Privacy notice

This privacy notice is a courtesy English translation. The legally binding version is the Spanish Aviso de privacidad, governed by Mexican law.

Identity and address of the controller

AfterSync Technologies, S. de R.L. de C.V. (“AfterSync”, “Xok”, “we”), domiciled in San Pedro Garza García, Nuevo León, Mexico, is responsible for processing your personal data under the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (the “Law”), its Regulations, and other applicable rules.

Xok is a tax management and analytics platform operating at xok.mx (the “Site” and the “Platform”).

Personal data we collect

For the purposes described in this notice, we may collect:

  • Identification and contact data: first and last name, email, phone number, company, and RFC (tax ID).
  • Tax data: Digital Tax Receipts (CFDIs) and the tax information you sync or upload to the Platform for processing, organization, and analysis.
  • Usage and technical data: IP address, browser type and version, device identifiers, pages visited, and data generated through cookies and similar technologies.
  • Billing data: that needed to process your subscription payment (handled by our payment processor; see Processors).

We do not collect sensitive personal data to operate the Platform.

Purposes of processing

Primary purposes (necessary to provide the service):

  • Create and manage your account and subscription.
  • Provide, maintain, and operate the Platform and its modules (bulk CFDI download, stamping, tax analytics, and tax library).
  • Process payments and issue the corresponding receipts.
  • Provide support and handle your requests.
  • Notify you of service changes and send you operational or security notices.
  • Detect, prevent, and address technical issues, fraud, or misuse.

Secondary purposes (not necessary for the service; you may object to them):

  • Generate statistics and analytics to improve the Platform.
  • Send you newsletters or commercial communications about our products and services.
  • Show you personalized advertising and run remarketing on and off the Site.

If you do not want your data used for the secondary purposes, you may say so at any time by writing to hello@xok.mx. Declining these purposes will not be grounds to deny you the service.

Data transfers

Your data may be stored and processed on servers located inside or outside Mexico by the infrastructure providers we use as processors. We do not transfer your personal data to third parties for marketing purposes without your consent. We only carry out transfers that do not require consent under article 37 of the Law (for example, those necessary under a contract entered into in your interest with our processors, or where required by a competent authority).

Processors and third parties

We rely on providers that process data on our behalf and under our instructions, subject to confidentiality and security obligations:

  • Amazon Web Services (AWS) — infrastructure, compute, and storage for the Platform (the application), including encrypted custody of tax credentials in AWS Secrets Manager.
  • Cloudflare — delivery, security, and hosting of the xok.mx website.
  • Stripe — subscription payment processing.
  • Mailgun — notifications and transactional email.
  • Google Analytics and Umami — Site usage analytics.
  • Meta (Facebook and Instagram), X (Twitter), LinkedIn, Google Ads / AdSense, and Microsoft Advertising (Bing) — campaign measurement, advertising, and remarketing.

The specific cookies and tracking technologies of these providers are described in our Cookie policy.

Additionally, to provide the tax services, the Platform interacts with the Mexican Tax Administration Service (SAT) and Authorized Certification Providers (PAC) on your instruction and on your behalf.

Cookies and tracking technologies

The Site uses cookies and similar technologies (session, preference, security, analytics, advertising, and remarketing) to operate correctly, remember your preferences, understand Site usage, and show you relevant advertising on and off the Site. You may accept or reject the non-essential categories from the consent panel and set your browser to reject cookies, though this may limit some features. For more detail, see our Cookie policy.

How to exercise your ARCO rights

You have the right to Access your personal data, to Rectify it when inaccurate, to Cancel it when you believe it is not needed for any of the stated purposes, and to Object to its processing (ARCO rights). You may also withdraw the consent you have given us and limit the use or disclosure of your data.

To exercise any of these rights, send your request to hello@xok.mx, stating your name, your contact details, a clear description of the data concerned, and the action you are requesting. We will respond within the timeframes established by the Law.

Changes to this privacy notice

We may update this privacy notice to reflect changes in our practices or applicable regulations. The current version will be published at xok.mx/legal/privacidad with the date of last update. We recommend reviewing it periodically.

Contact

For any questions about this notice or the processing of your personal data, write to hello@xok.mx.

Last updated: June 23, 2026.