Skip to content
Romin Five

Privacy Notice

Last updated: October 2026

Introduction

At Romin Five we are committed to protecting the personal data of our users, clients and prospects. This Privacy Notice is issued in compliance with Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and other applicable provisions in the United Mexican States.

Identity of the data controller

Data controller: CARLOS CASTILLO RAMIREZ.

Trading name: Romin Five.

Privacy email: contacto@rominfive.ai.

Website: www.rominfive.ai.

Personal data we collect

We collect information you provide when using the website and technical data needed for its operation:

  • Contact form: name, email address, optional phone number and company, selected interest and message.
  • Assistant: your messages and generated responses. Free text may contain personal data you voluntarily share.
  • Assistant contact card: name, email address, optional phone number and a message describing your needs, which may include a summary of the conversation.
  • Technical data: conversation identifier, language, originating page, general device and browser category, dates, and usage, operational and security records.
  • When submitting a contact request: the accepted notice version, date, language and a cryptographic fingerprint —hash— derived from your IP address.
  • Visit campaign parameters —UTM—, when present, associated with your contact request.

The IP address is used for security controls and anti-bot verification. The application retains a fingerprint derived from it; Cloudflare Turnstile may receive the IP address to verify the request.

We do not request sensitive personal data in the form or chat. Please avoid sharing it. Personal data you enter in the chat is not automatically removed or anonymized before the message is stored or sent to the AI provider.

Primary purposes

We use your data to:

  • Answer questions about Romin Five and maintain conversation context.
  • Retrieve history while the assistant session remains valid.
  • Receive and route contact requests you choose to submit and notify the team for attention.
  • Record your acceptance of the Privacy Notice when submitting a contact request.
  • Maintain website security, verify requests and prevent abuse.
  • Maintain assistant availability, control usage and detect operational problems.

Secondary purposes

When campaign parameters —UTM— are present, they are associated with your contact request to identify its origin. This attribution is additional to handling your request.

Google Analytics and Meta Pixel are currently inactive on this website, and these services are not used for advertising measurement.

You can send questions or objections regarding secondary purposes to contacto@rominfive.ai.

Legal basis and consent

We process your data on the basis of:

  • Your consent (express or implied, as applicable).
  • The legal relationship we have with you (for example, the provision of services).
  • Applicable legal obligations.

To submit the form or the assistant’s contact card, you must check the acceptance of this Privacy Notice. We record the accepted version, date, language and a fingerprint derived from your IP address.

Starting or using the chat does not generate that record of express acceptance of the notice.

Cookie preferences are stored separately. Selecting analytics or marketing categories does not activate Google Analytics or Meta Pixel while these services remain disabled.

AI assistant and WhatsApp

The assistant answers questions about Romin Five. To generate responses, OpenAI receives your current message, a selection of previous messages and assistant responses, institutional information and operating instructions, as well as the language and originating page.

If you enter personal data in the chat, it may be included in the information stored and sent to OpenAI. Details entered in the contact card are not automatically incorporated into the history sent to the model.

Romin Five uses conversations to respond, maintain context, support security and operate the service technically. It does not currently use them for training, fine-tuning or subsequent semantic analysis intended to improve the assistant. It also does not use their content for marketing campaigns. Authorized personnel can consult the history.

If you submit the contact card, the conversation is linked to your request and the details you provide. The request message may include a summary of your needs.

If you choose to contact the CEO through WhatsApp, that service opens with prefilled institutional text. The assistant transcript is not automatically sent. Your conversation there is also subject to WhatsApp’s terms and privacy policy.

Data transfers and providers

Romin Five may transfer your personal data without requiring your consent in the cases provided for by the LFPDPPP (for example, legal compliance or requests from competent authorities).

To operate the website, we use:

  • Supabase: storage of conversations, contact requests, consent records and technical records.
  • OpenAI: processing of messages and the context needed to generate responses.
  • Cloudflare Turnstile: anti-bot verification for the form and assistant.
  • n8n: routing of contact requests and operational notifications. It receives request details and the message, which may contain a summary of the conversation; it does not automatically receive the full transcript.

If you choose to contact us through WhatsApp, you also use that service.

Providers’ retention periods are not established by the website’s conversation deletion mechanism.

How to exercise your ARCO rights

You have the right to Access, Rectify, Cancel or Object to (ARCO) the processing of your personal data, as well as to withdraw your consent at any time, to the extent permitted by law.

To exercise these rights, send a request to contacto@rominfive.ai, including:

  • Your full name and a means to reply to you (email).
  • A clear description of the ARCO right you wish to exercise.
  • Information that allows us to locate your data (for example, the email or phone number you used to contact us).
  • A copy of an official ID (or proof of legal representation, if applicable).

Response times: we will respond within the time frames established by the LFPDPPP.

Withdrawal of consent

You can withdraw your consent by emailing contacto@rominfive.ai with the subject "Revocación de consentimiento" (Withdrawal of consent). Please note that withdrawal may limit our ability to provide certain services.

You can view or change stored preferences through “Cookie preferences” in the footer. That choice currently does not activate Google Analytics or Meta Pixel.

Use of cookies and similar technologies

We use cookies and browser storage to remember your language and preferences, maintain the assistant session, verify requests and temporarily store UTM parameters associated with contact requests.

Google Analytics and Meta Pixel are currently inactive on this website. Accepting analytics or marketing categories does not activate these services.

You can change stored preferences or block storage in your browser; some necessary features may be affected. See our Cookie Policy for their purposes and durations.

Information security

We implement reasonable administrative, technical and physical measures to protect data against damage, loss, alteration, destruction, and unauthorized use, access or processing. Even so, no transmission over the internet is 100% secure.

Data retention

Conversations have a retention period of 12 months from the last message. If they contain no messages, the period runs from creation. Once the period expires, they are deleted through a periodic automatic process; deletion may occur shortly after expiration.

Deleting a conversation removes its messages and unlinks the associated contact request. It does not delete the request, its message or summary, or the consent record: these have a separate retention lifecycle and currently have no defined automatic deletion period.

The assistant session expires after 24 hours. This expiration does not delete the stored conversation.

Technical usage and security records have different retention lifecycles. Deleting conversations does not automatically delete these records or copies that may exist in backups or external services.

Conversations are not currently anonymized automatically.

Links to third-party websites

The website may contain links to third-party pages, such as social media or WhatsApp. Romin Five is not responsible for their privacy practices. We recommend that you review their policies.

Changes to this Privacy Notice

We may update this Notice at any time. Changes will be published in this same section and will show the date of the latest update.