Comprehensive Privacy Notice of Azteli

1. Identity and Address of the Responsible Party

Azteli, with an address in the State of Sinaloa, Mexico, is responsible for the use and protection of your personal data.

For any questions, requests, or clarifications related to your information, our Privacy Department is at your disposal through the official email: [email protected].

2. Nature of the Platform and Collection Limit

Azteli is a SaaS (Software as a Service) technological tool whose sole purpose is to provide a control panel (dashboard) for brands to host their product information and generate a web link for displaying said catalog.

Important: Azteli DOES NOT collect, store, or process personal or financial data of end-users (consumers) who visit the public catalog link. The only thing measured on catalogs is visits, anonymously and in aggregate (for example, how many people opened the catalog, which products they viewed, or whether they arrived by scanning the QR code), in order to provide statistics to the brand that owns the catalog. This measurement does not identify the visitor and is described in section 6.

Any interaction, lead capture, or sale that occurs outside the platform (e.g., WhatsApp redirect) is external to our infrastructure and is the exclusive responsibility of the brand that owns the catalog, who will act as the "Responsible Party" toward its own customers.

3. Personal Data We Collect from Brands (B2B Users)

To carry out the purposes described in this notice, we collect solely and exclusively the data of the account creators or brand representatives:

• Identification Data: Full name, company name, or brand.
• Contact Data: Email address and phone number.
• Billing Data: Federal Taxpayer Registry (RFC) and tax domicile.

4. Purposes of Data Processing

The personal data we collect from you will be used exclusively for primary and necessary purposes for the service you request:

• Creation, management, and administration of your access account to the Azteli dashboard.
• Generation of the unique link for the public display of your catalog.
• Processing of payments, billing, and management of your subscription.
• Notification about technical changes, maintenance, charges, or updates to the platform.

Note: Azteli does not use your information to send advertising, third-party marketing, or promotional newsletters. The only secondary purpose is measuring the performance of Azteli's own advertising campaigns through the cookies and technologies described in section 6; you may object to it at any time using the mechanisms listed there, without affecting the service.

5. Payment Processing and Third-Party Gateways

Payments for Azteli subscriptions are processed through duly certified third-party payment gateways, specifically Stripe and Mercado Pago.

Azteli does not collect, store, process, or have access at any time to the full details of your credit or debit cards.

Such financial information is handled directly by these platforms under their own strict security standards and privacy notices.

6. Use of Cookies and Tracking Technologies

On the Azteli website (azteli.com) and in the administration panel (dashboard) we use cookies, web beacons (pixels) and similar technologies. These are small files or snippets of code that are stored in your browser or loaded when you visit a page, and they let us recognize your browser across visits.

6.1 Technical cookies

They are required for the dashboard to work: they keep your session active, remember your configuration preferences (language, theme) and protect the security of your account. They cannot be disabled without affecting the service.

6.2 Analytics and advertising measurement cookies

We use the following third-party tools to understand how our site is used and to measure the results of Azteli's advertising campaigns:

• Google Analytics (Google LLC): pages visited, time on site, where the visit came from (for example, the ad or campaign you arrived from), device and browser type, approximate location, and actions on the site, such as clicking "Start now" or creating an account.
• Meta Pixel (Meta Platforms, Inc.): pages visited and actions on the site, such as clicking to sign up, contacting us or completing registration, to measure and improve Azteli's ads on Facebook and Instagram.

This data is collected automatically while you browse and is shared with Google and Meta, who process it under their own privacy policies: Google Privacy Policy and Meta Privacy Policy. Azteli does not send them your name, email, phone number or billing details.

The Meta Pixel only runs on the Azteli website and the dashboard. On the brands' public catalogs, only Google Analytics is used, to measure visits anonymously and in aggregate: pages and products viewed, whether the visit came from the QR code, device type and approximate location. This information is used to build the statistics provided to the brand that owns the catalog; no name, phone number or any other data that identifies the visitor is collected, and it is not used for advertising. Catalog visitors can disable this measurement using the mechanisms in section 6.3.

6.3 How to disable them

• You can block or delete cookies from your browser settings. Instructions depend on your browser (Chrome, Safari, Firefox, Edge) and are usually under "Privacy".
• You can opt out of Google Analytics measurement with the browser opt-out add-on.
• You can manage how your activity is used for ads in Meta's ad preferences.

If you disable technical cookies, you may not be able to sign in to the dashboard.

7. Security Measures

To protect your personal information, Azteli has implemented industry-standard administrative, physical, and technical security measures, including the transmission of data through secure protocols (SSL certificates / HTTPS browsing) and safeguarding information on servers with restricted access.

8. Data Retention and Deletion

In accordance with our Terms and Conditions, if you decide to cancel your subscription or it expires due to non-payment, Azteli will safeguard your account information and catalog elements for a grace period of 90 calendar days.

After this period, the associated information and data will be permanently and irretrievably deleted from our servers.

9. ARCO Rights (Access, Rectification, Cancellation, and Opposition)

You have the right to know what personal data we have about you, what we use it for, and the conditions of its use (Access).

Likewise, it is your right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); that we delete it from our records or databases when you consider that it is not being used properly (Cancellation); as well as to oppose the use of your personal data for specific purposes (Opposition).

To exercise any of the ARCO rights, you must send a written request to the email [email protected].

Your request will be processed according to the deadlines and requirements established by applicable law.

10. Right to Appeal to INAI

If you consider that your right to the protection of personal data has been injured by any conduct or omission on our part, or if you presume any violation of the provisions set forth in the Federal Law on Protection of Personal Data Held by Private Parties in Mexico, you may file a corresponding complaint or denunciation with the National Institute for Transparency, Access to Information and Personal Data Protection (INAI).

For more information, please visit www.inai.org.mx.

11. Changes to the Privacy Notice

This privacy notice may be modified, changed, or updated due to new legal requirements or our own needs regarding the services we offer.

We are committed to keeping you informed about any changes to this notice through a direct notification in your account dashboard or via email at least 15 days in advance.