Privacy Notice

This Privacy Notice is issued under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and the Privacy Notice Guidelines. It explains who processes your personal data, what data we collect, for what purposes, with whom we share it and how you may exercise your rights.

Data Controller

The party responsible for processing your personal data is [razón social] ("Veriko", "we", "us"), with registered tax address at [domicilio fiscal], [ciudad, estado], Mexico, and tax ID (RFC) [RFC]. For any matter relating to the protection of your personal data you may contact us at [correo de privacidad].

Personal Data We Process

We process the following data depending on how you use the service: account data (name and email); payment receipts you upload and the data extracted from them (which may include amounts, dates, tracking keys or numeric references, and masked or partial beneficiary accounts such as CLABE, card or phone number); validation records; API keys; and technical and usage data (IP address, timestamps and activity logs). Billing data is processed through Stripe, as described below.

We do not intentionally request sensitive personal data. Please do not include information that is not necessary to verify a SPEI transfer.

Purposes of Processing

Primary purposes (necessary to provide the service): verifying that a SPEI transfer is real by querying Banxico's CEP; creating and managing your account; processing and authenticating API use; handling billing and invoicing; providing support; maintaining the security of the service; and complying with applicable legal obligations.

Secondary purposes (not necessary, requiring your consent and which you may decline without affecting the service): sending communications about new features, satisfaction surveys and product improvements. If you do not want us to process your data for these purposes, you may state so at any time at [correo de privacidad].

Handling of Receipts and Images

When you upload a receipt image (accepted formats JPEG, PNG, WebP or PDF), the image is sanitized before processing: metadata (including EXIF information) is stripped and the image is re-encoded. An automated text recognition (OCR) step then extracts the data needed to perform the validation.

Alternatively, you may enter the data directly (date, amount, tracking key or numeric reference, and beneficiary account) without uploading any image. The extracted or entered data is used solely to query Banxico's CEP and return a validation verdict to you.

Transfers and Data Processors

To provide the service we share data with: Banco de México (Banxico), through its CEP, as the official source for validating the transfer; Stripe, as the payment processor for billing and invoicing; and infrastructure and hosting providers acting as data processors under our instructions and bound by confidentiality and security obligations.

We do not sell your personal data. Except for the transfers and disclosures described here, we do not share your data with third parties without your consent, save for the cases set out in Article 37 of the LFPDPPP (including, among others, requests by competent authorities or compliance with legal obligations).

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described, while your account is active and for the periods required by applicable legal, tax or contractual provisions. Once those purposes are met and such periods elapse, your data will be blocked for subsequent deletion, in accordance with the LFPDPPP.

Receipt images are kept only for as long as necessary to perform the validation and the purposes described here; validation records may be kept separately as evidence of the result.

ARCO Rights

You have the right to Access your personal data, Rectify it when inaccurate, Cancel it when you consider it is no longer needed for the stated purposes, and Object to its processing (ARCO rights), as well as to withdraw your consent and to limit the use or disclosure of your data.

To exercise these rights, send your request to [correo de privacidad], stating your name, the means to communicate our response, documents proving your identity or legal representation, and a clear description of the data and the right you wish to exercise. We will respond within the time frames set by the LFPDPPP. If you do not receive a satisfactory response, you may turn to Mexico's National Institute for Transparency, Access to Information and Personal Data Protection (INAI).

Use of Cookies and Similar Technologies

We use cookies and similar technologies to maintain your session, remember preferences, ensure security and measure the performance of the service. Some are necessary for the site to function and others help us improve it.

You can manage or disable cookies through your browser settings; please note that disabling certain cookies may affect how the service works.

Changes to this Privacy Notice

We may amend this Privacy Notice to reflect legal, regulatory or operational changes in our practices. We will publish the current version on this site and indicate the last updated date.

We recommend reviewing this Notice periodically. Where changes are material, we will endeavor to notify you through the means available to us.

Contact

If you have questions about this Privacy Notice or about the processing of your personal data, write to us at [correo de privacidad].

Controller: [razón social], [domicilio fiscal], [ciudad, estado], Mexico.