Skip to content

Privacy policy

In effect since October 29, 2026

1. Who is responsible for your data

Wislab is a product of Tech Benders S.A.S. de C.V. ("Tech Benders", "Wislab", "we").

  • Tax ID (RFC): TBE260616ND3
  • Address: Sur 71-A 232, colonia Banjidal, alcaldía Iztapalapa, C.P. 09450, Mexico City, Mexico.
  • Privacy email: mike@wislab.app

This notice explains how we process personal data on wislab.app and in the academies that run on Wislab, under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties.

2. Two different roles: Wislab and each academy

Wislab is the infrastructure that creators, educators and companies use to run their own online academy, with their own brand, domain and terms.

  • We are the controller of the data of people who visit wislab.app, join the waitlist or the newsletter, write to us, and of the people who create and run an academy (creators and their team).
  • We are a processor of the data of each academy's students. The academy is the controller: it decides what data it asks for, what it uses it for and how long it keeps it. We process that data only to provide the service and following its instructions. Each academy publishes its own privacy notice, and requests about that data go to the academy first; if they reach us, we pass them on and help the academy handle them.

3. What data we process

  • Account: name, email, password (stored encrypted by our authentication provider; we never see it), profile photo if you upload one, language and time zone.
  • Creators and their team: academy details (name, domain, brand), role in the team and, to get paid, the ID of their Stripe account.
  • Learning activity: enrollments, lesson progress, submissions, grades, certificates, community comments and messages, notes, and conversations with the academy's artificial intelligence features.
  • Payments: payments are processed by Stripe. We store the payment or subscription ID, amount, currency and status. We never receive or store card numbers.
  • wislab.app forms: name, email, company (optional) and what you write to us, for example when you join the waitlist, ask for a demo or subscribe to the newsletter.
  • Technical data: date and time of access, browser and device type, pages visited and error logs, to run the site safely.

We do not ask for sensitive personal data. Please do not include it in your messages or submissions.

4. What we use it for

Necessary purposes

Without these we cannot provide the service:

  • Creating and keeping your account, and signing you in securely.
  • Running the academy: showing courses, saving your progress, issuing certificates and sending the platform's emails (confirmations, reminders, receipts, security notices).
  • Processing payments and subscriptions through Stripe, and charging each academy its plan and the platform fee.
  • Giving you support and replying to your messages.
  • Preventing abuse, fraud and unauthorized access, and keeping the platform secure.
  • Meeting our legal, tax and accounting obligations.

Optional purposes

Only with your consent, which you can withdraw at any time:

  • Sending you the Wislab newsletter, product news and event invitations.
  • Measuring, in aggregate, how wislab.app is used in order to improve it (analytics). It only turns on if you accept in the cookie notice.

Saying no to the optional purposes does not change the service you get. To withdraw your consent, use the unsubscribe link in any email, or write to mike@wislab.app.

5. Who helps us process it

We rely on providers that process data on our behalf, following our instructions and without using it for their own purposes:

  • Supabase: database, authentication and files.
  • Vercel: hosting and running the platform.
  • Stripe: payment and subscription processing.
  • Resend: sending emails.
  • Mux and Bunny.net: video hosting and playback.
  • Sentry: technical error logs.
  • Upstash: usage limits to prevent abuse.
  • PostHog: analytics, only with your consent.
  • OpenAI and Anthropic: artificial intelligence features, when the academy turns them on with its own keys.

When an academy connects other tools on its own (for example Zoom, Google, Calendly or WhatsApp), the data that feature needs is shared with that service at the academy's decision.

All of them operate under terms that bind them to confidentiality, to apply security measures and to delete the data when the relationship ends.

Zoom

When an academy connects Zoom with the "Connect Zoom" button, Wislab receives from Zoom the connected user's ID, email and display name, and access tokens that let it create, update and delete that account's meetings, read who attended, and list its cloud recordings. Wislab stores the tokens encrypted, plus meeting IDs, join links and recording share links on the academy's classes. It does not download or store recording files. When the academy disconnects Zoom in Wislab or removes the app in Zoom, Wislab deletes the tokens and the Zoom user data right away; the links already on the classes stay as the academy's content until it deletes them.

6. Transfers

We do not sell or rent your personal data. We do not transfer it to third parties, except to the academy you study at (which is the controller of that data) or when required by a competent authority under the law.

Most of our providers operate outside Mexico, mainly in the United States. Your data is processed in those countries under the confidentiality and security obligations agreed with each of them.

7. How long we keep it

  • Accounts: for as long as they are active.
  • Academies that close: we keep their data for 90 days after closing, for questions or a possible reactivation, and then delete it.
  • Payment and billing records: for the periods required by tax and commercial law.
  • wislab.app forms: 24 months from the last contact, if no business relationship starts.
  • Optional consents: until you withdraw them.

After these periods, the data is deleted or irreversibly anonymized.

8. Your ARCO rights

At any time and at no cost you can:

  • Access the personal data we hold about you.
  • Rectify it when it is inaccurate or incomplete.
  • Cancel it when you consider it is not needed.
  • Object to its use for specific purposes.

You can also withdraw your consent for the optional purposes and limit the use or disclosure of your data.

How to exercise them. If you study at an academy, write to the academy first. Otherwise, write to mike@wislab.app from your account email, stating your name, which right you are exercising and about which data. We may ask you to verify your identity.

Deadlines. We reply within twenty business days at most, extendable once for the same period. When the request is granted, we carry it out within the following fifteen business days.

If you are not satisfied with our answer, you can contact the Secretaría Anticorrupción y Buen Gobierno, the Mexican authority for personal data protection.

9. Cookies and similar technologies

  • Necessary: they keep you signed in, remember your language and preferences, and protect the forms. The platform does not work without them.
  • Analytics: only on wislab.app and only if you accept in the cookie notice. You can change your choice by clearing the site's cookies.

We do not use advertising cookies.

10. How we protect it

We apply administrative, technical and physical measures to protect your data against damage, loss, alteration, destruction or unauthorized access:

  • Encryption in transit over HTTPS and encryption at rest in the database.
  • Each academy's data kept separate, with row-level security policies in the database.
  • Integration keys and credentials stored encrypted.
  • Two-factor authentication available to each academy's team.
  • Usage limits to prevent abuse and automated submissions.
  • Internal access restricted to the team members who need it.

No measure guarantees absolute security, but we review and update these controls periodically. If a security breach significantly affects your property or moral rights, we will notify you without delay at your account email, explaining what happened, which data was affected, what we recommend you do and what measures we took.

11. Changes to this notice

We will publish any change to this notice on this same page, with its update date. If a change means processing your data for a purpose not listed here, we will tell you and ask for your consent first.

This notice is published in Spanish and English. The Spanish version is the binding one; this English version is a courtesy translation.