Last updated: 27 August 2026 · Versión en español
This notice explains what happens to the personal data you give us when you request access to Capto. It is written to satisfy Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and, for visitors in the European Union, the GDPR.
The data controller is NFO Systems S.A.P.I. de C.V., which publishes Capto under the Neomapa brand.
The geospatial data you create in Capto never reaches us. Your features, their geometry, their custom properties, and your layers are stored by your own browser, in its IndexedDB storage, on your device. They are not uploaded, not backed up by us, and not visible to us. Nothing in this notice applies to them.
What this notice covers is the small amount of data you hand over when you ask for an access link.
| Data | Why we hold it |
|---|---|
| Name and email address | To send you your personal access link, and to tell you about new versions of Capto. Required — without them there is nobody to send the link to. |
| Organization and intended use | To understand who uses Capto and what to build next. Optional; leaving them blank changes nothing about your access. |
| The consent wording you accepted, and when | So we can show what you actually agreed to, rather than merely asserting that you agreed. |
| A salted hash of your IP address, and your browser's user agent | To limit automated abuse of the form. We store a one-way hash, not the address itself, so it cannot be read back out. |
| When your access link was first and last used, and how many times | To know whether people who request access actually use the tool. This is a count and two dates — never what you drew, how many layers you have, or which tools you used. |
One necessary exception on sharing: the email itself is delivered through our email provider, which processes your address solely in order to deliver the message.
We keep your details for as long as you may want to keep using Capto, and delete them when you ask us to. If an access link is never confirmed, the pending request and its confirmation token expire and are removed.
Under the LFPDPPP you have the ARCO rights — Access, Rectification, Cancellation, and Objection — and you may withdraw your consent at any time. Under the GDPR you additionally have the rights of erasure, restriction, and data portability.
To exercise any of these, write to contact@nfo.systems from the address you signed up with, and tell us what you want done. We will respond within the statutory time limit. You do not have to give a reason to be deleted.
If you believe we have mishandled your data, you may complain to Mexico's INAI, or to your national data protection authority if you are in the EU.
If we change what we collect or why, we will update this page and change the date at the top. Material changes affecting people already registered will be announced by email.
← Back to Capto