Comprehensive Privacy Policy

1. Identity and Address of the Data Controller

"Invitto", hereinafter "The Controller", located in Mexico, is responsible for collecting your personal data, the use given to them, and their protection.

2. Personal Data Collected

To carry out the purposes described in this policy, The Controller will collect and process the following personal data:

• Identification data: Full name.
• Contact data: Email address, phone number.
• Tax data (if billing is required): Tax ID, fiscal address.
• Asset or financial data: Information related to payments, which is securely processed through payment gateways (e.g., Stripe), so The Controller does not directly store credit or debit card numbers.

Sensitive data: We inform you that The Controller does not collect or process sensitive personal data (such as racial origin, religious beliefs, sexual preference, etc.).

3. Purposes of Data Processing

The personal data we collect from you will be used for the following purposes that are necessary for the service you request:

• Create and identify your user account in the "Invitto" application.
• Provide the services and products you have requested.
• Process transactions, service purchases, and invoice generation.
• Provide technical support and customer service.
• Compliance with applicable legal obligations.

Additionally, we will use your personal information for the following secondary purposes that are not strictly necessary for the requested service, but allow us to provide better service:

• Sending newsletters, advertising, and promotions about our services.
• Statistical, analytical, and application improvement purposes.

If you do not want your personal data used for these secondary purposes, you can indicate this by sending an email to hola@invitto.app.

4. Personal Data Transfer

We inform you that your personal data may be shared within and outside the country with the following third parties, for the purposes described:

• Payment gateway providers (Stripe): For the secure processing of your transactions.
• Cloud and infrastructure service providers: For platform hosting and data storage.
• Competent authorities: When required by judicial or regulatory mandate.

By accepting this privacy policy, you consent to the transfer of your data for the purposes established herein.

5. ARCO Rights (Access, Rectification, Cancellation, and Opposition)

You have the right to know what personal data we have about you, what we use it for, and the conditions of its use (Access). Likewise, it is your right to request the correction of your personal information if it is outdated, inaccurate, or incomplete (Rectification); that we delete it from our records or databases when you consider it is not being used properly (Cancellation); as well as to oppose the use of your personal data for specific purposes (Opposition).

To exercise any of the ARCO rights, you must submit the respective request via:

• Email: hola@invitto.app

Your request must contain: full name, document proving your identity, and a clear and precise description of the personal data regarding which you seek to exercise any of the ARCO rights. The response time will not exceed 20 business days.

6. Use of Cookies and Tracking Technologies

We inform you that on our website/application we use cookies and other technologies, through which it is possible to monitor your behavior as an internet user, as well as provide a better service and experience when browsing our page. The personal data we collect through these technologies will be used for basic application functionality (authentication) and traffic analysis.

7. Privacy Policy Modifications

This privacy policy may undergo modifications, changes, or updates derived from new legal requirements; from our own needs for the products or services we offer; from our privacy practices; or for other causes.

We are committed to keeping you informed about changes this privacy policy may undergo through our website in the "Privacy Policy" section.