Privacy Notice

1. Identity and address of the controller

MEZTLI OCELOTL S.A.S. de C.V. (hereinafter, “Meztli Ocelotl”), with domicile in Metepec, State of Mexico, Mexico, is responsible for the processing of your personal data in accordance with the Federal Law on Protection of Personal Data Held by Private Parties (the “Law”) and other applicable regulations.

For any matter related to this notice you can contact us at nahual@meztliocelotl.com.

2. Personal data we collect

Depending on the way you interact with us, we may collect:

• Identification and contact details: name, surname, email, corporate email, and phone number.
• Account data: access credentials (the password is stored encrypted and is never visible to us), role, and preferences.
• Data from your request: service of interest and the content of the messages you send us through the contact form, email, or WhatsApp.
• Platform activity data: projects, tasks, participation in the Kuhun community (points, karma, rewards and downloads).
• Transaction data: amount, currency, date and identifier of the contributions or payments. Card and bank account details are captured and processed directly by the payment processors (Stripe, PayPal or Mercado Pago); Meztli Ocelotl does not receive or store them.
• Navigation data: IP address, browser type and device, pages visited and time spent, obtained through cookies and similar technologies (see section 8).

We do not collect sensitive personal data (ethnic origin, health status, beliefs, sexual preferences, etc.). We ask you not to include them in your messages.

Our services are not directed at individuals under 18 years of age. If a minor wishes to create an account or make a contribution, they must do so with the consent of their parent, guardian, or legal representative.

3. Purposes of Processing

Primary purposes (necessary for the relationship with you)

• Attend to your requests for information, contact, and quotations.
• Create, manage, and protect your user account.
• Provide the contracted services and monitor projects.
• Process contributions and payments, and assign the corresponding points or rewards.
• Operate the Kuhun community: when publishing proposals or appearing on the Founder Ledger, they are displayed publicly first name (without surnames), his/her avatar, his/her points and his/her rank.
• Issue tax receipts when appropriate and fulfill legal obligations.
• Ensure site security and prevent fraud or misuse.

Secondary purposes (not necessary)

• Create site usage statistics to improve its content and functionality.
• Send them information about news, projects, events, or promotions.

If you do not want your data to be processed for secondary purposes, you can indicate this at any time by writing to nahual@meztliocelotl.com, or rejecting analytical cookies in the cookie banner. Your refusal will not be a reason to deny you the services you request.

4. Processors and Data Transfers

To operate the site we rely on providers who process personal data on behalf of Meztli Ocelotl (processors), subject to confidentiality and security obligations. Some are located outside of Mexico:

Aside from the above, we do not sell or transfer your personal data. We will only transfer it without your consent in cases provided for by law, for example, when required by a competent authority or necessary to fulfill a legal obligation or the contract entered into with you.

5. ARCO Rights

You have the right to Acceder to your personal data, to Correct them if they are inaccurate or incomplete, to Cancel them when I consider that they are no longer required for the stated purposes and to To oppose to its treatment for specific purposes.

To exercise them, send a request to nahual@meztliocelotl.com with the subject “ARCO Rights”, containing:

1. Your name and a way to communicate the response to you.
2. Document accrediting your identity or, where applicable, that of your legal representative.
3. Clear description of the data in relation to which you seek to exercise a right and of the right you wish to exercise.
4. Any element that facilitates the location of your data.
5. In case of rectification, the modifications to be made and the supporting documentation.

We will respond to you within a maximum period of 20 business days counted from the receipt of your request; if it is approved, we will make it effective within the 15 business days following the response. Many of your account data can also be viewed and corrected directly from your profile.

6. Revocation of consent

You may revoke the consent you have granted us for the processing of your data at any time, following the same procedure as in section 5. Please note that we may not be able to comply with your request immediately in all cases, as some legal obligation (for example, tax-related) may require us to continue retaining certain data. Likewise, revocation may imply that we may no longer be able to provide you with the service.

7. Limitation of Use or Disclosure

You can limit the use of your data by requesting it at the indicated email address. You can also register with the Public Registry to Avoid Advertising (REPEP) of the Federal Consumer Protection Agency (PROFECO).

8. Cookies and tracking technologies

We use strictly necessary cookies to keep you logged in and, only if you accept, Google Analytics cookies to obtain usage statistics. You can view the details and change your decision in our Cookies Policy.

9. Security measures

We apply administrative, technical and physical security measures to protect your data against damage, loss, alteration, destruction or unauthorized use, access or processing, including: encryption of communications (HTTPS), encrypted passwords, role-based access control and security policies at the database level.

10. Data retention

We will retain your data only for as long as necessary to fulfill the described purposes and the periods required by applicable laws. Thereafter, they will be blocked and securely deleted.

11. Changes to the Privacy Notice

This notice may be modified due to legal changes, changes in our services, or changes in our privacy practices. Any changes will be posted on this same page.meztliocelotl.com/privacy-noticeindicating the date of the last update.

12. Authority

If you consider that your right to the protection of personal data has been violated, you may go to the competent authority regarding the protection of personal data in the possession of private parties.

By providing us with your personal data, you acknowledge that you have read and understood this Privacy Notice.