personal data protection authority.

The site uses the technical cookies needed to work (language and session) and Google Analytics, by Google, to measure how many people visit each page and where they come from; Google sets its own cookies for that and processes that data under its policy. We do not use advertising cookies. You can block Google's cookies from your browser or with the Google Analytics opt-out add-on without the site ceasing to work.

We apply administrative, technical and physical measures to protect personal data against loss, alteration and unauthorized access or use, including encryption of credentials and access control. No system is infallible: should a security breach occur that significantly affects your rights, we would inform you without delay.

We use the data we receive from Meta solely to provide the service described in this notice and in accordance with Meta's Platform Terms. If you logged in with Facebook and remove the application, you can request the deletion of your data as described in Data deletion.

The service is aimed at businesses and at people over 18. We do not knowingly collect data from minors.

We will publish any change on this page with its update date. If the change is significant, we will notify registered businesses by email.

hola@chultun.com · Full identity and address in the Legal notice.