01 Who is responsible
ALIADO INGENIERIA CONTINUA MEXICANA S. DE R.L. DE C.V., with its registered address at Jardin de Higueras 1111, Jardin de las Moras, C.P. 32563, Ciudad Juárez, Chihuahua, Mexico ("Beridio", "we"), is the controller of the personal data described here (the "responsable" under Mexican law). You can reach our privacy team at privacy@beridio.com. This policy also serves as our privacy notice (aviso de privacidad) under the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP).
02 What this policy covers
It covers three groups of people:
- visitors to our website (beridio.com);
- customers and their users on the platform (app.beridio.com);
- people who are not our customers but whose publicly available information we collect and analyse (see section 6).
Where a customer uploads personal data about its own contacts (for example a media list), the customer decides why and how it is used and we process it on the customer's behalf, as its processor.
03 What we collect
Information you give us:
- account details: name, work email, password (stored only as a one-way hash), and your sign-in method;
- company details you enter at sign-up: company name, website, industry, size, country, a description of what you do, and what you want to find;
- Customer Data: contacts, lists, email templates, outreach drafts and messages, notes and communication history;
- billing information, handled by Stripe — we receive the plan, status and invoice details, not your card number;
- messages you send us, for example to request a demo or support.
Information we collect automatically:
- technical data: IP address, browser and device type, pages and features used, timestamps and error logs, needed to run and secure the service;
- a session cookie and local-storage entries that keep you signed in (see section 13).
Information from connected accounts:
- if you sign in with Google or Microsoft: your name, email address and a provider account identifier;
- if you connect a mailbox: the email address and name of the account, and the access the provider gives us (OAuth tokens) or the SMTP login you enter, stored encrypted. We use this access to send the messages you choose to send. If you turn on reply detection, we also read incoming mail in that mailbox — but only messages from people you emailed through Beridio, to tell you they replied; for those we keep the sender, time, subject and a short preview, and we ignore and do not store everything else. You can turn this off at any time, which stops the reading and deletes the stored IMAP login. Beridio's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Information about recipients of outreach: emails sent through Beridio include a tracking image and link redirects, so we record whether and when a message was opened and which links were clicked (with the browser's user-agent string, but not the recipient's IP address), and each message carries an unsubscribe link. When a recipient unsubscribes we keep their email address on that customer's do-not-email list so they are not contacted again. This is on for all outreach sent through the platform; customers are the controllers of this data, and recipients can unsubscribe in any message or write to privacy@beridio.com.
Pages our customers publish: when someone opens a page hosted on Beridio, we record how far down it was read and for how long it was in view, together with the browser's user-agent string (not the visitor's IP address). If the visit came from a link in an email, a signed code in the link ties it to that email's recipient, so the customer sees who read it; a visit without that code is counted anonymously. This is on for all hosted pages and is described to recipients here.
Email analytics: to show our customers what works, we analyse each message a customer sends, as the recipient received it, to label its subject areas, tone and the feeling it aims for (this text is processed by our AI provider, Anthropic, under the terms described in section 7), and we record the kind of device and mail app that loaded it (derived from the browser's user-agent string; the recipient's IP address is not kept) and, where the mail app loads images as the message is scrolled, how far down it was read. We also infer, from a contact's job title and employer, which subject areas and country they are likely to be interested in or based in, and refine that from what they open; customers can correct it. To help a first message arrive at a good moment, we keep a small pooled record per email address — identified only by a one-way keyed hash of the address, never the address itself — of the hours at which that address has opened messages and the type of device, with no information about which customer sent what, or what it said. A conclusion from this record is shown to a customer, about their own contact only, when several unrelated customers have contributed to it; customers cannot see who else has written to a person or what they did. Recipients can ask us to remove and stop using this record, by ticking the box on the unsubscribe page of any message or by writing to privacy@beridio.com.
We do not intentionally collect sensitive personal data, and our analysis is not designed to infer it. Please do not enter it into the platform.
04 Why we use it
Primary purposes — needed to provide the service you asked for:
- create and secure your account, confirm your email and authenticate you;
- set up your workspace and generate strategies and sample data from what you tell us;
- operate the platform: collect and analyse public information, store your contacts, and send the outreach you choose to send;
- process payments, issue invoices and manage your subscription and trial;
- provide support, send service messages (confirmations, security and billing notices) and prevent fraud and abuse;
- comply with legal obligations.
Secondary purposes — optional:
- improve and develop the product, using aggregated or de-identified usage data;
- send you news and offers about Beridio (you can opt out in any message or by writing to privacy@beridio.com).
If you do not want your data used for the secondary purposes, write to privacy@beridio.com; doing so does not affect the service.
05 Legal bases (UK / EU GDPR)
For people in the UK and EU, we rely on:
- contract — to provide the service you signed up for;
- legitimate interests — to secure and improve the service, to prevent fraud, and to provide public-data intelligence to our customers (see section 6), balanced against the interests and rights of the people concerned;
- consent — where you give it, for example to optional marketing, which you can withdraw at any time;
- legal obligation — for tax, accounting and similar duties.
06 People in our public-data intelligence
Our platform collects publicly available information about people and organisations — such as public posts, profile details (name, handle, biography, role, company), and public contact details — from social-media platforms, news, forums and filings, and analyses it to identify insights (for example business intent or risk) for our customers. We obtain it through the platforms' interfaces and third-party data providers. We collect only what is public and relevant to that purpose, and we do not intentionally collect sensitive data.
Shared and private data. Public facts we collect — for example a company website, news, public registries and web-search results — can be used to serve all customers: what one customer's research finds can enrich what others see. What is shared is only these public facts. We never share between customers a customer's own notes, private fields, contact lists, templates, or outreach history (who was emailed, what was sent, and how they responded). Information collected from some social-media sources (currently LinkedIn and Facebook) is kept for the customer who collected it and is not shown to other customers.
If you are in that data and want to know what we hold, correct it, or have it removed or suppressed, write to privacy@beridio.com. We act within 30 days. To make sure we remove the right records, please include the profile links or handles concerned; we may need to keep a minimal record that you opted out so that your information is not collected again.
This is the notice we give to people whose data we did not collect from them directly.
07 Artificial intelligence
We use a third-party AI provider (Anthropic) to generate strategies, sample data and analyses. The text we send it — for example your company description, your stated goal, and public content to analyse — is processed to produce the result for you. We do not use Customer Data to train AI models, and our agreements with our AI provider do not permit them to train on it. AI output can be inaccurate; our Terms ask customers to verify it before acting. We do not make decisions about people that have legal or similarly significant effects based solely on automated processing.
09 International transfers
We operate from Mexico and our infrastructure is mainly in the United States, so personal data is transferred and processed outside the country where you live. For people in the UK and EU we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum — with our providers. For people in Mexico, these transfers are made to the providers listed above to carry out the service you request, as the LFPDPPP permits. Ask privacy@beridio.com for details.
10 How long we keep it
- account and Customer Data: while your account is active, and deleted within 30 days after you cancel or ask us to delete it. Encrypted backups are overwritten within 90 days;
- trial accounts that never subscribe: kept read-only for the duration stated in our Terms, then deleted on the same schedule;
- invoices and tax records: kept for the period the law requires;
- public-data intelligence: kept while it remains relevant to our service, and removed or suppressed on request (section 6);
- security and error logs: kept for a limited period needed to protect the service.
11 Security
We protect personal data with measures proportionate to its sensitivity: encrypted connections (TLS); passwords stored only as one-way hashes; mailbox credentials and tokens encrypted at rest; access limited to people who need it; separation between customers' data; and monitoring and logging. No system is perfectly secure. If a breach affects your data, we will notify you and the authorities as the law requires.
12 Your rights
You can ask us to act on your personal data at privacy@beridio.com. We may need to verify your identity first. Depending on where you live, your rights include:
Mexico (ARCO rights)
- access the personal data we hold and how it is used;
- rectify it if it is inaccurate or incomplete;
- cancel it (ask us to delete it) when you consider it is not needed, or object (oposición) to its use for specific purposes;
- revoke your consent and limit the use or disclosure of your data.
UK / EU (GDPR)
- access, rectification and erasure;
- restriction of processing and objection, including to processing based on legitimate interests;
- data portability;
- withdraw consent at any time;
- complain to your data-protection authority (in the UK, the Information Commissioner's Office).
California (CCPA/CPRA)
- know what personal information we collect, use and disclose, and receive a copy;
- delete or correct it;
- opt out of the sale or sharing of personal information — we do not sell or share it;
- not be discriminated against for using these rights. You may use an authorised agent to make a request.
We respond within the legal deadlines (20 business days in Mexico, one month under GDPR, 45 days under the CCPA) and, wherever possible, within 30 days. Information that is publicly available is outside the CCPA's definition of personal information, but we still honour removal requests as described in section 6.
14 Children
Beridio is a business service not intended for anyone under 18, and we do not knowingly collect their personal data. If you believe a child's data has reached us, write to privacy@beridio.com and we will delete it.
15 Changes to this policy
We may update this policy. We will post the new version here with a new date and, for material changes, notify account holders by email or in the platform before the change takes effect.
16 Contact and complaints
Questions or requests: privacy@beridio.com. Postal address: ALIADO INGENIERIA CONTINUA MEXICANA S. DE R.L. DE C.V., Jardin de Higueras 1111, Jardin de las Moras, C.P. 32563, Ciudad Juárez, Chihuahua, Mexico.
You also have the right to complain to the competent data-protection authority: in Mexico, the authority designated under the LFPDPPP; in the UK, the Information Commissioner's Office; in the EU, your national supervisory authority; in California, the Attorney General. We would appreciate the chance to address your concern first.
This policy is provided in English and Spanish. If the two versions differ, the Spanish version prevails.