Draft pending review by a lawyer. This text describes what the product does today; it is not legal advice and may change before final publication.
How long we keep each type of data, what is deleted automatically, what is deleted when you ask, and how deletion works.
1 · 1. In short
- Sessions and temporary links expire on their own, and almost all of them are deleted automatically.
- Messages, appointments and patient data are kept while the clinic uses the service and as the clinic decides. Today there is no automatic deletion by age. The clinic can request deletion and we carry it out manually.
- Some data must be kept by law. In that case we do not delete it yet; we block it (section 8).
- If a clinic ends the service, we delete its data within the period in section 10.
For patient data, the clinic is the controller and decides how long to keep it. Tsunami is the processor: it keeps and deletes data following the clinic's instructions.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 10; LFPDPPP (DOF 20-mar-2025), art. 12
2 · 2. Periods the system applies by itself
| Data | How long it lasts | What happens after |
|---|---|---|
| Account sign-in session | Up to 30 days. It closes earlier if you do not use it for 7 days (clinic users). | Deleted automatically when it expires. |
| Email sign-in link | 20 minutes | Deleted automatically when it expires or is used. |
| Password reset link | 30 minutes | Deleted automatically when it expires or is used. |
| Invitation to the clinic team | 7 days | Stops working when it expires. Today the technical record is not deleted automatically. |
| Patient intake form link | 7 days | Deleted automatically when it expires or is used. What the patient submits goes to their file at the clinic. |
| Patient portal link | 30 days | Stops working when it expires. Today the technical record is not deleted automatically. |
| Your cookie choice (sfd_consent cookie) | 180 days | You are asked again. |
| Anonymous record of your cookie choice | 36 months | Deleted automatically. |
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 10
3 · 3. Legal periods and periods the clinic decides
| Data | How long it is kept | Who decides or why |
|---|---|---|
| Clinical record | At least 5 years from the last medical act. | The clinic, under the clinical-record standard (NOM-004-SSA3-2012, item 5.4). |
| Tax documents (invoices and receipts) | 5 years, counted as the Federal Tax Code says. | Tax duty (Código Fiscal de la Federación, art. 30). |
| Messages, appointments and patient contact data | While the clinic uses the service. | The clinic. Today there is no automatic deletion by age; they are deleted when the clinic asks. |
| Audit logs and proof of consent | While the clinic's account exists. | They show what was done and what you consented to. Today there is no automatic deletion by age. |
| Prospect data and contact requests | While useful to answer you, or until you ask us to delete it. | Tsunami. Today there is no automatic deletion by age; we do it manually. |
| Audio and transcript of calls with the voice agent | The voice provider keeps them until they are deleted on request. | The clinic or you can ask for their deletion (section 6). We ask the provider. |
The clinic must meet the periods for its clinical record. Tsunami does not decide for the clinic how long to keep a medical history.
Legal basis: NOM-004-SSA3-2012, numeral 5.4; Código Fiscal de la Federación, art. 30
4 · 4. Backups
- We keep 31 daily copies of the database.
- We also keep 14 copies in external storage, one every 6 hours.
- Patients' sensitive data is encrypted inside those copies.
- When data is deleted, it leaves the backups by rotation, as each copy expires. We do not delete it from old copies one by one.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 18
5 · 5. Calls with the voice agent
The voice-agent provider may record and transcribe calls, and keeps the audio and transcript until they are deleted. Today it has no automatic deletion period. If you ask to delete the data of a call, we ask the provider to delete the audio and the transcript.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 24
6 · 6. How to ask us to delete your data
Deletion is requested as cancellation, one of the ARCO rights. Today it is a manual procedure:
- Make the request: if you are a patient, to your clinic, to its ARCO page (/arco/<your clinic code>) or to privacy@tsunamiautomation.com. If you are a user, visitor or prospect, to privacy@tsunamiautomation.com.
- We check your identity. We may ask for a document.
- We answer within 20 business days. If it is granted, we carry it out within 15 more days. Both deadlines can be extended once, if we justify it.
- If a law obliges us to keep the data, we block it (section 8). When the legal period ends, we delete it and tell you.
- If there is no duty to keep it, we delete it from our systems. Backups remove it by rotation (section 4). We also ask the voice provider to delete it, if there are calls.
It is free. For patient data, the clinic decides and we carry out what the clinic tells us.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 24; LFPDPPP (DOF 20-mar-2025), art. 31; LFPDPPP (DOF 20-mar-2025), art. 34
7 · 7. What is deleted and what is not
We delete data from our systems and from providers that hold it on our behalf, such as the voice provider. We do not control copies that other services hold under their own policy, for example WhatsApp on your phone, or images that clinic staff uploaded to an image-hosting service the clinic chose. Ask the clinic to delete those.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 13
8 · 8. What “blocking” means
Blocking means keeping a piece of data only so we can answer for possible responsibilities for its use. While it is blocked, it is not used for anything else. It lasts until the legal or contractual responsibility expires. After that it is deleted and you are told.
Today blocking is a manual procedure: there is no automatic button. We apply it when a legal duty still prevents deleting the data.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 2, fr. III; LFPDPPP (DOF 20-mar-2025), art. 10; LFPDPPP (DOF 20-mar-2025), art. 24
9 · 9. When cancellation can be refused
- When the data must be kept because of a tax duty, for example an invoice.
- When the data is handled by a health professional bound by professional secrecy and must be kept, such as the clinical record during the period the standard sets.
- When a law or an authority requires keeping it.
If we refuse or limit your request, we tell you why. You can go to the Secretaría Anticorrupción y Buen Gobierno.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 25, fr. III y VII; LFPDPPP (DOF 20-mar-2025), arts. 40 a 50
10 · 10. When a clinic ends the service
- The clinic asks in writing to end the service and, if it wants, for an export of its data.
- We deliver the export that is requested, and delete the clinic's data within at most 30 days of its request. This is a manual procedure.
- Backups that still hold that data expire by rotation (section 4).
- We keep what a law obliges us to keep, such as our invoices to the clinic.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 10; LFPDPPP (DOF 20-mar-2025), art. 24
11 · 11. Contact and version
Questions or requests: privacy@tsunamiautomation.com. Privacy notice: /privacidad. Version 2026-10.