1. Data Controller

Iurefficient, with address at [Full address], Mexico City, Mexico, is responsible for the processing of your personal data under the Mexican Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.

2. Personal Data We Collect

2.1 Identification and Contact Data

• Full name
• Email address
• Phone number
• Name of the firm or organization
• Position or role

2.2 Billing Data

• Tax ID (RFC)
• Tax address
• Bank or credit card details (processed by PCI-DSS certified third parties)

2.3 Service Usage Data

• Activity logs on the platform
• Configuration preferences
• IP address and device data
• Cookies and similar technologies

2.4 User Content

The documents, cases and other information you upload to the platform are treated as confidential information under strict security measures. This content is exclusively yours and is not used for any purpose other than providing you the service.

3. Purposes of Processing

3.1 Primary Purposes (necessary)

• Providing access to the Iurefficient platform
• Processing and managing your subscription
• Issuing invoices and tax receipts
• Providing technical support and customer service
• Sending service-related notifications
• Complying with legal obligations

3.2 Secondary Purposes (with your consent)

• Sending information about new features and updates
• Running satisfaction surveys
• Sending marketing communications
• Preparing statistics and market studies (anonymized data)

If you do not want your data processed for secondary purposes, you may say so by emailing [email protected].

4. Data Transfers

Your personal data may be transferred to:

• Infrastructure providers: for hosting and operating the platform (servers in Mexico)
• Payment processors: to handle transactions (PCI-DSS certified)
• AI service providers: for artificial intelligence features (no data retention)
• Competent authorities: when required by law

Important: we do not sell, rent or share your personal data with third parties for marketing purposes without your express consent.

5. ARCO Rights

You have the right to:

• Access: know which personal data we hold about you
• Rectification: request the correction of inaccurate or incomplete data
• Cancellation: request the deletion of your data
• Opposition: object to the processing of your data for certain purposes

To exercise your ARCO rights, send a request to [email protected] including:

1. Full name and registered email address
2. A clear description of the right you wish to exercise
3. Documents proving your identity

We will respond within a maximum of 20 business days.

6. Use of Cookies

We use cookies and similar technologies to:

• Keep your session active
• Remember your preferences
• Analyze platform usage (analytics)
• Improve the user experience

You can configure your browser to reject cookies, although this may affect the functionality of the platform.

7. Security Measures

We implement administrative, technical and physical security measures to protect your personal data, including:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Role-based access controls
• Continuous security monitoring
• Periodic security audits
• Staff training in data protection

For more information about our security practices, visit our security page.

8. Changes to this Privacy Notice

We reserve the right to modify this Privacy Notice at any time. Changes will be notified through:

• Publication on our website
• Email notification (for substantial changes)
• A notice within the platform

9. Contact

If you have questions or comments about this Privacy Notice or the processing of your data, you can contact us:

• Email: [email protected]
• ARCO rights: [email protected]
• Phone: [Contact number]
• Address: [Full address]

This Privacy Notice is issued in compliance with the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), published in the Official Gazette of the Federation on July 5, 2010, and its Regulations.