Reserved
Sign in

Privacy Policy

Last updated: May 18, 2026

At Reserved Technology ("Reserved", "we", "us"), we are committed to protecting the privacy of our users. This policy describes how we collect, use, store and protect your personal information when you use our management platform for beauty and health businesses.

1. Information we collect

1.1 Account data

When you register on Reserved, we collect: full name, email address, phone number and profile photo (optional).

1.2 Business data

When setting up your business, we collect: business name, address, reference code, subscription plan and billing data.

1.3 Your clients' data

When you register clients on the platform, the following is stored: name, email, phone, address, relevant medical data (allergies, medications, blood type, skin type), occupation, tax data (RFC) and emergency contact. You are responsible for obtaining your clients' consent to store this information.

1.4 Appointment and service data

We record information about appointments (date, time, status, amount), service history, purchases and payments made within the platform.

1.5 Browsing data

We collect technical information such as IP address, browser type, operating system and pages visited within the platform.

2. How we use your information

  • Provide and maintain the Reserved service
  • Process payments and manage subscriptions through MercadoPago
  • Send appointment reminders via WhatsApp and push notifications
  • Improve user experience and platform performance
  • Communicate important service updates
  • Comply with applicable legal and tax obligations in Mexico

3. Storage and security

Your data is stored on secure servers provided by Supabase (Amazon Web Services infrastructure). We implement the following security measures:

  • SSL/TLS encryption on all communications
  • Row Level Security policies on the database
  • Secure authentication with JWT tokens
  • Role-based access control (owner, admin, editor, viewer)
  • Automated daily backups

4. Sub-processors

To operate the platform we use the following providers ("sub-processors"), which may access personal data solely to deliver the services contracted by Reserved Technology, under binding data processing agreements and confidentiality obligations equivalent to ours:

  • Supabase Inc. (United States) — database, authentication, storage and backend functions; can access all account and customer data.
  • Amazon Web Services, Inc. (United States) — underlying infrastructure for Supabase; data is encrypted in transit and at rest.
  • Meta Platforms, Inc. and Meta Platforms Ireland Ltd. (US / Ireland) — WhatsApp Business Platform (Cloud API) for sending and receiving messages; receives recipient phone numbers, message content, delivery statuses and account identifiers (WABA ID, Phone Number ID).
  • Twilio Inc. (United States) — alternative provider for WhatsApp/SMS messaging; accesses phone numbers, message content and delivery statuses.
  • MercadoPago (Mexico) — payment and subscription processing; accesses billing data and payment method.
  • Stripe, Inc. (United States) — international payment and subscription processing; accesses billing data and payment method.
  • Google LLC (United States) — Google Calendar sync and Google Wallet pass issuance, only if you enable these features; accesses the events or passes you choose to sync.
  • Vercel Inc. (United States) — hosting of our website and portal; accesses technical logs (IP, user-agent).
  • Resend (Resend.com, Inc., United States) — transactional email delivery (invitations, reminders, service communications); accesses recipient email address and message content.

We keep this list updated. Any material change to sub-processors will be published on this page at least 30 days in advance, unless the change is due to force majeure or legal requirement. International data transfers are made under Standard Contractual Clauses (SCCs) where applicable and under the provisions of Mexico's LFPDPPP.

5. Your rights (ARCO Rights)

In accordance with Mexico's Federal Law for the Protection of Personal Data Held by Private Parties (LFPDPPP), you have the right to:

  • Access: Know what personal data we hold about you
  • Rectification: Correct inaccurate or incomplete data
  • Cancellation: Request the deletion of your data
  • Opposition: Object to the processing of your data for specific purposes

To exercise these rights, send an email to atencion@reserved.technology with your request.

6. Data retention

We retain your data while your account is active. If you cancel your subscription, your data is kept for 90 days before being permanently deleted. Billing data is retained for the period required by Mexican tax legislation.

7. Minors

Reserved is not intended for anyone under 18 years of age. We do not knowingly collect information from minors. If we discover that we have collected data from a minor, we will delete it immediately.

8. Changes to this policy

We may update this policy periodically. We will notify you of significant changes by email or through a notice on the platform. Continued use of the service after changes constitutes your acceptance.

9. WhatsApp Business Platform (Meta) integration

Reserved Technology offers WhatsApp messaging as a platform feature. This integration is delivered through the WhatsApp Business Platform provided by Meta Platforms, Inc. and Meta Platforms Ireland Limited (together, "Meta"). Reserved Technology acts as a Tech Provider / Solution Partner registered with Meta: we facilitate the technical connection between each customer's WhatsApp Business account and Meta's platform, but we are not the owner of those accounts — each business is the holder and responsible party for its own.

  • Message content (text, attachments, templates) passes through Meta's infrastructure.
  • Recipient phone numbers are sent to Meta to deliver the message.
  • Delivery statuses (sent, delivered, read, failed) are received from Meta via webhooks.
  • Technical identifiers (WABA ID, Phone Number ID, Message ID) are stored in our database.
  • We retain message history for up to 5 years from sending, unless law requires a longer period.

Use of the WhatsApp Business Platform is also subject to Meta's terms: WhatsApp Business Solution Terms, WhatsApp Business Messaging Policy and Meta's Privacy Policy.

10. Response to legal and government requests

Reserved Technology occasionally receives formal requests from government, judicial or administrative authorities. To protect you and comply with applicable law, we maintain the following processes:

  • Mandatory legality review: every request is reviewed to verify that it comes from a competent authority, is properly grounded and motivated under Article 16 of the Mexican Constitution, and identifies precisely the data requested and the legal purpose.
  • Refusal of unlawful requests: if a request lacks those requirements, is overly broad, or does not respect due process, we exercise the available legal remedies to challenge it before handing over any data, including amparo proceedings where appropriate.
  • Data minimization: when a request is valid, we deliver only the minimum amount of information strictly necessary to fulfill the scope of the requirement.
  • Documentation and recordkeeping: every request received, its legal basis, the data delivered, and the response date are documented internally and retained for at least five years for audit and accountability.

Notification to the data subject: where law permits and no explicit prohibition by the requesting authority exists, we will notify the data subject of the request received.

11. Data deletion

You may request deletion of your personal data at any time. To begin the process, visit our data deletion page or send an email to atencion@reserved.technology indicating your name, registered email, and the scope of the deletion. We will process the request within 30 days of receipt, unless applicable law requires us to retain certain data (e.g., tax invoicing). Instructions page: https://www.reserved.technology/data-deletion

12. Contact

If you have questions about this privacy policy, contact us at:

Email: atencion@reserved.technology

Phone: +52 33 1600 6488

Reserved Technology

Mexico