Draft pending review by a lawyer. This text describes what the product does today; it is not legal advice and may change before final publication.
We use only necessary cookies until you accept others. Google Analytics does not load if you do not accept it, and you can change your decision at any time.
1 · 1. What cookies are
Cookies are small files that a site stores in your browser. They help remember your session or your preferences. Local storage is similar: it keeps data in your browser, but it is not sent to the site on every visit. In this policy we say “cookies” for both.
Tsunami Automation Global LLC, 5900 Balcones Drive STE 100, Austin, TX 78731, United States, decides how the site's cookies are used. Write to privacy@tsunamiautomation.com if you have questions.
Legal basis: Reglamento de la LFPDPPP (2011), art. 14
2 · 2. Which cookies we use
| Name | Type | Category | Purpose | Duration | Set by |
|---|---|---|---|---|---|
| doctores_session | Cookie | Strictly necessary | Keeps you signed in. | Up to 30 days (closes earlier if idle) | First party |
| doctores_mfa_pending | Cookie | Strictly necessary | Completes two-step verification. | 10 minutes | First party |
| sfd_gcal_oauth_nonce | Cookie | Strictly necessary | Protects the optional Google Calendar connection. | 10 minutes | First party |
| sfd_consent | Cookie | Strictly necessary | Stores your cookie choice so we do not ask on every visit. | 180 days | First party |
| doctores-theme | Local storage | Preference | Remembers light or dark mode. | No expiry until you clear it | First party |
| pwa-install-dismissed | Local storage | Preference | Remembers you dismissed the install-the-app prompt. | No expiry until you clear it | First party |
| _ga, _ga_* | Cookie | Analytics (requires your consent) | Google Analytics measures visits to public pages. | Up to 2 years (Google default) | Google (cookie written by its script) |
Strictly necessary cookies make the site work and cannot be turned off. Preference items remember light or dark mode and that you closed the install-the-app prompt. These two are stored only in your browser. The analytics cookie exists only if you accept.
Legal basis: Lineamientos del Aviso de Privacidad (2013), lineamiento trigésimo primero
4 · 4. How to change or withdraw your decision
Use the “Preferencias de cookies” (cookie preferences) link at the bottom of every page. Withdrawing your acceptance takes one click, the same as giving it. When you withdraw it, we stop measuring your visits and delete the Google Analytics cookies of this site that your browser holds.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 7
5 · 5. Where nothing optional runs
On the patient portal, on intake links, password-reset links, invitation links, survey (NPS) links and ARCO request links, and inside the application, nothing optional loads. You will not see the cookie notice there and Google Analytics does not run. Only necessary cookies, such as the session cookie, are used.
7 · 7. Google as a recipient
If you accept analytics cookies, Google LLC (Google Analytics) receives: IP address, browser type, cookie identifier and pages visited (without query strings or long identifiers). It is never loaded in the patient portal, on token links or inside the application.
Google handles that data in the United States. It is an international transfer that happens only if you accept. The data is used to measure visits to the public pages of the site. We configure Google Analytics to turn off advertising signals and ad personalisation, and to shorten the IP address.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 35
8 · 8. What we do not use
We do not use advertising cookies. We do not use social-media pixels or screen-recording or heat-map tools. Fonts are loaded from our own site.
9 · 9. Record of your decision
So we can show that we respect your choice, we keep an anonymous record of each decision: a random identifier, the notice version, what you chose and the date. We do not store your IP address in that record. We keep it for 36 months and it is deleted automatically after that.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 7; Reglamento de la LFPDPPP (2011), art. 20
10 · 10. Legal basis and scope
Mexican rules ask for two things: tell you, at the time data is collected automatically, that these technologies are used, and tell you how to turn them off. This does not apply to those that are technically necessary. Our notice goes further on purpose: we ask for your acceptance before loading Google Analytics, and you withdraw it with one click.
The 2011 Regulation and the 2013 Guidelines cite article numbers of the earlier law. A lawyer must confirm how they apply after the 2025 law.
Legal basis: Reglamento de la LFPDPPP (2011), art. 14; Lineamientos del Aviso de Privacidad (2013), lineamiento trigésimo primero
11 · 11. Changes and contact
If we change the cookies we use, we update this page and ask for your choice again. To exercise your rights over the data the site receives, write to privacy@tsunamiautomation.com; we answer within 20 business days. More information in the privacy notice (/privacidad). Version 2026-10.
Legal basis: LFPDPPP (DOF 20-mar-2025), art. 15