1Who we are
Who is responsible for your data, and how to reach us.
Grupo Ambit Technology, [PENDIENTE: legal form] ("Ambit"), RFC GAT070808DH6, with its address at [PENDIENTE: registered address], is the controller of the personal data described in this notice. Our Personal Data Protection Department handles every request at privacidad@ambit.la.
In the App Store, our apps are published under Swedish Technologies, S.A. de C.V., a related company that acts on behalf of Grupo Ambit Technology and does not use the data for its own purposes.
2Our two roles
For your account, we decide. For guests' and staff data, the restaurant decides and we follow its instructions.
We are the controller of the data of Ambit account holders, of people who sign in to our consoles, and of visitors to our sites.
For the data a restaurant records about its staff and its guests we act as a processor: the restaurant is the controller, its own privacy notice applies, and we process that data only on its instructions and under our contract with it. If you write to us about data of this kind, we send your request to the restaurant within 5 business days and let you know.
3Data we handle
Your account, the business's tax details, what happens on the till and payment receipts. Never your location, your contacts or your full card number.
- Account: email address, name, role and the locations you work at. Your PIN is stored only as a one-way verifier: we cannot read it.
- Sign-ins: IP address, browser and date of each sign-in.
- Business tax details: legal name, RFC, tax regime and fiscal postal code.
- Till activity: orders, amounts, who rang them up and on which device, and a change log (who changed what, and when).
- Guests: if the restaurant records them, a first name on the ticket and an allergy note.
- Card payments: card brand, last 4 digits, authorization code and the terminal receipt. The full number and the security code stay inside the Kushki or QPay terminal and never reach us.
- Devices: name, local network address and last connection; the IP address when a device is paired.
- Assistant: the messages you write to it and the data it looks up to answer.
- Emails we send: address, message type and delivery status.
Sensitive data. An allergy note can reveal health information, which the law treats as sensitive. Restaurants should record one only when the guest asks.
We do not collect your location, your contacts, the camera, the microphone, advertising identifiers, your full card number or its security code.
4Purposes
To run the point of sale. For marketing, only if you agree.
No consent needed, because they are necessary for our relationship with you:
- running the point of sale and syncing your devices;
- processing payments and refunds;
- issuing invoices (CFDI);
- giving you support;
- protecting your account and preventing fraud;
- meeting legal and tax obligations.
Only with your consent: sending you product news and promotions by email.
If you do not want your data used for this purpose, you can refuse at any time with the link in every such email, or by writing to privacidad@ambit.la with the subject "No deseo publicidad". Refusing does not affect your service.
5The Assistant
What you write to the Assistant is processed by Anthropic on our behalf. It is not used to train models.
When you use the Assistant, your messages and the data it looks up to answer (for example menu items or staff names) are sent to Anthropic, PBC, in the United States, acting as our processor. Anthropic does not use them to train its models and generally deletes them within 30 days, unless the law or enforcing its usage policies requires keeping them longer.
7How long we keep it
While your account is open, except what is deleted sooner and what the law makes us keep.
| Data | Period |
|---|---|
| Account data | While the account is open |
| Sign-in records (IP address, browser and date) | While the account is open |
| Orders | While the account is open; when it is deleted, we keep only what tax law requires |
| Payment and refund records | With their orders; after the account is deleted, at least 5 years as tax records |
| Guest name and allergy note | With their order, while the account is open |
| Conversations with the Assistant | While the account is open; we delete them sooner if you ask |
| Change log | 24 months (the account owner can extend it up to 120) |
| Payment terminal log | 180 days |
| Sent email log | 90 days |
| IP when pairing a device | Up to 48 hours |
| Staff list stored on a till (names, roles and PIN verifiers) | While the till is in use; replaced on every sync |
| Offline orders on a till | 26 hours after settlement |
| Invoices and tax records | At least 5 years (article 30 of the Código Fiscal de la Federación) |
8Your rights (ARCO)
You can see, correct or delete your data, or object to a use. We answer within 20 business days, free of charge.
You have the right to access your data, rectify it, cancel it or object to its processing (the ARCO rights), and to revoke your consent and limit the use or disclosure of your data.
Send your request to privacidad@ambit.la with:
- your name and a way to reply to you;
- an official ID, or your representative's together with proof of representation;
- what you are asking for, and anything that helps us find your information.
We answer within 20 business days and, where it applies, act on it within the following 15 business days. Each period can be extended once by the same length; if that happens, we tell you why. The procedure is free; only shipping or copying costs could apply.
When data is cancelled, we first block it and then delete it; while blocked, we keep it only to meet legal obligations. If you disagree with our answer, you can turn to the Secretaría Anticorrupción y Buen Gobierno.
9Deleting your account
You can ask without the app and without signing in. We delete your account within 30 days and keep, blocked, the tax records the law requires, including payment and refund records.
10Apps and permissions
- Local network: to find printers and other tills.
- Bluetooth: to print to paired printers.
- Foreground service (Android): to keep tills and printers connected, even when the app is in the background.
- Notifications (Android): to show the notice that the till is still connected in the background.
- Display over other apps (Android): to reopen the till if it closes unexpectedly. You turn it on in the device settings.
- Install updates (Android): so the app can install its new versions.
We never ask for location, camera, microphone or contacts. Our apps contain no analytics or advertising tools.
12Security
We use encrypted connections, keep payment providers' keys in an encrypted vault, store PINs as one-way verifiers, grant permissions by role and location, and log every change. If a breach significantly affects your rights, we will tell you without delay.
13Changes to this notice
Every version of this notice has a number and a date, and we keep the earlier ones. Significant changes (a new purpose, a new recipient or a longer retention period) are emailed to account owners 15 days before they apply. Wording fixes apply when published.
- Version 1.0, in force since [PENDIENTE: publication date]. First version.