ENGLISH
ZELUN COMPREHENSIVE PRIVACY NOTICE
Last Updated: October 16, 2026
1. Identity and Address of the Data Controller
ZELUN TECHNOLOGIES, S.A.S., referred to in this Privacy Notice as “Zelun,” “we,” “us,” or “our,” with registered address at:
Avenida México 2582, Torre 200, Interior 10E
Colonia Ladrón de Guevara
Guadalajara, Jalisco 44600
Mexico
is responsible for personal data that it collects directly through its websites, mobile applications, web applications, platforms, products, integrations, communication channels and other related services, collectively the “Services.”
For privacy and personal data matters, you may contact us at:
privacy@releasetwin.com
This Privacy Notice is intended to comply with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares) and other applicable privacy laws.
2. Scope
This Privacy Notice applies to personal data that Zelun obtains directly from, among others:
- business owners and representatives;
- Zelun customers;
- account administrators;
- employees and collaborators authorized by customers;
- users of the Services;
- website visitors;
- prospective customers;
- individuals requesting information;
- individuals contacting support;
- vendors and business contacts;
- other individuals interacting directly with Zelun.
When a business uses Zelun to store or process personal data relating to its own customers, employees, contractors, vendors or other individuals, that business generally determines the essential purposes and means of processing and acts as the controller of such data.
In those cases, Zelun generally acts as a processor/service provider, processing information on behalf of and according to the instructions of the business pursuant to our agreement and applicable Data Processing Agreement.
Requests relating to data controlled by a business using Zelun should generally first be submitted to that business.
3. Personal Data We May Process
Depending on how you interact with Zelun, we may process the following categories of personal data.
3.1 Identification and Contact Information
This may include:
- first and last name;
- email address;
- telephone number;
- country;
- language;
- job title;
- organization or business;
- professional contact information.
3.2 Account and Authentication Information
This may include:
- user identifier;
- organization membership;
- branch or location;
- roles;
- permissions;
- login information;
- authentication information;
- account security records.
Passwords should be stored using appropriate technical protection mechanisms rather than in plain text.
3.3 Business and Professional Information
This may include information relating to:
- business name;
- business activity;
- locations;
- opening hours;
- products;
- services;
- employees and service providers;
- schedules;
- appointments;
- inventory;
- settings;
- business operations performed through Zelun.
3.4 Tax and Billing Information
Where necessary, we may process:
- tax identification numbers;
- legal entity name;
- tax regime;
- tax postal code;
- tax address;
- CFDI usage information;
- information required for electronic invoicing;
- billing information;
- invoice and transaction history.
3.5 Payment-Related Information
We may process:
- subscription plan;
- subscription price;
- subscription history;
- transaction amounts;
- currency;
- payment status;
- refunds;
- transaction references;
- identifiers provided by payment processors.
Where payment information is processed directly by specialized payment providers, Zelun may not receive or store full card numbers, security codes or complete financial credentials.
3.6 Technical and Device Information
This may include:
- IP address;
- browser;
- operating system;
- device type;
- technical identifiers;
- language;
- time zone;
- access date and time;
- activity logs;
- security events;
- error logs;
- cookies;
- local storage;
- similar technologies.
3.7 Service Usage Information
This may include information relating to:
- features used;
- screens visited;
- settings;
- actions taken within the platform;
- frequency of use;
- performance;
- account activity;
- interactions with integrations and tools.
3.8 Communications and Support
This may include:
- support requests;
- emails;
- conversations;
- files;
- screenshots;
- feedback;
- sales inquiries;
- information voluntarily provided when communicating with us.
4. Data Processed on Behalf of Businesses Using Zelun
Businesses using Zelun may enter information relating to their own customers, employees, contractors and vendors.
Depending on the features used, this information may include:
- names;
- telephone numbers;
- email addresses;
- dates of birth;
- preferences;
- notes;
- appointment history;
- booked services;
- services received;
- products purchased;
- payments;
- deposits;
- prepayments;
- transaction history;
- cancellations;
- no-shows;
- account balances;
- loyalty information;
- communications;
- employee information;
- schedules;
- commissions;
- information necessary to operate the business.
For this data, the business using Zelun is generally responsible for providing applicable privacy notices, obtaining required consent and establishing another appropriate lawful basis where necessary.
Zelun processes such data pursuant to the documented instructions of the business, our agreement with that business, the applicable Data Processing Agreement and applicable law.
5. Sensitive Personal Data
Zelun does not generally request users to provide sensitive personal data.
Businesses should avoid storing sensitive personal data unless:
- it is strictly necessary for a legitimate feature;
- processing is permitted by applicable law;
- the business has an appropriate legal basis;
- legally required consent has been obtained;
- appropriate safeguards are implemented.
Sensitive personal data may include information concerning:
- health;
- genetics;
- biometrics used for identification;
- racial or ethnic origin;
- religious beliefs;
- political opinions;
- sexual preference or orientation;
- sex life.
If Zelun directly collects sensitive personal data for which consent is legally required, we will obtain the applicable express consent prior to processing.
6. Primary Purposes of Processing
Zelun may process personal data for purposes necessary to provide and operate the Services, including to:
- register and administer accounts;
- identify and authenticate users;
- manage roles and permissions;
- provide contracted functionality;
- administer subscriptions;
- process payments;
- issue invoices and CFDIs where applicable;
- manage plans and renewals;
- provide scheduling and booking functionality;
- manage businesses, locations, employees, customers and inventory;
- process account settings;
- operate integrations;
- facilitate communications requested by customers;
- send confirmations and transactional notifications;
- provide technical support;
- diagnose errors;
- respond to requests;
- prevent fraud;
- prevent abuse;
- maintain Service security;
- protect accounts and infrastructure;
- create backups;
- maintain technical records;
- maintain contractual records;
- comply with tax, accounting and regulatory obligations;
- respond to competent authorities;
- exercise or defend legal and contractual rights;
- investigate violations of our Terms of Service.
These purposes are necessary to establish, maintain and administer the relationship with Zelun.
7. Secondary Purposes
Where permitted, we may process certain information for additional purposes, including to:
- send promotions;
- send Zelun news;
- announce new features;
- offer related products or services;
- conduct surveys;
- measure satisfaction;
- generate statistics;
- analyze product usage;
- improve user experience;
- develop new functionality.
These purposes are not necessary in order to use Zelun's core functionality.
You may request that your information not be used for promotional or marketing purposes by contacting:
privacy@releasetwin.com
You may also use the unsubscribe mechanism included in our marketing communications.
Refusing secondary purposes will not prevent you from using contracted Zelun functionality.
8. Artificial Intelligence and Automated Systems
Certain Zelun features may use artificial intelligence, machine learning or other automated systems to:
- generate content;
- classify information;
- summarize information;
- provide recommendations;
- automate workflows;
- assist users;
- detect errors, fraud or abuse.
Automatically generated output may contain errors and should not be treated as legal, tax, financial, medical or other professional advice.
Where Zelun uses information to improve general systems or proprietary models, we seek to use aggregated or appropriately de-identified information where reasonably practicable.
Zelun will not use sensitive personal information for general training of proprietary models without an appropriate legal basis and any legally required consent.
9. Processors, Service Providers and Subprocessors
Zelun may engage third-party service providers to operate the Services.
These providers may support areas such as:
- cloud infrastructure;
- hosting;
- databases;
- data storage;
- backups;
- payment processing;
- billing;
- email;
- SMS;
- WhatsApp;
- communications;
- authentication;
- security;
- fraud prevention;
- product analytics;
- monitoring;
- observability;
- technical support;
- artificial intelligence.
Where these providers process personal data on behalf of Zelun, they are required to process the information subject to contractual and confidentiality obligations appropriate to the nature of their services.
10. Domestic and International Data Transfers
Zelun may transfer personal data to third parties in Mexico or other countries where necessary to:
- perform a contractual relationship;
- provide requested Services;
- complete a transaction requested by an individual;
- comply with legal obligations;
- exercise or defend legal rights;
- respond to requests from competent authorities;
- complete corporate transactions permitted by applicable law.
Where applicable law permits a transfer without the individual's consent, the transfer may be made pursuant to the applicable legal exception.
Where a transfer legally requires consent, Zelun will request such consent through an appropriate mechanism.
Service providers acting solely as Zelun's processors or subprocessors are not thereby authorized to use personal data for unrelated purposes of their own.
11. Processing Outside Mexico
Zelun provides cloud-based technology services and may use service providers located or operating infrastructure outside Mexico.
As a result, certain information may be processed or stored in other countries.
Where applicable, Zelun will implement reasonable contractual, organizational and technical safeguards designed to protect information during such processing.
12. Data Retention
Zelun retains personal data only for as long as reasonably necessary to:
- satisfy the purposes for which it was collected;
- provide the Services;
- comply with contractual obligations;
- comply with tax, accounting or other legal obligations;
- resolve disputes;
- prevent fraud;
- maintain security;
- exercise or defend legal rights.
Terminated Accounts
When a customer terminates or cancels its Zelun account, Customer Data will generally remain available for export for 60 days following termination.
Certain operational functionality may be restricted or disabled during that period.
After the 60-day period, Zelun may delete Customer Data from active production systems.
Certain information may be retained for a longer period:
- where legally required;
- during legally required blocking periods;
- in tax or accounting records;
- in security logs;
- in backups;
- in disaster-recovery systems;
- where necessary to resolve disputes or liabilities.
Information contained in backups will be deleted according to Zelun's normal backup overwrite and retention cycles.
13. Information Security
Zelun implements reasonable administrative, technical and physical safeguards designed to protect personal data against:
- loss;
- damage;
- alteration;
- destruction;
- unauthorized access;
- unauthorized disclosure;
- misuse.
Depending on the circumstances, these safeguards may include:
- access controls;
- authentication;
- encryption;
- activity logs;
- permission segregation;
- backups;
- monitoring;
- infrastructure security measures.
No Internet-connected system can guarantee absolute security.
If a security breach significantly affects individuals' property or moral rights, Zelun will provide notifications as required by applicable law.
14. Privacy and ARCO Rights
Individuals may exercise the Mexican rights of Access, Rectification, Cancellation and Objection (ARCO).
Access
You may request information regarding personal data we hold about you and the general conditions under which it is processed.
Rectification
You may request correction of inaccurate, incomplete or outdated personal information.
Cancellation
You may request cancellation of personal information where legally appropriate.
Cancellation may result in a blocking period during which the information is retained solely for purposes of potential legal or contractual liability.
Objection
You may object to certain processing in the circumstances provided by applicable law.
To exercise an ARCO right, contact:
privacy@releasetwin.com
Your request should include at least:
- your name;
- a method for receiving communications;
- documentation proving your identity;
- where applicable, documentation proving representation;
- a clear description of the relevant personal data;
- the right you wish to exercise;
- any information that may help locate the data.
For rectification requests, you should also identify the requested correction and provide documentation supporting it.
Zelun will respond within the time periods established under applicable law.
15. Withdrawal of Consent
Where processing is based on your consent, you may request withdrawal of that consent by contacting:
privacy@releasetwin.com
Withdrawal:
- will not operate retroactively;
- will not affect processing lawfully performed before withdrawal;
- may not apply where continued processing is necessary to comply with legal or contractual obligations.
16. Limiting Use or Disclosure
You may request that Zelun limit certain uses or disclosures of your personal information by contacting:
privacy@releasetwin.com
For marketing communications, you may also use the unsubscribe mechanism contained in the relevant message.
17. Cookies and Similar Technologies
Our websites and applications may use cookies, local storage and similar technologies to:
- maintain sessions;
- authenticate users;
- remember preferences;
- provide essential functionality;
- prevent fraud;
- maintain security;
- measure performance;
- analyze usage;
- improve the Services.
Where applicable law requires consent for particular categories of cookies or technologies, Zelun will provide an appropriate consent mechanism.
18. Children
Zelun is primarily intended for businesses and individuals who have legal capacity to enter into contracts.
Zelun does not seek to directly collect children's personal information for purposes of creating business accounts.
Businesses using Zelun are responsible for complying with applicable law when they enter information relating to minors into their own accounts, including obtaining any required consent.
19. Requests Regarding Data Controlled by Our Customers
If you are an end customer, employee or contractor of a business using Zelun and wish to exercise rights relating to information that business maintains through Zelun, you should generally contact that business first.
Where appropriate, Zelun will provide reasonable assistance to the business in responding to the request pursuant to the applicable Data Processing Agreement.
20. Corporate Transactions
In connection with a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, certain personal data may form part of the transaction to the extent permitted by applicable law.
Any subsequent processing remains subject to applicable privacy obligations and restrictions.
21. Changes to This Privacy Notice
Zelun may update this Privacy Notice as a result of:
- changes in law;
- regulatory changes;
- new features;
- changes to our Services;
- new providers;
- changes to our processing practices.
The current version will be available at:
https://zelun.io/en/privacy/2026-10-16
Where changes are material, we may provide notice through:
- email;
- an in-product notification;
- our website;
- another reasonable communication method.
The date shown at the beginning of this Notice identifies the current version.
22. Privacy Contact
For privacy questions, requests or personal data matters:
ZELUN TECHNOLOGIES, S.A.S.
Registered address:
Avenida México 2582, Torre 200, Interior 10E
Colonia Ladrón de Guevara
Guadalajara, Jalisco 44600
Mexico
Privacy email:
privacy@releasetwin.com
Website:
https://zelun.io