Privacy Notice
Last updated: June 22, 2026
1. Data controller
Jose Santiago Rueda Antonio, doing business as 3 Alpha IA, with address at Mar Mediterráneo 172, Col. Popotla, C.P. 11400, Alcaldía Miguel Hidalgo, Ciudad de México, México., is responsible for the personal data processing described in this notice. For privacy matters, contact legal@3alphaia.com.
2. Data we may process
- Name
- Email address
- Company
- Job title
- Phone number, when provided
- Country or time zone, when provided
- Message, use case or business need
- Commercial communications
- Contractual, tax and billing information when a commercial relationship exists
- Minimal technical data necessary for website security and operation when collected by essential infrastructure
We do not request sensitive personal data through public forms. Do not submit passwords, API keys, medical information, PHI, sensitive financial data, trade secrets, confidential documentation or regulated information through this website.
3. Necessary purposes
- Respond to contact requests
- Handle inquiries
- Evaluate consulting opportunities
- Prepare proposals
- Manage commercial and contractual relationships
- Execute contracted projects
- Issue tax receipts and meet legal obligations
- Protect website, communications and system security
- Prevent fraud, abuse or unauthorized use
4. Optional purposes
Send updates, resources, ideas and commercial communications related to AI agents only when the individual has given specific consent or another valid basis applies under applicable law.
You may withdraw consent or opt out of commercial communications at any time using the unsubscribe link in our messages or by writing to legal@3alphaia.com.
5. Client and project data
When 3 Alpha IA processes personal data on behalf of a client during a project, it acts under the client's documented instructions, the applicable contract, agreed technical scope and, where relevant, a data processing agreement.
Whenever possible, we recommend and prioritize deployment on infrastructure, cloud accounts or environments controlled by the client.
6. Providers, subprocessors and transfers
To operate this website, we currently use:
- Cloudflare — Hosting, delivery and protection of the static website.
- Google Analytics — Website usage measurement (if configured).
For consulting projects, specific providers (cloud, AI models, storage, observability, etc.) will be defined in the applicable proposal, contract, DPA or security annex.
Processing location and applicable providers may vary by project, chosen infrastructure and client instructions. Where applicable, providers and conditions will be documented in the contract, technical proposal, DPA or corresponding security documentation.
7. Retention
- Contact requests and uncontracted proposals: up to 24 months from last interaction, unless earlier deletion is requested or a different legal obligation applies.
- Marketing: until consent withdrawal, unsubscribe or 24 months of inactivity.
- Contracts, billing and tax documentation: for the commercial relationship and as required by applicable tax and legal obligations.
- Project data: per contract, DPA, client instructions and agreed deletion schedule.
We do not promise immediate deletion when tax, contractual, security or claims-related obligations require retention.
8. Security
We apply reasonable administrative, technical and organizational measures proportionate to the scope, nature and risk of each processing activity.
9. Privacy rights
You may request access, correction, deletion, restriction or object to certain processing where applicable, and withdraw consent for optional processing.
To exercise your rights or request information about how we handle your data, send a request to legal@3alphaia.com with your name, preferred response method, a clear description of your request and any information that helps locate the relevant data.
This website does not make automated decisions about individuals.
We do not use client confidential information, prompts or documentation to train proprietary models or for purposes outside the project without prior written authorization.
10. Changes
Changes to this Privacy Notice will be published on this page. The last updated date indicates the current version.