Legal document · v0 template
Privacy Notice
Personal-data treatment per Mexico's Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP).
01Identity and address of the Controller
Tintago (the ‘Controller’), operated by [TINTAGO LEGAL ENTITY] — placeholder Stripe Atlas Delaware C-corp pending registration, with a Mexican subsidiary planned for Phase 2.
Commercial address: Mexico City, Mexico. Exact address pending — completed at Mexican-subsidiary registration.
Data-Protection contact: privacy@tintago.ai
02Personal data collected
Through the ‘Request a demo’ form on tintago.ai, the Controller collects:
- Full name — identifying the requester.
- Work email — communication channel.
- Institution / company — request context.
- Role / position — relevance for the design-partner conversation.
- Use case — free-text description of the compliance problem the requester wants to solve.
No sensitive data is collected per LFPDPPP Article 3-VI (racial origin, health, religious beliefs, political ideology, sexual preferences). The tintago.ai site uses no tracking cookies, no third-party analytics, and no biometrics.
03Purposes of treatment
Personal data is used exclusively for:
- Scheduling and running a technical demo of the Tintago product.
- Follow-up communication via email after the demo.
- Evaluation of design-partner fit for Phase 1.
Data is NOT used to train the Tintago model. Model training is governed by a separate Data Processing Agreement (DPA) signed only with formal design partners.
04Retention and deletion
Form data is retained while the conversation is active. If the conversation does not progress to formal design-partner status within six (6) months of last communication, data is deleted automatically and verifiably. The requester may request immediate deletion at any time (see §6 ARCO).
05Transfers and third parties
No third-party transfers of form data, except:
- Email processor (Google Workspace or equivalent) — required to deliver form-notification emails to the Tintago team. Covered by the provider's standard DPA.
- Legal compliance — when required by court order or administrative request from CNBV / Banxico / UIF / INAI / tax authority.
No commercial, marketing, or model-training international transfers outside Mexico. Tintago's inference infrastructure is designed to operate on Mexican soil (data residency).
06ARCO rights
The data subject may exercise Access, Rectification, Cancellation, and Opposition (ARCO) rights at any time, per LFPDPPP Article 16, via:
- Email to privacy@tintago.ai with subject
[ARCO]+ the right being exercised. - Official ID of the data subject or legal representative — INE, passport, or equivalent.
The Controller will respond within a maximum of twenty (20) business days per LFPDPPP Article 32. If the request is granted, implementation occurs within fifteen (15) days thereafter.
07Changes to this Privacy Notice
The Controller reserves the right to modify this Privacy Notice. Any change is published on this page with a visible update date. Data subjects whose email has been collected will be notified of substantial changes by email.
08Supervisory authority
The data subject may file complaints with the National Institute of Transparency, Access to Information, and Personal Data Protection (INAI) — home.inai.org.mx — when they consider their rights have been violated.
09Jurisdiction
This Privacy Notice is governed by LFPDPPP, its Regulations, and applicable Mexican law. Disputes are resolved by civil courts in Mexico City.