This English translation is provided for convenience. The Spanish version governs. Read in Spanish

Privacy notice

Last updated: 27 October 2026.

Who is responsible for your data

Dikto ("we") is responsible for the personal data we collect on dikto.co, in the application and by email. For any privacy matter, write to hola@dikto.co.

Dikto is a workspace where the companies in a cross-border trade operation (importers, suppliers, customs brokers, forwarders) coordinate what is required. The documents and data a company uploads to an operation are processed on that company's behalf and shown only to the parties it authorizes.

What data we collect

If you request beta access (waitlist). Your name, work email, company, business activity and, if provided, country and note. We also collect the language, referral information and, if you arrive from an ad, campaign data and the click identifier. We use connection data to limit automated submissions.

If you have an account. Your name, email and password (stored encrypted by our sign-in provider; we never see it), your company and role, together with information you provide or generate using Dikto: operations, orders, documents and versions, messages, reviews, decisions and activity records.

If you participate by email or through a link. A company may give us your name and email to invite you without an account. We process messages you send to Dikto, including sender, subject, body and attachments, and information you share through an access link.

If you book a call. We receive information you enter in the external calendar service, such as your name, email and notes.

Technical data. Connection and usage data, such as IP address, browser, requested page, time and error reports, to operate and protect the service.

We do not request sensitive personal data. Avoid including it in notes, messages or documents unless it is necessary and you are authorized to share it.

What we use it for

Necessary purposes:

• Manage the waitlist, write to you to book a call and let you know when there is room for your company.
• Give you access to Dikto, keep your session and make the product work: operations, requests, documents, conversations, email notices.
• Show each participant only what belongs to them and keep the record of who did what.
• Protect the service: limit automated submissions, detect failures, handle incidents.

Secondary purposes (you can object without affecting the service):

• Write to you with news about Dikto.
• Measure whether our ads and campaigns work.

To object, write to hola@dikto.co or use the unsubscribe link that every news email will carry.

We do not sell personal data. We currently do not use third-party artificial-intelligence models to process your data as a feature of the service.

Legal basis and consent

By submitting the form, opening an account or participating in an operation, you consent to processing for the necessary purposes. Advertising cookies load only if you accept them. If you are in the European Union or the United Kingdom: we process your data to provide the service you request (contract), on our legitimate interest in protecting the service, and with your consent for advertising and measurement. You can withdraw it at any time.

Cookies and similar technologies

Necessary and preference technologies. We use cookies and browser storage to maintain your session, remember language and view preferences, and keep your advertising choice for 180 days. Campaign tags in a link are kept in the tab for the session to associate them with an access request.

Optional advertising. When enabled, LinkedIn, Google Ads and Meta Pixel tools load only after you accept. They measure campaigns and display Dikto ads on those platforms. They collect browser data, such as IP address, cookies and pages viewed, under their own privacy notices. Dikto may report that an access request was completed.

You can accept or decline advertising and change your choice through “Cookies” in the footer when these tools are enabled. On withdrawal, we stop loading the tags and remove advertising cookies we control on our domain. Cookies on other domains are managed through your browser or the relevant platform.

Who we share it with

With the companies participating in your operations, according to permissions and the actions of authorized people.

To provide the service, we use providers for:

• Hosting, databases, sign-in, storage and backups.
• Sending and receiving email, which may include the provider retaining messages.
• Error diagnostics and security.
• Call scheduling.
• Company logos: the browser requests a logo using the company's domain, sending that domain and connection data to the provider. Logos provided by Logo.dev.
• Translation of messages, when enabled.
• Shipment tracking, when enabled: the bill of lading, booking or container reference and carrier are communicated.

If you want to know which company provides each service, write to hola@dikto.co. Processing depends on the service provided and the applicable terms and agreements. We do not sell personal data.

With your consent, we share data with the advertising platforms described under “Cookies”. We may also disclose data where required or permitted by applicable law, for example to comply with a valid order or defend legal rights.

International transfers

Dikto uses providers in other countries, mainly the United States. Your data may be stored or processed outside your country of residence. You can request information about recipients and applicable safeguards from hola@dikto.co. Where applicable law requires it, transfers must have the corresponding safeguards.

How long we keep it

We retain data according to its purpose, the service relationship, legal obligations and the need to maintain shared operation records:

• Waitlist: until you join, request deletion or the list closes, subject to applicable obligations.
• Account and activity: during the service relationship and, where appropriate, to preserve operation traceability, handle claims or meet legal obligations.
• Operations, documents and conversations: according to the relationship with the relevant company and the retention needs of shared records.
• General email not associated with a company: scheduled for deletion after 30 days, unless it must be retained because it is linked to other records.
• Technical logs, reports and backups: according to their purpose and the retention cycles of the services used.

A deletion request does not necessarily mean deleting other companies' records or information that must be retained. You can request information about retention of your data from hola@dikto.co.

Your rights

You can access your data, rectify it, cancel it and object to its processing (ARCO rights under Mexican law), revoke your consent and limit the use or disclosure of your data. Write to hola@dikto.co with your name, the email Dikto knows you by, the right you want to exercise and, where applicable, a copy of your ID. We respond within 20 business days at most and, where the request is granted, give effect to it within the following 15 business days, subject to the extensions and exceptions provided by applicable law. If you are not satisfied, you may turn to Mexico's Secretaría Anticorrupción y Buen Gobierno.

In the European Union or the United Kingdom you also have the right to data portability, to restriction of processing and to complain to your country's data-protection authority.

If a company invited you, deleting something you shared in its operation may require its decision; we will tell you whom to turn to.

Security

We apply technical and organizational measures to protect data, such as encrypted connections, access controls and storage encryption provided by our vendors. No system eliminates every risk of unauthorized access, loss or alteration. If a breach occurs, we will make the communications required by applicable law.

Minors

Dikto is for companies. It is not directed at anyone under 18 and we do not knowingly collect their data. If you believe we did, write to us so we can review the case and take appropriate action.

Changes to this notice

We will publish changes on this page with the updated date. Where applicable law requires an additional communication or new consent, we will follow that procedure.