Mexico Privacy Notice (LFPDPPP)

This notice adds Mexico-specific information to the Tanqory Global Privacy Policy. Together they form our integral privacy notice (aviso de privacidad integral) under Article 15 of Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, published in the Diario Oficial de la Federación on 20 March 2025 ("LFPDPPP"), when that law applies to how Tanqory Inc. ("Tanqory", "we", "us") handles your personal data. Where this notice and the Global Privacy Policy differ for a person in Mexico, this notice applies.

Official references:

• LFPDPPP, Diario Oficial de la Federación, 20 March 2025: https://dof.gob.mx/nota_detalle.php?codigo=5752569&fecha=20/03/2025
• Supervisory authority: Secretaría Anticorrupción y Buen Gobierno (LFPDPPP Art. 2, fr. XV)

---

1. Who is responsible (Art. 15, fr. I)

• Tanqory Inc. is the controller (responsable) for personal data about merchants, developers, visitors to Tanqory websites and users of Tanqory apps. Domicile: Tanqory Inc., c/o Harvard Business Services, Inc., 16192 Coastal Highway, Lewes, DE 19958, USA.
• Merchant stores: when you buy from a store that runs on Tanqory, the merchant is the controller and Tanqory is its processor (persona encargada) under our Data Processing Addendum. Ask the merchant first about your rights; we help the merchant answer.
• Personal data contact (Art. 29): privacy@tanqory.com handles requests from data subjects. Please write "ARCO request" in the subject line.

2. What we collect and why (Arts. 7 to 9 and 15, fr. II and III)

The categories of data and our purposes are listed in the Global Privacy Policy (sections "Personal Data We Collect" and "How We Use Personal Data"). We do not ask for sensitive personal data (Art. 2, fr. VI) to use Tanqory.

Secondary purposes are not needed for the service. If you do not want your data used for them, tell us at privacy@tanqory.com or use the unsubscribe link or your account settings; this does not affect your account.

3. Your ARCO rights and how to limit use (Arts. 21 to 34 and 15, fr. IV and V)

You can ask us to give you Access to your data, Rectify it, Cancel (delete) it, or Oppose its use for a specific purpose, including decisions made only by automated processing with legal or similarly significant effects (Art. 26, fr. II). You can also revoke your consent at any time, and limit the use or disclosure of your data, for example by unsubscribing or changing your account settings.

Send requests to privacy@tanqory.com with your name, a way to reply, a copy of an identity document or proof that you control the account, and a clear description of what you want. We answer within 20 business days of receiving the request and, if it is granted, carry it out within the following 15 business days. We may extend each period once, by the same length, when justified, and we will tell you (Art. 31). Requests are free; we only charge actual shipping or copying costs if you ask for physical copies (Art. 34).

If you are not satisfied with our answer, you can go to the Secretaría Anticorrupción y Buen Gobierno.

4. Sharing and transfers (Arts. 35 and 36)

Tanqory is a US company. Today our platform data is hosted by DigitalOcean in Singapore, and some of our service providers process data in the United States and other countries. Service providers who process data on our behalf act as our processors under contract (see the subprocessor list). We transfer data to third parties without your consent only where Article 36 allows it, for example to companies under common control with Tanqory, where needed for a contract in your interest, or when the law or an authority requires it. We do not sell your personal data. Recipients take on the same obligations we have under this notice (Art. 35).

5. Cookies and similar technologies

We use cookies, web beacons and similar technologies on Tanqory websites. Strictly necessary cookies are always on. Analytics and ad-measurement cookies collect data such as device, browser, pages visited and approximate location, for measurement and advertising. Visitors in Mexico see our cookie notice and can switch these off at any time in the cookie settings. We also honour Global Privacy Control signals from your browser. The full list is in our Cookie Policy.

6. Security and breaches (Arts. 18 and 19)

We protect personal data with the measures described in the Global Privacy Policy section "Data Security Measures". If a security breach significantly affects your property or moral rights, we tell you immediately so that you can take steps to protect yourself.

7. Children

Tanqory is built for businesses and is not meant for children. You must be 18 or older to open a merchant account. We do not knowingly collect data from children, and if we learn that we did, we delete it.

8. How long we keep data

We keep personal data only as long as the purposes in section 2 need, or longer if a law requires it (for example tax records). Periods are listed in our Data Retention Policy. After that we delete or anonymise the data.

9. Changes to this notice (Art. 15, fr. VI) and language

We will post changes to this notice here and change the "Last updated" date. For a material change, such as a new secondary purpose, we will also tell you prominently, for example by email or with a notice on our website or app, and ask for consent where the law requires it (Art. 11). This notice is in English; a Spanish version (with a simplified notice at the point of collection under Art. 16) will be published with our Spanish (Mexico) site.

Change history