Comprehensive Privacy Notice
1. Who is responsible for your data
REALIGHT INFORMÁTICA APLICADA, S.A. DE C.V., with registered address at Calle 42 número 308, Colonia Campestre, C.P. 97120, Mérida, Yucatán, Mexico, is the data controller responsible for the processing of your personal data.
Realight Informática Aplicada operates the commercial brand Hypsen. In this notice, "Realight" or "Hypsen" are used interchangeably to refer to the same data controller entity.
For any questions regarding this policy, contact us at contacto@hypsen.ai.
This notice is issued in accordance with the Federal Law on Protection of Personal Data Held by Private Parties in Mexico.
2. What data we collect
The personal data we process depends on how you interact with us:
If you register for an event, download content, or contact us
- Full name
- Email address
- Phone number or WhatsApp
- Company name
- Job title / role
- Operational details shared voluntarily (e.g. estimated number of employees trained per year)
If you subscribe to or contract the platform
In addition to the above:
- Billing and corporate tax information (Legal company name, Tax ID / RFC, billing address)
- Account administrator contact details
- Platform usage and activity logs
If you browse our website
- IP address
- Browser and device type
- Visited pages and visit duration
- Referral source URL
We do not request or require sensitive personal data for any purpose: we do not collect information regarding racial or ethnic origin, health status, religious or philosophical beliefs, union membership, political opinions, or sexual preferences. If such data is received, it will be promptly deleted.
3. Why we use your data
We distinguish between necessary primary purposes and optional secondary purposes.
Primary Necessary Purposes
Indispensable to provide the service:
- Confirm event registrations, workshops, or informational sessions
- Send logistical details and attendee materials
- Respond to inquiries and support requests
- Deliver, manage, and maintain contracted software platform services
- Invoicing and payment processing
- Compliance with tax, accounting, and legal requirements
- Responding to competent authority orders
Secondary Voluntary Purposes
Optional marketing and research activities:
- Notify you about upcoming events, webinars, and educational content
- Send product updates and commercial news
- Invite participation in industry surveys and research
- Generate aggregated, anonymous training benchmarks
You can opt out at any time by:
- Emailing contacto@hypsen.ai with subject "Limit data usage"
- Clicking the unsubscribe link at the footer of any promotional email
- Unchecking the voluntary consent box on applicable forms
4. Who we share your data with
Hypsen does not sell, rent, or trade your personal data.
We only share information under the following circumstances:
| Recipient | Purpose | Consent Required? |
|---|---|---|
| Cloud infrastructure and email service providers | Hosting the platform and delivering operational communications | No. Processors acting on behalf of Hypsen under strict confidentiality agreements |
| Event co-hosting chambers or institutions | Access control and attendee registration | Yes, informed at the time of registration |
| Competent judicial or administrative authorities | Compliance with legally binding requests | No, by statutory requirement |
| Legal and accounting advisors | Tax and regulatory compliance | No, required for legal compliance |
5. Your Rights (ARCO)
You have the right to:
- Access: Know what personal data we hold and how we use it
- Rectify: Request correction of inaccurate or outdated information
- Cancel: Request deletion when data is no longer necessary
- Oppose: Object to processing for specific purposes
You may also revoke your consent at any time.
How to Exercise Your Rights
Send your request to contacto@hypsen.ai including:
- Your full name and contact email/address
- Valid government-issued photo ID (or legal power of attorney)
- Clear description of the right you wish to exercise and specific data involved
- Any supporting documentation facilitating location of records
6. Cookies and Tracking Technologies
We use essential and analytics cookies to maintain website functionality, analyze usage patterns, and evaluate promotional reach. You may configure your browser to block cookies, though some features may experience degraded functionality.
7. Corporate Customer Employees (Data Processor Role)
When an enterprise customer uses Hypsen to train and evaluate employees, the employer is the Data Controller. Hypsen acts strictly as a Data Processor according to the employer's instructions.
- Your employer's privacy notice governs employee data handling
- Hypsen never uses corporate employee data for independent commercial purposes
- Each customer environment is strictly logically and physically segregated
- ARCO requests should be directed to your employer
Spoken interactions are processed solely for evaluating job-related knowledge and conversational skills. Hypsen DOES NOT use voice recordings for biometric identification. Retention terms are determined by the employer.
8. Data Retention Periods
| Data Type | Retention Period |
|---|---|
| Event registration & sales leads | Up to 24 months from last contact, or until opt-out |
| Active customer accounts | Duration of service contract |
| Tax & accounting records | 5 years, as required by law |
| Web analytics | Up to 12 months |
9. How We Protect Your Data
We enforce administrative, technical, and physical controls including in-transit (TLS) and at-rest (AES-256) encryption, role-based access restrictions, multi-tenant isolation, certified SOC2/ISO27001 data center infrastructure, and automated backups.
10. Policy Updates
Updates are published at hypsen.ai/en/privacy-notice with the latest revision date. Substantial changes will be notified via email.
11. Competent Authority
If you have unresolved concerns, you may contact the Mexican Data Protection Authority (Secretaría Anticorrupción y Buen Gobierno).
12. Your Consent
By providing personal data through our website, forms, or emails, you declare that you have read and agreed to the processing described in this Privacy Notice.