I. Process personal data.

, address , is responsible for obtaining, using, disclosing or storing, accessing, processing, using, transferring or disposing of personal data (hereinafter referred to as "processing"). If you have any questions, you can contact us via email

Personal data to be processed

The personal data you directly or indirectly provide to us is confidential and should comply with applicable current regulations and national and international standards for protecting the personal data you own (the "holder"), which may include:

(i) Full name, (ii) residence, (iii) email, (iv) date and location of birth, (v) nationality, (vi) phone number, (vii) Federal Taxpayer Registration Office ("RFC"), (vii) Single Population Registration Key ("CURP"), (ix) marital status, (x) identity and contact information, (xi) geographical location, (xii) social network data at the time of holder authorization, (xiii) property data, (xiv) Verify your identity by accessing your tax management service account and/or bank account income and expenses, (xv) reasons for applying for credit, (xvi) business type, (xvi) personal facial biometric data in facial recognition elements ("Personal Data").

Face recognition

As part of the certification process, we will require you to take a personal selfie. We will use your personal selfie to compare it with your ID card photo to ensure that you have started the application and prevent others from impersonating you to start the application. All data will be encrypted by the application and uploaded to our server（ ）We will never share this data with third parties. The data shall not be used for other purposes and shall be deleted within 30 days; If you want to delete data from your face at another time, you can also send us an email based on the information in the ARCO section.

Location

Verify your location, we only provide loans to Mexican users.

Camera

When you apply for a loan, we will use a camera to verify whether the same data owner has made a request.

The personal data collected by is used to achieve the following goals:

Fulfill contractual relationships arising from service requests and/or procurement.

According to the service signed with , verify, confirm, and verify the identity of the holder, as well as the authenticity of the information provided by him as his own reference, solidarity obligation, and guarantee.

Manage, operate, and track the services you request or contract with .

Analyze the information provided by the holder to determine the level of risk, payment feasibility, transaction profile and any other assessment required by the granting regulations in accordance with the prevailing laws and regulations.

Formally establish the contractual relationship between and the holder.

Create your personal profile as a user in the application. Verification and research of credit capacity.

Data Transfer.

Personal data may be transferred to:

When necessary, Mexican and foreign financial authorities are required to fulfill our obligations under international laws or treaties, such as financial institutions, tax obligations, and compliance with official notices or requirements.

Mexican and foreign judicial authorities to enforce notices, demands, or transactions of a judicial nature.

All third parties mentioned above can participate in the process and value chain provided by . If additional information that requires your explicit consent needs to be transmitted, your consent will be obtained in advance.

can provide pre collected information to the holding company, subsidiary or financial institution of , and collect information during the validity period of the legal relationship between the two parties and to fulfill the obligations arising from it, And in accordance with applicable laws, the competent authorities in Mexico, as well as fulfilling their legal obligations to administrative and judicial authorities, ensure in advance that such transfers ensure the continuity of information protection and compliance with the provisions of this privacy notice.

The holder expressly agrees and agrees that may record any telephone communication between the holder and .

Means and procedures for exercising ARCO rights and/or revoking consent to process personal data

The owner of personal data has the right to access, correct, cancel, oppose the processing of personal data owned by and revoke their consent ("ARCO Rights"), unless is required by law to retain this data. The exercise of these rights must be in writing at 's residence, located in the customer service area, Responsible for handling requests related to personal data and promoting the protection of personal data within E ; Or send via email to the following email address:

(Laughter); The following information and documents should be attached:

Name and address or other means of conveying your response to your request, as well as documents proving your identity or legal representative (if applicable).

Any other element or file that helps track personal data.

The application must be signed at the end of the letter and on the back of each page.

A clear and accurate description of the personal data seeking to exercise ARCO rights and the rights they wish to exercise can be scanned and formally signed at the end of the email text or in the accompanying document signed on the back of each form.

After submitting the application in accordance with the above terms, will issue a decision no later than 20 (twenty) days after receiving the application. If the request is appropriate, it shall take effect within 15 (fifteen) working days from the date of the responsible person's report response. If the information you provide in your application is proven to be incorrect or insufficient, or if you do not provide the necessary documents to prove your identity or relevant legal representative, the person in charge will request you to correct the deficiencies within 5 (five) working days after receiving your application in order to process the application. In this case, you will have 10 (ten) working days to meet the remediation requirements, starting from the day after receiving the request. If you do not respond within this period, the corresponding application will be considered as not submitted.

The person in charge should be responsible for updating their personal data in their possession. For the above reasons, the holder guarantees and is responsible for the authenticity, accuracy, validity, and authenticity of the personal data provided under all circumstances, and promises to update these data appropriately by reporting any changes to the responsible person.

If the request to exercise ARCO rights is related to the exercise of access rights, will provide you with personal information or data through a simple copy and/or electronic file at the electronic address specified by the holder for this purpose. Personal data holders can only revoke their consent to process personal data in accordance with the above procedures, if permitted by applicable laws applicable to the responsible person.

, you may refuse to exercise ARCO rights in situations permitted by laws and regulations.

In all cases, if revocation does not mean that it is impossible to fulfill the obligations arising from the current legal relationship between the holder and the responsible person, or if for unnecessary purposes, the holder may revoke their consent to the processing of their personal data without the need for retroactive effect. The procedure for revoking consent (if any) should be the same as the procedure for exercising ARCO rights as stipulated in the previous paragraph.

Means of restricting the use or disclosure of personal data

Holders of personal data may limit the use or disclosure of personal data in accordance with the procedures specified in the "Exercise of ARCO Rights and Revocation of Consent" section.

Modification of privacy notices.

reserves the right to make changes or modifications to this privacy notice at any time, as it is necessary to provide continuous and sufficient protection for your personal data, and to pay attention to the development of legislation or precedents, internal policies, and market practices. Changes and modifications will be provided through announcements posted in our office and the portal, and through our staff who collect your personal data.

Revoke consent

The owner of personal data may restrict its use or disclosure in accordance with the procedures specified in the "Exercise of ARCO Rights and Revocation of Consent" section. Authorization must include at least 1) processing the responsible person in accordance with the methods agreed upon in this agreement, and 2) sharing such personal information with the owner, 3) The holder uses these data and personal information to perform the services agreed in this Agreement and other Big data credit verification services of the holder.

Using cookies or other technologies

We will notify you on our website In our application, we use cookies and other technologies to monitor your behavior as a user, in order to provide you with better services and experiences. The personal data that can be obtained through the use of these technologies includes: events executed by users, traffic sources from which users perform any actions, identifiers, dates and times of session start and end, user tracking, and personal information.

Cookies are small pieces of information sent by a website to your browser and stored on your computer's hard drive, used to determine your preferences when connecting to our website services and track certain behaviors or activities carried out by the owner.

When using 'cookies', the' Help 'button on most browser toolbars will tell you how to avoid accepting new' cookies', how to have the browser notify you when receiving new 'cookies', or how to disable all' cookies'