DODA.mx logoDODA.mx
ESSign up

Privacy Notice

Last updated: August 25, 2026

This notice explains how we handle your personal data when you visit doda.mx (this informational site) and when you use the application at app.doda.mx (the Service). It is written under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (Ley Federal de Protección de Datos Personales en Posesión de los Particulares, or LFPDPPP) and its regulations, which is the law that applies to us.

1. Who is responsible

The data controller is Tótem Computer, a Mexican technology company based in Monterrey, Nuevo León, Mexico, which operates the DODA.mx service. For anything related to your personal data, write to soporte@doda.mx.

2. Personal data we collect

On doda.mx (this site) we collect only what we need to run it and to understand how it is used:

  • Contact data you give us: name, email address, company (optional) and the message you write in the contact form.
  • Technical and usage data: approximate IP address, device and browser type, pages viewed, language and traffic source, collected in aggregate form by Google Analytics 4.

On app.doda.mx (the Service) we also collect:

  • Identification and contact data: name, email address and mobile phone number (optional, only if you turn on WhatsApp notifications).
  • Customs operation data: DODA integration numbers, pedimento numbers, containers, seals, customs broker license number, port of clearance and any other information contained in the DODA receipts you upload.
  • Technical data: IP address, browser type, cookies and session tokens needed to keep you signed in.

We do not collect sensitive personal data. We never ask for your e.firma, your SAT password or any credential that grants access to a government portal.

3. Why we use your data

We use your data for these primary purposes:

  • Checking the status of your DODAs on the public SAT portal, on your behalf.
  • Notifying you of status changes by email, browser push or WhatsApp.
  • Letting you share a DODA status through a public tokenized link.
  • Answering the requests you send through the contact form or by email.
  • Providing and improving the Service (support, debugging, billing, aggregate metrics).
  • Complying with legal, tax and information security obligations.

As a secondary purpose, we may send you product news. You can opt out at any time, with no effect on the Service, by writing to soporte@doda.mx or using the unsubscribe link in any email.

We do not sell your data, we do not use it for third party marketing and we do not share it with commercial partners without your express consent.

4. Transfers and processors

To run the site and the platform we rely on service providers that act as processors, handle the data on our behalf and are bound by confidentiality obligations. Some of them are located in the United States and the European Union:

  • Google Analytics 4 (aggregate usage metrics for doda.mx)
  • Web3Forms (processing and delivery of the contact form)
  • Supabase (database and authentication for the Service)
  • Hetzner (hosting for the application and background workers)
  • Resend (transactional email delivery)
  • Twilio (WhatsApp message delivery, only if you enable it)

These transfers are necessary to perform our contractual relationship with you and are made under article 37, section V, of the LFPDPPP, so they do not require additional consent. Beyond these cases we do not transfer your data to third parties without your authorization, except in response to a duly founded request from a competent authority.

5. ARCO rights

Under Mexican law you have the right to Access your personal data, Rectify inaccurate data, Cancel data you consider unnecessary and Oppose its processing (together, ARCO rights), as well as to withdraw any consent you have given us.

To exercise them, write to soporte@doda.mx from the address you signed up with, stating your name, the right you want to exercise and a clear description of the data involved. We may ask for official identification to verify who you are. We will answer within 20 business days and, where the request is well founded, act on it within the following 15 business days.

6. Limiting use or disclosure

You can opt out of our communications at any time through the unsubscribe link at the bottom of every email or from your settings page inside the application. Cancelling your account permanently deletes your personal data and the receipts you uploaded, except for what we must keep to meet a legal or tax obligation.

7. Cookies and similar technologies

On doda.mx we use cookies and local storage for two things: remembering your language and theme preferences, and measuring site usage with Google Analytics 4. Analytics gives us aggregate information (most visited pages, approximate country, device type) that we do not use to identify you individually. You can review Google's own information on how Google uses data from sites that use its services.

If we display ads on the site or in the free plan in the future, advertising providers (for example, Google AdSense) may set their own cookies, governed by their privacy policies and not by ours. We will update this notice before that happens.

You can block or delete cookies from your browser settings. Keep in mind that disabling strictly necessary cookies may prevent you from signing in to the application.

8. Security

We apply reasonable technical, physical and administrative safeguards: encryption in transit (HTTPS/TLS), encryption at rest in the database, per user access control, session tokens rotated periodically and access logging. No system is infallible; if a breach materially affects your rights, we will notify you without undue delay.

9. Data retention

We keep your data for as long as your account is active or for as long as it is needed for the purposes described above. Messages received through the contact form are kept for as long as it takes to handle your request and follow up. After that we delete or anonymize them, unless the law requires otherwise.

10. Changes to this notice

We may update this notice to reflect legal, technical or product changes. The date of the latest update appears at the top of this page. Material changes will be announced by email at least 15 days before they take effect.

11. Regulator

If you believe your data protection rights have been violated, you may file a complaint with Mexico's National Institute for Transparency, Access to Information and Personal Data Protection (INAI).

12. Contact

For questions about this notice, write to soporte@doda.mx or use the contact page. You can also review our Terms and Conditions.