Privacy notice
What we store, what for, and what you can do about it.
Last updated: August 28, 2026
This English version is provided for convenience. 3ventify is operated from Mexico and these documents are governed by Mexican law; in case of any discrepancy, the Spanish version prevails.
Who is responsible for your data
Paulina Jardón Rodríguez, who operates 3ventify, is the data controller for the personal data entered into the platform. For anything related to this notice, write to us at hola@3ventify.com.mx.
Two kinds of data, and they do not mix
This distinction is what orders everything else:
- Yours, as the customer: name, email, phone and tax details if you request an invoice. We use them to give you access, charge you and invoice you.
- Your registrants’: name, phone, email and whatever your church decides to ask at each event. That data belongs to your church, not to us. We only store it so that you can manage it.
For the second kind, your church is the controller and we are the processor: we do not use it for anything you have not asked for, we do not sell it, we do not share it with other churches and we do not use it for advertising. Not even our own.
Isolation between churches
Each church sees only its own data, and that does not depend on the screen: it is enforced in the database with row-level security. Even if someone tampered with the interface or called the API directly, they get no data from another church.
What we store, and what we do not
- We never store card numbers. Payments are processed by Stripe; we keep only a customer identifier and the charge history.
- Passwords are not stored in the clear: they are handled, encrypted, by the authentication service.
- Your Mexican tax status certificate, if you upload one, is kept in private storage and is neither opened nor processed: it is retained only as backup for your invoicing details.
- The activity log records who made each money movement and when. That is what makes a cash count auditable.
Who it is shared with
Only with the providers needed for the service to work, and only with what each one needs:
- Supabase — database and authentication.
- Vercel — application hosting.
- Stripe — card payment processing.
- Resend — email delivery.
- Cloudflare — protection against automated access.
We do not sell personal data and we do not share it with anyone else, except at the requirement of a competent authority.
Your ARCO rights
Under Mexican data protection law you may access, rectify, cancel or object to the processing of your personal data, and withdraw your consent. Write to us at hola@3ventify.com.mx and we will respond within a maximum of 20 business days.
If the request concerns the data of someone registered for an event, direct it first to the church that entered it: they are the ones who manage it. If they need technical help to handle it, we provide it.
How long it is kept
For as long as your account is active. If you cancel, we keep the data for 90 days in case you come back, and after that it is deleted. Tax records are kept for as long as the law requires.
You may request early deletion by writing to us, except for what we are legally obliged to keep.
Changes to this notice
If it changes, it is published here with its date. If the change is substantive, we email you before it takes effect.
See also the terms of service and the cancellation and refund policy.