Home

Privacy Notice

Last updated: July 20, 2026

This is a courtesy English translation. For users in Mexico, the Spanish-language Aviso de Privacidad is the legally operative document, issued under Mexico's Ley Federal de Protección de Datos Personales en Posesión de los Particulares (in force since March 21, 2025). In case of any discrepancy, the Spanish version prevails.

1. Who is responsible for your data

Iterium is a product operated by Quantika, a trade name currently in the process of formal incorporation, run by its founders. Since no incorporated legal entity exists yet, the contact and identification channel for the responsible party is the email below, rather than a registered company name and tax ID.

Contact us for any data-related matter at: privacidad@iterium.xyz

Once Quantika completes its incorporation, this notice will be updated with its real registered name, tax ID, and legal address — see Section 10.

2. What we collect

We collect the following, either from you directly or from the platforms you choose to connect (Slack, Jira, GitHub, Confluence, Figma):

  • Identity and contact data: name, email, company.
  • Account data: workspace ID, AI Terminal chat history (with limited retention, see section 5).
  • Operational data from platforms you connect: Jira tickets, Confluence pages, GitHub issues/PRs, Figma specs — only what's needed to execute the action you request.
  • Billing data, if you're on a paid plan (processed by our payment provider, not stored directly by us).

We do not deliberately collect sensitive personal data (ethnicity, health, religion, sexual orientation, etc.). If sensitive data incidentally appears inside a ticket or document you connect, we treat it only as part of that operational content — never as data we profile or repurpose.

3. Why we process your data

Primary purposes (necessary for the service, no separate consent required):

  • Delivering the service: executing what you ask via the AI Terminal, Slack, or the API.
  • Authenticating and securing your account and workspace.
  • Technical support.
  • Billing and subscription management.
  • Legal and tax compliance.

Secondary purposes (require your consent, opt out anytime with no effect on the service):

  • Product updates, pricing changes, or informational content.
  • Requesting feedback to improve the product.

4. How AI touches your data

Iterium uses commercial AI models (OpenAI, and optionally Anthropic or Google, depending on what you pick in the Model Hub) to generate responses, under those providers' enterprise-grade agreements.

  • Zero model training: we use commercial APIs under terms that exclude your data from third-party model training.
  • No critical action (changing a ticket's status, publishing content) happens without your explicit approval — the agent proposes, you decide.
  • Every AI message identifies itself as AI-generated from first contact — the same transparency standard required by Article 50 of the EU AI Act, applied here because we think it's the right practice, not because it's legally required in Mexico.

5. How long we keep it

AI Terminal chat logs are permanently deleted after 30 days via an automated TTL policy on our database — no manual step required.

Billing data is kept as long as tax law requires. Account data is kept while your subscription is active, and deleted or anonymized within 90 days of cancellation unless the law requires longer.

6. Who else processes your data

Mexico's new LFPDPPP no longer requires listing data transfers inside the privacy notice — we do it anyway, because we think transparency builds trust:

  • OpenAI, Anthropic, Google — the language model providers processing your messages.
  • Vercel Inc. — application hosting.
  • Upstash — temporary (Redis) storage of messages and workspace settings.
  • Langfuse — technical observability (latency, errors), not business content.

Most of these providers process data outside Mexico (primarily the US). Using Iterium means accepting this cross-border transfer as necessary to operate the service.

7. Your rights (ARCO)

Under Mexican law you have the right to Access your data and the conditions of its processing, Rectify inaccurate, incomplete, or outdated data, Cancel processing when you believe the law isn't being followed, and Object to processing for specific purposes.

To exercise these rights, email privacidad@iterium.xyz with your name, the right you want to exercise, and a clear description of your request. We'll respond within the timeframes set by the LFPDPPP.

8. Cookies and local storage

See our Cookie Policy for the full detail — in short, we use browser local storage (not advertising tracking cookies) to remember your language and theme preference.

9. Minors

Iterium is a business tool, not directed at anyone under 18. We do not knowingly collect data from minors.

10. Changes to this notice

We may update this notice to reflect legal, technical, or operational changes. The current version will always be published on this page, with the last-updated date at the top.

In particular, we commit to updating Section 1 with Quantika's real registered name, tax ID, and legal address as soon as its incorporation process concludes — not as a vague promise, but as the known, planned next state of this document.