Privacy Notice

1. Data Controller

Edgar Sebastian Corte Uribe (hereinafter "Emi") is responsible for the processing of your personal data in accordance with the Mexican Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP) and its Regulations.

2. Personal Data Collected

For the purposes set forth in this Privacy Notice, Emi may collect the following categories of personal data:

• Full name and business name
• Email address
• Phone number and WhatsApp number
• Content of messages sent and received through WhatsApp Business
• Payment information (card data processed by third parties, billing data)
• IP address and browsing data
• RFC (tax ID) and tax data for invoicing

3. Purposes of Data Processing

Your personal data will be used for the following primary purposes, which are necessary to provide the service:

• Provide, operate and maintain the EmiChat platform services
• Process payments, subscriptions and issue invoices (CFDI)
• Send service-related notifications, including account alerts, updates and operational communications
• Provide technical support and customer service
• Comply with legal obligations and requirements from competent authorities

Additionally, with your prior consent, your data may be used for the following secondary purposes:

• Conduct statistical and platform usage analyses to improve our services
• Send marketing communications and promotions related to EmiChat

4. Data Transfers

EmiChat may transfer your personal data to the following third parties without requiring your consent pursuant to Article 37 of the LFPDPPP, as such transfers are necessary to provide the contracted service:

• Meta Platforms, Inc. — for sending and receiving messages through the WhatsApp Business Cloud API
• Facturapi — for generating and certifying Digital Tax Receipts via the Internet (CFDI)

All aforementioned providers maintain adequate privacy policies and security measures for the protection of your personal data.

5. ARCO Rights

You have the right to Access, Rectify, Cancel or Oppose the processing of your personal data (ARCO rights), as well as to revoke your consent for their processing. To exercise any of these rights, you must submit a request to the following email address: privacidad@emichat.app

Your request must include: (i) the data subject's full name, (ii) the email address associated with your account, (iii) a clear description of the data for which you wish to exercise your rights, and (iv) any documents that may facilitate the location of your data.

EmiChat will respond to your request within a maximum period of 20 business days from the date the complete request is received. If the request is deemed valid, the requested changes will take effect within 15 business days following the communication of the response.

6. Use of Cookies and Tracking Technologies

The EmiChat website and platform use cookies and similar technologies for the following purposes:

• Session cookies — required for the platform's operation and user authentication
• Analytics cookies — to collect anonymous information about site usage and improve the user experience

You may disable cookies through your browser settings. However, doing so may affect the functionality of certain platform features.

7. Changes to the Privacy Notice

EmiChat reserves the right to modify this Privacy Notice at any time. Any changes will be notified via a WhatsApp message to the number registered on your account or by email. The updated version will be available at all times on our website.

8. Contact

If you have any questions or comments about this Privacy Notice, you may contact us at the following email address: privacidad@emichat.app