Privacy Policy

1. Introduction

Alpha Wave Systems SA de CV ("we," "our," or "us"), a company registered in Mexico, operates the awsys.co URL shortening service. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

We are committed to protecting your privacy in accordance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and the European Union's General Data Protection Regulation (GDPR) for users in the European Economic Area.

2. Information We Collect

2.1 Account Information

When you register, we collect:

• Email address
• Password (encrypted)
• Account creation date

2.2 Usage Data

We automatically collect:

• URLs you shorten
• Custom slugs you create
• Click statistics on your shortened links
• API usage data

2.3 Click Analytics Data

When someone clicks a shortened link, we collect:

• IP address (anonymized for storage)
• Approximate geographic location (city, region, country)
• Device type and operating system
• Browser type
• Referring website
• Date and time of click

2.4 Payment Information

Payment processing is handled by PayPal. We do not store your credit card or bank account information. We only receive transaction confirmations and subscription status from PayPal.

3. How We Use Your Information

We use collected information to:

• Provide and maintain the URL shortening service
• Generate analytics reports for your shortened links
• Process payments and manage subscriptions
• Send service-related communications
• Detect and prevent abuse, fraud, and security threats
• Improve our services and develop new features
• Comply with legal obligations

4. Data Retention

We retain your data as follows:

• Account data: Until you delete your account
• Shortened URLs: Indefinitely unless you delete them or close your account
• Click analytics: 24 months from the date of the click
• Payment records: As required by tax laws (typically 5-7 years)

5. International Data Transfers

Alpha Wave Systems SA de CV is a Mexican company. However, we use cloud infrastructure provided by Google LLC (Firebase/Google Cloud) with servers located in the United States.

By using our services, you consent to the transfer of your data to the United States. We ensure appropriate safeguards are in place:

• Google LLC complies with the EU-US Data Privacy Framework
• Standard Contractual Clauses (SCCs) are in place for EU data transfers
• All data transfers comply with Mexico's LFPDPPP requirements

6. Third-Party Services

We use the following third-party services that may process your data:

7. Cookies and Tracking

We use the following types of cookies:

Essential Cookies

Required for the service to function (authentication, session management).

Analytics Cookies

Help us understand how you use our service to improve it.

You can manage cookie preferences through our cookie consent banner or your browser settings.

8. Your Rights

Under Mexican Law (LFPDPPP)

You have ARCO rights:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate data
• Cancellation: Request deletion of your data
• Opposition: Object to certain processing

Under GDPR (EU Users)

You additionally have the right to:

• Data portability (receive your data in a structured format)
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption in transit (TLS/SSL), secure password hashing (bcrypt), and access controls. However, no method of transmission over the Internet is 100% secure.

10. Children's Privacy

Our service is not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on our website. Your continued use of the service after changes constitutes acceptance of the updated policy.

12. Severability

If any provision of this Privacy Policy is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such invalidity shall not affect the validity of the remaining provisions, which shall continue in full force and effect. The invalid or unenforceable provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving the original intent.

13. Contact Us

For privacy-related inquiries or to exercise your rights, contact us at: