CASHAHORA S.A. de C.V., SOFOM, E.N.R.

Aviso de Privacidad

JULIO 2025

Introducción

La privacidad de las personas, incluidos nuestros clientes, es de suma importancia para CASHAHORA S.A. de C.V., SOFOM, E.N.R. (en lo sucesivo la “Compañía”, o “PayJoy México” o “PayJoy”). En PayJoy estamos comprometidos en cumplir con las normas aplicables que rigen la privacidad de las personas a quienes ofrecemos nuestros productos y servicios.

Este Aviso tiene como objetivo establecer en términos claros los tipos de información recopilada, el motivo de dicha recopilación, la fuente de la Información, las entidades con las que dicha Información puede ser compartida, los derechos del interesado, así como las prácticas y procesos adoptados por la Compañía para el adecuado manejo de dicha Información. 

Por favor lea detenidamente este Aviso, a medida que usted continúe navegando en el sitio web, utilice o compre cualquiera de los productos o servicios que nosotros ofrecemos (los “Servicios”), o si proporciona cualquier Información a la Compañía por el uso mismo de nuestro sitio web o por cualquier Servicio, asumimos que dicha Información la está proporcionado de manera voluntaria, así como todo lo que se estipula en la presente Aviso se basa en dicho supuesto.

Responsable del tratamiento

El responsable del tratamiento de su información será PayJoy con domicilio para oír y recibir notificaciones en Av. Insurgentes Sur No. 64, piso 13, Colonia Juárez, Alcaldía Cuauhtémoc; Ciudad de México, CP. 06600.

Categorías de datos personales objeto de tratamiento y el tratamiento de datos personales sensibles

A fin de prestarle los Servicios, la Compañía dará tratamiento a las siguientes categorías de datos personales: datos de identificación, datos de contacto, datos crediticios, datos patrimoniales y/o financieros, datos sobre su dispositivo celular y datos de ubicación, incluyendo su geolocalización.

En algunos procesos de validación de identidad, la Compañía podría solicitar datos biométricos de manera limitada, como reconocimiento facial o de voz, únicamente cuando sea necesario y conforme a las disposiciones legales aplicables.

Finalidades Primarias del tratamiento

La Compañía tratará sus datos personales para realizar las siguientes actividades primarias y necesarias:

1. Cuando usted contrata los Servicios de PayJoy, la Compañía requiere procesar su Información para autenticar su identidad y evaluar el riesgo de cumplimiento a la contraprestación.
2. Procesamos y almacenamos parte de su Información para la prevención del fraude con el fin de garantizar una mayor seguridad a PayJoy, a usted y al sistema financiero mexicano.
3. También necesitamos su información para ponernos en contacto con usted por cualquier medio disponible, incluidos los medios electrónicos, correo o teléfono (SMS y otros), sobre asuntos relacionados con los Servicios durante el proceso de contratación o incorporación a los Servicios y posteriormente durante la prestación de los mismos. Esto incluye la notificación de cambios en la Plataforma y/o en los Servicios. También podemos contactarlo para ofrecerle o proporcionarle información sobre productos o servicios que puedan ser de su interés.
4. Del mismo modo, tratamos su Información para gestionar sus obligaciones de contraprestación y fines de cobro.

‍

Finalidades secundarias del tratamiento

Si Usted no se opone, la Compañía tratará sus datos necesarios para llevar a cabo alguna o todas las finalidades secundarias que se mencionan a continuación:

1. Promoción de nuevos productos y servicios financieros: Informar sobre lanzamientos, cambios o beneficios relacionados con productos o servicios financieros de la Compañía o de terceros, a través de distintos medios de contacto (correo, SMS, llamadas, etc.).
2. Publicidad basada en análisis de datos: Utilizar técnicas de análisis masivo de datos y perfiles  para enviarle información que pueda ser de su interés, segmentar audiencias y realizar predicciones crediticias.
3. Creación de perfiles de consumo: Elaborar perfiles y hábitos financieros para que la Compañía o sus aliados comerciales determinen la viabilidad de ofrecerle productos financieros adecuados a su perfil, conforme a sus políticas internas.
4. Registro histórico para personalización: Mantener un historial de sus operaciones o interacciones con servicios financieros para análisis interno, mejoras de servicio, personalización de contenidos y promociones.
5. Recordatorios y asistencia comercial: Contactarlo por medios electrónicos para recordarle productos financieros pendientes, ofrecerle apoyo para concluir solicitudes o notificarle sobre novedades relevantes.

Con la finalidad de brindarle total control sobre sus datos personales sujetos al tratamiento de las finalidades secundarias, usted puede conocerlos, modificarlos, limitarlos o eliminarlos. Para ello deberá enviar un correo electrónico a privacy@payjoy.com].

Transferencias de datos personales

• No sujetas al consentimiento

La Compañía podrá transferir sus datos personales tanto a entidades nacionales como extranjeras, sin requerir su consentimiento para los siguientes fines:

• Autoridades competentes y terceros en los casos legalmente previstos.
• Sociedades de información crediticia (SIC) para garantizar el cumplimiento de las obligaciones derivadas de los Servicios adquiridos o contratados, así como actualizar las bases de datos de aquellas SIC con las que tengamos celebrados acuerdos jurídicos.
• A las Empresas del Grupo que operan bajo políticas de privacidad que cumplen con las disposiciones aplicables correspondientes para que éstas le puedan contactar directa o indirectamente, para llevar a cabo actividades de segmentación, perfilamiento, promoción y en su caso, ofrecimiento de productos y/o servicios que dichas empresas pueden comercializar y/o prestar de manera conjunta con la Compañía o de manera independiente.
• A terceros prestadores de servicios con los que tengamos celebrados acuerdos jurídicos vinculantes para los fines previstos en el presente Aviso de Privacidad.
• Si la Compañía se involucra en una fusión, adquisición, auditoría financiera (debida diligencia), reorganización corporativa, procedimientos de quiebra, venta de activos o transición de servicios subcontratados a otro proveedor, su información puede ser vendida o transferida como parte de dicha transacción, según lo permita la legislación aplicable. La Compañía no proporciona ninguna declaración ni garantía sobre la forma en la que las entidades receptoras puedan utilizar o divulgar su Información.
• Necesario obtener su consentimiento.
• Si usted no se opone, la Compañía podrá transferir los datos personales necesarios a socios comerciales y/o terceros con los que tengamos celebrados acuerdos jurídicos vinculantes para que estos puedan contactarle de forma directa para brindarle información y ofrecerle bienes, productos y servicios que resulten de su interés o adecuados según su perfil, o bien, para que puedan determinar si usted es sujeto a adquirir los bienes y/o servicios que dichos terceros ofrecen.

Si usted no desea que la Compañía lleve a cabo la transferencia de referencia, por favor envíe un correo electrónico a privacy@payjoy.com Usted podrá cambiar de opción en cualquier momento.

Derechos del titular de los datos personales 

Usted o su representante legal, puede ejercitar los derechos de acceso, rectificación, cancelación y oposición (derechos “ARCO”) y revocación del consentimiento respecto a sus datos personales enviando un correo electrónico a la dirección privacy@payjoy.com Para acreditar su identidad es necesario acompañar su solicitud con copia de alguna identificación oficial. Se le comunicará la determinación adoptada, en un plazo máximo de veinte (20) días hábiles y en caso de resultar procedente se hará efectiva la misma dentro de los quince (15) días hábiles. La respuesta se dará vía correo electrónico.

En algunos procesos, como la evaluación crediticia, la Compañía podrá tomar decisiones con base en mecanismos automatizados, sin intervención humana directa. Usted tiene derecho a solicitar una revisión de dichas decisiones conforme a la legislación aplicable.

Opciones y medios para limitar el uso o divulgación de sus datos personales

Usted o su representante legal podrá limitar el uso o divulgación de sus datos personales enviando su solicitud a la dirección privacy@payjoy.com En caso de que su solicitud sea procedente se le registrará en el listado de exclusión de la Compañía

Autoridad de protección de datos personales

En caso de considerarlo necesario, le informamos que tiene el derecho de acudir ante la Unidad de Protección de Datos de la Secretaría Anticorrupción y Buen Gobierno para hacer valer cualquier inconformidad relacionada con su derecho a la protección de datos personales.

Uso de cookies y tecnologías de rastreo ‍

La Compañía utiliza diversas tecnologías para mejorar la eficiencia y la experiencia de navegación cuando usted accede a nuestros servicios y plataforma. Entre estas tecnologías se encuentran las cookies, pequeños archivos que se almacenan en su navegador para recordar información y optimizar su interacción con nuestros servicios.

Tipos de cookies que utilizamos:

• Cookies esenciales o técnicas: permiten el funcionamiento básico y seguro de la plataforma (por ejemplo, iniciar sesión, mantener la sesión activa o procesar un pago). Estas cookies son indispensables, por lo que no pueden deshabilitarse, ya que sin ellas la plataforma no funcionaría correctamente.
• Cookies de preferencias y experiencia: recuerdan sus opciones de navegación, secciones consultadas y páginas previas para personalizar su experiencia.
• Cookies de rendimiento y análisis: recopilan datos técnicos y estadísticos (propios y de terceros) que nos ayudan a mejorar el rendimiento y desarrollar nuevas funcionalidades.
• Cookies de funcionalidad: permiten guardar carritos de compra, listas de deseos y preferencias de compra, agilizando su experiencia en futuras visitas.
• Cookies publicitarias y de redes sociales: permiten personalizar anuncios según sus intereses, segmentar audiencias y habilitar interacciones sociales.

Cómo gestionar las cookies en su navegador

Si bien algunas cookies son esenciales y no pueden deshabilitarse, usted puede administrar o eliminar las cookies no esenciales siguiendo las instrucciones oficiales de su navegador:

• Google Chrome: Gestionar cookies en Chrome – https://support.google.com/chrome/answer/95647?hl=es
• Mozilla Firefox: Habilitar y deshabilitar cookies en Firefox – https://support.mozilla.org/es/kb/habilitar-y-deshabilitar-cookies-sitios-web-rastrear-preferencias
• Safari (Apple): Administrar cookies en Safari – https://support.apple.com/es-es/guide/safari/sfri11471/mac
• Microsoft Edge: Eliminar y administrar cookies en Edge – https://support.microsoft.com/es-es/microsoft-edge/eliminar-cookies-en-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
• Opera: Administrar cookies en Opera – https://help.opera.com/en/latest/web-preferences/#cookies
• Brave: Configuración de cookies en Brave – https://support.brave.com/hc/es/articles/360022806212-C%C3%B3mo-gestionar-las-cookies-en-Brave
• Internet Explorer (versiones antiguas): Eliminar y administrar cookies en Internet Explorer – https://support.microsoft.com/es-es/help/17442/windows-internet-explorer-delete-manage-cookies

Asimismo, desde la configuración de su navegador usted puede consultar las cookies almacenadas en su dispositivo y eliminarlas en cualquier momento. Tenga en cuenta que, si decide limitar o bloquear cookies no esenciales, algunas funcionalidades podrían verse restringidas o no funcionar de manera óptima.

La Compañía tiene un firme compromiso de ofrecerle una experiencia digital segura, personalizada y transparente, equilibrando la eficiencia tecnológica con el respeto a su privacidad.

Privacidad de los menores de edad

Nuestros servicios no están dirigidos a individuos menores de dieciocho (18) años, por lo que la Compañía no recopila información personal de menores de dieciocho (18) años.

Actualizaciones

La Compañía se reserva el derecho de añadir, revisar, enmendar, modificar o eliminar cualquier parte del presente Aviso (en parte o en su totalidad) a su discreción. La versión vigente y actualizada del presente Aviso se publicará en el sitio web de la Compañía. En caso de cualquier cambio o de cualquier requisito que surja en virtud de la legislación aplicable, esta Aviso será enmendada o modificada en la medida necesaria para cumplir con dicha modificación a la ley aplicable o para cumplir con cualquier requisito en virtud de dichas leyes aplicables. Siempre que hagamos cambios materiales en el presente Aviso, los mismos serán válidos, efectivos y vinculantes después de ser: 

(1) divulgados en nuestra Plataforma; o 

(2) comunicados a usted por correo electrónico; o 

(3) comunicados a usted de cualquier otra manera. Si usted decide no seguir utilizando los Servicios después de dicho cambio, deberá solicitar la cancelación de su cuenta y/o la terminación de su relación jurídica.

Cómo ponerse en contacto con nosotros

Si tiene alguna duda sobre sus datos personales -incluyendo la solicitud de acceso o corrección de los detalles de sus datos personales- usted puede:

• Enviarnos un correo electrónico a: privacy@payjoy.com 
• Llamarnos al: 55 5351 8341
• O escribirnos por correo regular a: CASHAHORA, S.A. de C.V., SOFOM, E.N.R., con dirección en Av. Insurgentes Sur No. 64, piso 13, Colonia Juárez, Alcaldía Cuauhtémoc; Ciudad de México, CP. 06600

‍

• PayJoy Mexico Privacy Policy
• PayJoy Ecuador Privacy Policy
• PayJoy South Africa Privacy Policy
• PayJoy Brazil Privacy Policy

Introduction

The privacy of individuals, including our customers and clients, is of utmost importance to PayJoy, Inc (“Company”). We are committed to adhering to the Privacy regulations governing the citizens to whom we provide products and services.

In compliance with fair and transparent principle and the data subject’s right to be informed, this PayJoy Privacy Policy (“Policy”) provides you, the data subject, with information on the processing for your personal information (“Information”) in a clear, suitable and conspicuous manner that is easily accessible.

This Policy aims to set out in clear terms the types of Information collected, the purpose of collection, the source of the Information, the entities with whom such Information may be shared, the data subject’s rights and also the reasonable security practices and procedures adopted by the Company in handling such Information.

Please read this Policy carefully as your proceeding with the use of this website or the use or purchase of any goods or services provided by us (“Services”), or your providing any Information to the Company on or through the use of our website or through any Services, are based upon the assumption that you are providing such Information to the Company voluntarily. further, the subsequent provisions of this Policy are based upon such an assumption

Type of Information Collected

In order to provide the Services, the Company may collect and process the following categories of Information:

Information about You

Including but not limited to,

• (i) Identification Data: name, government ID, e-mail, telephone number, your photograph.
• (ii) Credit Reports, Watchlists & Validation Services: requested copies of your credit history which may contain professional and financial information about you. We check for your information in public watchlists such as OFAC lists. We use Validation Services to ensure the validity and quality of Identification Data we receive.
• (iii) Social Media Data: data provided in your social media accounts, including photo, friends list and name.
• (iv) Copies of Documents: collected documentation. including government IDs
• (v) Payment Information: information about how you pay your obligation with PayJoy
• (vi) Customer Service: information you provide to us in connection with the Services, including when you communicate with us, by any means, for Customer service purposes.

Information Concerning Your Mobile Device

Including but not limited to information regarding the device, operating system, device identifier, SIM information, applications list, internet connection state, application foreground state, etc.

If the device is purchased, rented or leased via PayJoy then we collect information relating to that transaction such as store where transaction occurred, amount of transaction, etc.

Information Concerning Your Communication

If you provide specific authorization, we may collect and process information from your mobile device related but not limited to call logs and SMS messages. Before doing so we will contact you and request your specific consent.

Cookies

A cookie is a small text file that a web server places on your computer or device when your browser accesses a website. Cookies store data specific to a client or website and are designed to create a record of or “remember” online activity. The Company uses cookies to ensure the site functions properly and to deliver an individualized online services experience. You generally have the ability to accept or decline cookies. Most web browsers give you a choice to modify your browser settings to decline some or all cookies.

Please note under the law some of the information above is considered sensitive data. The Company ensures compliance with the legal requirements called out in the law for processing of sensitive data.

Retention of Information

The Company will retain and use the Information for the period necessary to (i) fulfill the purposes described in this Policy; (ii) comply with legal or regulatory obligations applicable to us; or (iii) fulfill evidentiary purposes in legal, administrative or arbitration proceedings. The criteria considered to determine the retention period include the duration of your relationship with the Company, legal retention periods applicable, and legal prescriptions with respect to possible claims, lawsuits, or administrative and arbitration proceedings in connection with the Services we provide.

Purpose of Collection

The Company will, or may, collect, use, receive, possess, process, store, deal, disclose, transfer or handle Information for the following purposes:

1. When you contract PayJoy Services, we need to process your Information to authenticate your identity and assess risk of repayment.
2. We process and store some of your Information for fraud prevention to ensure greater security to PayJoy, to you and to the financial system in general.
3. We also need your Information to contact you by any available means, including electronic means, mail or telephone (SMS and others), on matters related to the Services during your onboarding to our Services and later on throughout the services provision. This includes notifying you of changes in the Platform and/or in the Services. We may also contact you to offer or provide information on products or services that may be of your interest.
4. We also process your Information to manage your payment obligations for payment collection purposes.
5. We may process your Information for data analytics, research and statistics, for assessing and studying the profile of our Service’s users, and for developing better products, offers and services.
6. And in connection with other business of the Company from time to time.

Automated Decisions

Automated decision-making occurs when an electronic system processes personal data in order to make a decision without human intervention. Part of our procedures, especially the assessment of your ability to pay obligations, relies on automated decision mechanisms and, so, we guarantee your right to request the reviewing of any decision made exclusively based on automated processing of your data, according to the law.

Sources of Information

The Company collects Information directly from you, your use of the Services, as well as from any third parties whom you may have authorised to share such Information with the Company.

Direct

Information you directly provide to us.

Indirect

Where permitted by law, the Company may collect Information about you from third parties such as credit reporting agencies.

Mobile device

The Company collects Information from your mobile device via the PayJoy mobile application installed on your mobile phone. You may check what information is being collected by PayJoy’s app in the privacy section of your mobile device.

Website

When you visit our websites, we may collect information from you automatically through cookies or similar technology.

Sharing

The Company may share Information about you with:

• Governmental agencies, courts or regulators, as required under applicable law;
• Any agent, contractor, service provider or other third party in connection with the Company’s business and in connection with the provision of the Services; and
• Any other person under duty of confidentiality to the Company.

If the Company is involved in merger, acquisition, financial due diligence, corporate reorganization, bankruptcy proceedings, sale of assets or transition of outsourced services to another provider, your Information may be sold or transferred as part of such a transaction as permitted by applicable law. The Company makes no representations or warranties concerning how any such receiving entities may use or disclose your Information.

International Transfers

We may transfer the personal information we collect about you to recipients in countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to recipients in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred personal information in accordance with this Privacy Policy.

Your Rights as a Data Subject

The company will like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

Right to Confirm Processing

You have the right to confirm whether the Company is processing your data.

Right to Access

You have the right to request access to or solicit a copy of any of your personal information that the Company may hold.

Right to Rectification

You have the right to request that the Company correct any information you believe is inaccurate. You also have the right to request the Company to complete the information you believe is incomplete.

Right to Erasure

You have the right to request that the Company erase your personal data, under certain conditions.

The right to erasure is subject to certain exceptions under the law such as, but not limited to:

• Information required by the Company to fulfill statutory and regulatory obligations
• Information required to identify fraud, security incidents, exercise certain rights, etc.

Right to Restrict Processing

You have the right to request that the Company restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to the Company’s processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that the Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Right to Withdraw Consent

Where the Company has relied on your consent to process particular information and you have provided your consent to process such information, you have the right to withdraw such consent at any time.

Right to Lodge a Complaint

You have a right to bring a claim to the competent data protection authority.

How to Exercise Your Rights

Any request to exercise your rights can be directed to the data protection officer at PayJoy. The identity and contact details of the data protection officer can be found at the end of this Policy.

We will need to verify your identity before processing your request. The request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, or a legal representative of that person
• Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

We do not charge a fee to process your request. We will respond to your request within reasonable time, as defined by the relevant law.

Children’s Privacy

Our services are not directed to children under the age of sixteen and we do not knowingly collect personal information from children under the age of sixteen.

Security Measures

The Company has implemented reasonable security practices and procedures that are in line with internationally accepted standards for the security and protection of Information. These practices and procedures include managerial, technical, operational and physical security control measures commensurate with the nature of Information collected and processed by the Company.

Updates

.The Company reserves the right to add, revise, amend, modify or delete any part of this Policy (in part or in full) at its discretion. The updated version of this Policy in force will be posted on the Company’s website from time to time. In the event of any change or in case of any requirement arising under applicable law, this Policy shall be deemed to be amended or modified to the extent necessary to comply with such amendment to the applicable law or to meet any requirement under such applicable laws. Whenever we make material changes in this Policy, such changes will be valid, effective and binding after being: (1) disclosed in our Platform; or (2) communicated to you by e-mail; or (3) communicated to you in any other way. If you decide not to continue using the Services after such change, you must apply for the cancellation of your account and/or termination of your legal relationship.

How to Contact Us

If you have queries concerning your personal data – including requesting access to or correcting the details of your personal data – you may contact:

Email us at: privacy@payjoy.com

To report security vulnerabilities:
Please email us at: security@payjoy.com

Call us: 888-632-1922

Or write to us at:

PayJoy, Inc

655 4th Street, San Francisco, CA 94107

‍

• PayJoy Mexico Privacy Policy
• PayJoy Ecuador Privacy Policy
• PayJoy South Africa Privacy Policy
• PayJoy Brazil Privacy Policy

Introduction

The privacy of individuals, including our customers and clients, is of utmost importance to PayJoy, Inc (“Company”). We are committed to adhering to the Privacy regulations governing the citizens to whom we provide products and services.

In compliance with fair and transparent principle and the data subject’s right to be informed, this PayJoy Privacy Policy (“Policy”) provides you, the data subject, with information on the processing for your personal information (“Information”) in a clear, suitable and conspicuous manner that is easily accessible.

This Policy aims to set out in clear terms the types of Information collected, the purpose of collection, the source of the Information, the entities with whom such Information may be shared, the data subject’s rights and also the reasonable security practices and procedures adopted by the Company in handling such Information.

Please read this Policy carefully as your proceeding with the use of this website or the use or purchase of any goods or services provided by us (“Services”), or your providing any Information to the Company on or through the use of our website or through any Services, are based upon the assumption that you are providing such Information to the Company voluntarily. further, the subsequent provisions of this Policy are based upon such an assumption

Type of Information Collected

In order to provide the Services, the Company may collect and process the following categories of Information:

Information about You

Including but not limited to,

• (i) Identification Data: name, government ID, e-mail, telephone number, your photograph.
• (ii) Credit Reports, Watchlists & Validation Services: requested copies of your credit history which may contain professional and financial information about you. We check for your information in public watchlists such as OFAC lists. We use Validation Services to ensure the validity and quality of Identification Data we receive.
• (iii) Social Media Data: data provided in your social media accounts, including photo, friends list and name.
• (iv) Copies of Documents: collected documentation. including government IDs
• (v) Payment Information: information about how you pay your obligation with PayJoy
• (vi) Customer Service: information you provide to us in connection with the Services, including when you communicate with us, by any means, for Customer service purposes.

Information Concerning Your Mobile Device

Including but not limited to information regarding the device, operating system, device identifier, SIM information, applications list, internet connection state, application foreground state, etc.

If the device is purchased, rented or leased via PayJoy then we collect information relating to that transaction such as store where transaction occurred, amount of transaction, etc.

Information Concerning Your Communication

If you provide specific authorization, we may collect and process information from your mobile device related but not limited to call logs and SMS messages. Before doing so we will contact you and request your specific consent.

Cookies

A cookie is a small text file that a web server places on your computer or device when your browser accesses a website. Cookies store data specific to a client or website and are designed to create a record of or “remember” online activity. The Company uses cookies to ensure the site functions properly and to deliver an individualized online services experience. You generally have the ability to accept or decline cookies. Most web browsers give you a choice to modify your browser settings to decline some or all cookies.

Please note under the law some of the information above is considered sensitive data. The Company ensures compliance with the legal requirements called out in the law for processing of sensitive data.

Retention of Information

The Company will retain and use the Information for the period necessary to (i) fulfill the purposes described in this Policy; (ii) comply with legal or regulatory obligations applicable to us; or (iii) fulfill evidentiary purposes in legal, administrative or arbitration proceedings. The criteria considered to determine the retention period include the duration of your relationship with the Company, legal retention periods applicable, and legal prescriptions with respect to possible claims, lawsuits, or administrative and arbitration proceedings in connection with the Services we provide.

Purpose of Collection

The Company will, or may, collect, use, receive, possess, process, store, deal, disclose, transfer or handle Information for the following purposes:

1. When you contract PayJoy Services, we need to process your Information to authenticate your identity and assess risk of repayment.
2. We process and store some of your Information for fraud prevention to ensure greater security to PayJoy, to you and to the financial system in general.
3. We also need your Information to contact you by any available means, including electronic means, mail or telephone (SMS and others), on matters related to the Services during your onboarding to our Services and later on throughout the services provision. This includes notifying you of changes in the Platform and/or in the Services. We may also contact you to offer or provide information on products or services that may be of your interest.
4. We also process your Information to manage your payment obligations for payment collection purposes.
5. We may process your Information for data analytics, research and statistics, for assessing and studying the profile of our Service’s users, and for developing better products, offers and services.
6. And in connection with other business of the Company from time to time.

Automated Decisions

Automated decision-making occurs when an electronic system processes personal data in order to make a decision without human intervention. Part of our procedures, especially the assessment of your ability to pay obligations, relies on automated decision mechanisms and, so, we guarantee your right to request the reviewing of any decision made exclusively based on automated processing of your data, according to the law.

Sources of Information

The Company collects Information directly from you, your use of the Services, as well as from any third parties whom you may have authorised to share such Information with the Company.

Direct

Information you directly provide to us.

Indirect

Where permitted by law, the Company may collect Information about you from third parties such as credit reporting agencies.

Mobile device

The Company collects Information from your mobile device via the PayJoy mobile application installed on your mobile phone. You may check what information is being collected by PayJoy’s app in the privacy section of your mobile device.

Website

When you visit our websites, we may collect information from you automatically through cookies or similar technology.

Sharing

The Company may share Information about you with:

• Governmental agencies, courts or regulators, as required under applicable law;
• Any agent, contractor, service provider or other third party in connection with the Company’s business and in connection with the provision of the Services; and
• Any other person under duty of confidentiality to the Company.

If the Company is involved in merger, acquisition, financial due diligence, corporate reorganization, bankruptcy proceedings, sale of assets or transition of outsourced services to another provider, your Information may be sold or transferred as part of such a transaction as permitted by applicable law. The Company makes no representations or warranties concerning how any such receiving entities may use or disclose your Information.

International Transfers

We may transfer the personal information we collect about you to recipients in countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to recipients in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred personal information in accordance with this Privacy Policy.

Your Rights as a Data Subject

The company will like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

Right to Confirm Processing

You have the right to confirm whether the Company is processing your data.

Right to Access

You have the right to request access to or solicit a copy of any of your personal information that the Company may hold.

Right to Rectification

You have the right to request that the Company correct any information you believe is inaccurate. You also have the right to request the Company to complete the information you believe is incomplete.

Right to Erasure

You have the right to request that the Company erase your personal data, under certain conditions.

The right to erasure is subject to certain exceptions under the law such as, but not limited to:

• Information required by the Company to fulfill statutory and regulatory obligations
• Information required to identify fraud, security incidents, exercise certain rights, etc.

Right to Restrict Processing

You have the right to request that the Company restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to the Company’s processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that the Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Right to Withdraw Consent

Where the Company has relied on your consent to process particular information and you have provided your consent to process such information, you have the right to withdraw such consent at any time.

Right to Lodge a Complaint

You have a right to bring a claim to the competent data protection authority.

How to Exercise Your Rights

Any request to exercise your rights can be directed to the data protection officer at PayJoy. The identity and contact details of the data protection officer can be found at the end of this Policy.

We will need to verify your identity before processing your request. The request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, or a legal representative of that person
• Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

We do not charge a fee to process your request. We will respond to your request within reasonable time, as defined by the relevant law.

Children’s Privacy

Our services are not directed to children under the age of sixteen and we do not knowingly collect personal information from children under the age of sixteen.

Security Measures

The Company has implemented reasonable security practices and procedures that are in line with internationally accepted standards for the security and protection of Information. These practices and procedures include managerial, technical, operational and physical security control measures commensurate with the nature of Information collected and processed by the Company.

Updates

.The Company reserves the right to add, revise, amend, modify or delete any part of this Policy (in part or in full) at its discretion. The updated version of this Policy in force will be posted on the Company’s website from time to time. In the event of any change or in case of any requirement arising under applicable law, this Policy shall be deemed to be amended or modified to the extent necessary to comply with such amendment to the applicable law or to meet any requirement under such applicable laws. Whenever we make material changes in this Policy, such changes will be valid, effective and binding after being: (1) disclosed in our Platform; or (2) communicated to you by e-mail; or (3) communicated to you in any other way. If you decide not to continue using the Services after such change, you must apply for the cancellation of your account and/or termination of your legal relationship.

How to Contact Us

If you have queries concerning your personal data – including requesting access to or correcting the details of your personal data – you may contact:

Email us at: privacy@payjoy.com

To report security vulnerabilities:
Please email us at: security@payjoy.com

Call us: 888-632-1922

Or write to us at:

PayJoy, Inc

655 4th Street, San Francisco, CA 94107

‍

• PayJoy Mexico Privacy Policy
• PayJoy Ecuador Privacy Policy
• PayJoy South Africa Privacy Policy
• PayJoy Brazil Privacy Policy

Introduction

The privacy of individuals, including our customers and clients, is of utmost importance to PayJoy, Inc (“Company”). We are committed to adhering to the Privacy regulations governing the citizens to whom we provide products and services.

In compliance with fair and transparent principle and the data subject’s right to be informed, this PayJoy Privacy Policy (“Policy”) provides you, the data subject, with information on the processing for your personal information (“Information”) in a clear, suitable and conspicuous manner that is easily accessible.

This Policy aims to set out in clear terms the types of Information collected, the purpose of collection, the source of the Information, the entities with whom such Information may be shared, the data subject’s rights and also the reasonable security practices and procedures adopted by the Company in handling such Information.

Please read this Policy carefully as your proceeding with the use of this website or the use or purchase of any goods or services provided by us (“Services”), or your providing any Information to the Company on or through the use of our website or through any Services, are based upon the assumption that you are providing such Information to the Company voluntarily. further, the subsequent provisions of this Policy are based upon such an assumption

Type of Information Collected

In order to provide the Services, the Company may collect and process the following categories of Information:

Information about You

Including but not limited to,

• (i) Identification Data: name, government ID, e-mail, telephone number, your photograph.
• (ii) Credit Reports, Watchlists & Validation Services: requested copies of your credit history which may contain professional and financial information about you. We check for your information in public watchlists such as OFAC lists. We use Validation Services to ensure the validity and quality of Identification Data we receive.
• (iii) Social Media Data: data provided in your social media accounts, including photo, friends list and name.
• (iv) Copies of Documents: collected documentation. including government IDs
• (v) Payment Information: information about how you pay your obligation with PayJoy
• (vi) Customer Service: information you provide to us in connection with the Services, including when you communicate with us, by any means, for Customer service purposes.

Information Concerning Your Mobile Device

Including but not limited to information regarding the device, operating system, device identifier, SIM information, applications list, internet connection state, application foreground state, etc.

If the device is purchased, rented or leased via PayJoy then we collect information relating to that transaction such as store where transaction occurred, amount of transaction, etc.

Information Concerning Your Communication

If you provide specific authorization, we may collect and process information from your mobile device related but not limited to call logs and SMS messages. Before doing so we will contact you and request your specific consent.

Cookies

A cookie is a small text file that a web server places on your computer or device when your browser accesses a website. Cookies store data specific to a client or website and are designed to create a record of or “remember” online activity. The Company uses cookies to ensure the site functions properly and to deliver an individualized online services experience. You generally have the ability to accept or decline cookies. Most web browsers give you a choice to modify your browser settings to decline some or all cookies.

Please note under the law some of the information above is considered sensitive data. The Company ensures compliance with the legal requirements called out in the law for processing of sensitive data.

Retention of Information

The Company will retain and use the Information for the period necessary to (i) fulfill the purposes described in this Policy; (ii) comply with legal or regulatory obligations applicable to us; or (iii) fulfill evidentiary purposes in legal, administrative or arbitration proceedings. The criteria considered to determine the retention period include the duration of your relationship with the Company, legal retention periods applicable, and legal prescriptions with respect to possible claims, lawsuits, or administrative and arbitration proceedings in connection with the Services we provide.

Purpose of Collection

The Company will, or may, collect, use, receive, possess, process, store, deal, disclose, transfer or handle Information for the following purposes:

1. When you contract PayJoy Services, we need to process your Information to authenticate your identity and assess risk of repayment.
2. We process and store some of your Information for fraud prevention to ensure greater security to PayJoy, to you and to the financial system in general.
3. We also need your Information to contact you by any available means, including electronic means, mail or telephone (SMS and others), on matters related to the Services during your onboarding to our Services and later on throughout the services provision. This includes notifying you of changes in the Platform and/or in the Services. We may also contact you to offer or provide information on products or services that may be of your interest.
4. We also process your Information to manage your payment obligations for payment collection purposes.
5. We may process your Information for data analytics, research and statistics, for assessing and studying the profile of our Service’s users, and for developing better products, offers and services.
6. And in connection with other business of the Company from time to time.

Automated Decisions

Automated decision-making occurs when an electronic system processes personal data in order to make a decision without human intervention. Part of our procedures, especially the assessment of your ability to pay obligations, relies on automated decision mechanisms and, so, we guarantee your right to request the reviewing of any decision made exclusively based on automated processing of your data, according to the law.

Sources of Information

The Company collects Information directly from you, your use of the Services, as well as from any third parties whom you may have authorised to share such Information with the Company.

Direct

Information you directly provide to us.

Indirect

Where permitted by law, the Company may collect Information about you from third parties such as credit reporting agencies.

Mobile device

The Company collects Information from your mobile device via the PayJoy mobile application installed on your mobile phone. You may check what information is being collected by PayJoy’s app in the privacy section of your mobile device.

Website

When you visit our websites, we may collect information from you automatically through cookies or similar technology.

Sharing

The Company may share Information about you with:

• Governmental agencies, courts or regulators, as required under applicable law;
• Any agent, contractor, service provider or other third party in connection with the Company’s business and in connection with the provision of the Services; and
• Any other person under duty of confidentiality to the Company.

If the Company is involved in merger, acquisition, financial due diligence, corporate reorganization, bankruptcy proceedings, sale of assets or transition of outsourced services to another provider, your Information may be sold or transferred as part of such a transaction as permitted by applicable law. The Company makes no representations or warranties concerning how any such receiving entities may use or disclose your Information.

International Transfers

We may transfer the personal information we collect about you to recipients in countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to recipients in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred personal information in accordance with this Privacy Policy.

Your Rights as a Data Subject

The company will like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

Right to Confirm Processing

You have the right to confirm whether the Company is processing your data.

Right to Access

You have the right to request access to or solicit a copy of any of your personal information that the Company may hold.

Right to Rectification

You have the right to request that the Company correct any information you believe is inaccurate. You also have the right to request the Company to complete the information you believe is incomplete.

Right to Erasure

You have the right to request that the Company erase your personal data, under certain conditions.

The right to erasure is subject to certain exceptions under the law such as, but not limited to:

• Information required by the Company to fulfill statutory and regulatory obligations
• Information required to identify fraud, security incidents, exercise certain rights, etc.

Right to Restrict Processing

You have the right to request that the Company restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to the Company’s processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that the Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Right to Withdraw Consent

Where the Company has relied on your consent to process particular information and you have provided your consent to process such information, you have the right to withdraw such consent at any time.

Right to Lodge a Complaint

You have a right to bring a claim to the competent data protection authority.

How to Exercise Your Rights

Any request to exercise your rights can be directed to the data protection officer at PayJoy. The identity and contact details of the data protection officer can be found at the end of this Policy.

We will need to verify your identity before processing your request. The request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, or a legal representative of that person
• Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

We do not charge a fee to process your request. We will respond to your request within reasonable time, as defined by the relevant law.

Children’s Privacy

Our services are not directed to children under the age of sixteen and we do not knowingly collect personal information from children under the age of sixteen.

Security Measures

The Company has implemented reasonable security practices and procedures that are in line with internationally accepted standards for the security and protection of Information. These practices and procedures include managerial, technical, operational and physical security control measures commensurate with the nature of Information collected and processed by the Company.

Updates

.The Company reserves the right to add, revise, amend, modify or delete any part of this Policy (in part or in full) at its discretion. The updated version of this Policy in force will be posted on the Company’s website from time to time. In the event of any change or in case of any requirement arising under applicable law, this Policy shall be deemed to be amended or modified to the extent necessary to comply with such amendment to the applicable law or to meet any requirement under such applicable laws. Whenever we make material changes in this Policy, such changes will be valid, effective and binding after being: (1) disclosed in our Platform; or (2) communicated to you by e-mail; or (3) communicated to you in any other way. If you decide not to continue using the Services after such change, you must apply for the cancellation of your account and/or termination of your legal relationship.

How to Contact Us

If you have queries concerning your personal data – including requesting access to or correcting the details of your personal data – you may contact:

Email us at: privacy@payjoy.com

To report security vulnerabilities:
Please email us at: security@payjoy.com

Call us: 888-632-1922

Or write to us at:

PayJoy, Inc

655 4th Street, San Francisco, CA 94107

‍

• PayJoy Mexico Privacy Policy
• PayJoy Ecuador Privacy Policy
• PayJoy South Africa Privacy Policy
• PayJoy Brazil Privacy Policy

Introduction

The privacy of individuals, including our customers and clients, is of utmost importance to PayJoy, Inc (“Company”). We are committed to adhering to the Privacy regulations governing the citizens to whom we provide products and services.

In compliance with fair and transparent principle and the data subject’s right to be informed, this PayJoy Privacy Policy (“Policy”) provides you, the data subject, with information on the processing for your personal information (“Information”) in a clear, suitable and conspicuous manner that is easily accessible.

This Policy aims to set out in clear terms the types of Information collected, the purpose of collection, the source of the Information, the entities with whom such Information may be shared, the data subject’s rights and also the reasonable security practices and procedures adopted by the Company in handling such Information.

Please read this Policy carefully as your proceeding with the use of this website or the use or purchase of any goods or services provided by us (“Services”), or your providing any Information to the Company on or through the use of our website or through any Services, are based upon the assumption that you are providing such Information to the Company voluntarily. further, the subsequent provisions of this Policy are based upon such an assumption

Type of Information Collected

In order to provide the Services, the Company may collect and process the following categories of Information:

Information about You

Including but not limited to,

• (i) Identification Data: name, government ID, e-mail, telephone number, your photograph.
• (ii) Credit Reports, Watchlists & Validation Services: requested copies of your credit history which may contain professional and financial information about you. We check for your information in public watchlists such as OFAC lists. We use Validation Services to ensure the validity and quality of Identification Data we receive.
• (iii) Social Media Data: data provided in your social media accounts, including photo, friends list and name.
• (iv) Copies of Documents: collected documentation. including government IDs
• (v) Payment Information: information about how you pay your obligation with PayJoy
• (vi) Customer Service: information you provide to us in connection with the Services, including when you communicate with us, by any means, for Customer service purposes.

Information Concerning Your Mobile Device

Including but not limited to information regarding the device, operating system, device identifier, SIM information, applications list, internet connection state, application foreground state, etc.

If the device is purchased, rented or leased via PayJoy then we collect information relating to that transaction such as store where transaction occurred, amount of transaction, etc.

Information Concerning Your Communication

If you provide specific authorization, we may collect and process information from your mobile device related but not limited to call logs and SMS messages. Before doing so we will contact you and request your specific consent.

Cookies

A cookie is a small text file that a web server places on your computer or device when your browser accesses a website. Cookies store data specific to a client or website and are designed to create a record of or “remember” online activity. The Company uses cookies to ensure the site functions properly and to deliver an individualized online services experience. You generally have the ability to accept or decline cookies. Most web browsers give you a choice to modify your browser settings to decline some or all cookies.

Please note under the law some of the information above is considered sensitive data. The Company ensures compliance with the legal requirements called out in the law for processing of sensitive data.

Retention of Information

The Company will retain and use the Information for the period necessary to (i) fulfill the purposes described in this Policy; (ii) comply with legal or regulatory obligations applicable to us; or (iii) fulfill evidentiary purposes in legal, administrative or arbitration proceedings. The criteria considered to determine the retention period include the duration of your relationship with the Company, legal retention periods applicable, and legal prescriptions with respect to possible claims, lawsuits, or administrative and arbitration proceedings in connection with the Services we provide.

Purpose of Collection

The Company will, or may, collect, use, receive, possess, process, store, deal, disclose, transfer or handle Information for the following purposes:

1. When you contract PayJoy Services, we need to process your Information to authenticate your identity and assess risk of repayment.
2. We process and store some of your Information for fraud prevention to ensure greater security to PayJoy, to you and to the financial system in general.
3. We also need your Information to contact you by any available means, including electronic means, mail or telephone (SMS and others), on matters related to the Services during your onboarding to our Services and later on throughout the services provision. This includes notifying you of changes in the Platform and/or in the Services. We may also contact you to offer or provide information on products or services that may be of your interest.
4. We also process your Information to manage your payment obligations for payment collection purposes.
5. We may process your Information for data analytics, research and statistics, for assessing and studying the profile of our Service’s users, and for developing better products, offers and services.
6. And in connection with other business of the Company from time to time.

Automated Decisions

Automated decision-making occurs when an electronic system processes personal data in order to make a decision without human intervention. Part of our procedures, especially the assessment of your ability to pay obligations, relies on automated decision mechanisms and, so, we guarantee your right to request the reviewing of any decision made exclusively based on automated processing of your data, according to the law.

Sources of Information

The Company collects Information directly from you, your use of the Services, as well as from any third parties whom you may have authorised to share such Information with the Company.

Direct

Information you directly provide to us.

Indirect

Where permitted by law, the Company may collect Information about you from third parties such as credit reporting agencies.

Mobile device

The Company collects Information from your mobile device via the PayJoy mobile application installed on your mobile phone. You may check what information is being collected by PayJoy’s app in the privacy section of your mobile device.

Website

When you visit our websites, we may collect information from you automatically through cookies or similar technology.

Sharing

The Company may share Information about you with:

• Governmental agencies, courts or regulators, as required under applicable law;
• Any agent, contractor, service provider or other third party in connection with the Company’s business and in connection with the provision of the Services; and
• Any other person under duty of confidentiality to the Company.

If the Company is involved in merger, acquisition, financial due diligence, corporate reorganization, bankruptcy proceedings, sale of assets or transition of outsourced services to another provider, your Information may be sold or transferred as part of such a transaction as permitted by applicable law. The Company makes no representations or warranties concerning how any such receiving entities may use or disclose your Information.

International Transfers

We may transfer the personal information we collect about you to recipients in countries other than the country in which the information was originally collected. Those countries may not have the same data protection laws as the country in which you initially provided the information. When we transfer your information to recipients in other countries: (i) we will perform those transfers in accordance with the requirements of applicable law; and (ii) we will protect the transferred personal information in accordance with this Privacy Policy.

Your Rights as a Data Subject

The company will like to make sure you are fully aware of all of your data protection rights. Every user is entitled to the following:

Right to Confirm Processing

You have the right to confirm whether the Company is processing your data.

Right to Access

You have the right to request access to or solicit a copy of any of your personal information that the Company may hold.

Right to Rectification

You have the right to request that the Company correct any information you believe is inaccurate. You also have the right to request the Company to complete the information you believe is incomplete.

Right to Erasure

You have the right to request that the Company erase your personal data, under certain conditions.

The right to erasure is subject to certain exceptions under the law such as, but not limited to:

• Information required by the Company to fulfill statutory and regulatory obligations
• Information required to identify fraud, security incidents, exercise certain rights, etc.

Right to Restrict Processing

You have the right to request that the Company restrict the processing of your personal data, under certain conditions.

Right to Object to Processing

You have the right to object to the Company’s processing of your personal data, under certain conditions.

Right to Data Portability

You have the right to request that the Company transfer the data that we have collected to another organization, or directly to you, under certain conditions.

Right to Withdraw Consent

Where the Company has relied on your consent to process particular information and you have provided your consent to process such information, you have the right to withdraw such consent at any time.

Right to Lodge a Complaint

You have a right to bring a claim to the competent data protection authority.

How to Exercise Your Rights

Any request to exercise your rights can be directed to the data protection officer at PayJoy. The identity and contact details of the data protection officer can be found at the end of this Policy.

We will need to verify your identity before processing your request. The request must:

• Provide sufficient information that allows us to reasonably verify you are the person about whom we collected personal information, or a legal representative of that person
• Describe your request with sufficient detail that allows us to properly understand, evaluate and respond to it

We cannot respond to your request or provide you with personal information if we cannot verify your identity or authority to make the request and confirm the personal information relates to you.

We do not charge a fee to process your request. We will respond to your request within reasonable time, as defined by the relevant law.

Children’s Privacy

Our services are not directed to children under the age of sixteen and we do not knowingly collect personal information from children under the age of sixteen.

Security Measures

The Company has implemented reasonable security practices and procedures that are in line with internationally accepted standards for the security and protection of Information. These practices and procedures include managerial, technical, operational and physical security control measures commensurate with the nature of Information collected and processed by the Company.

Updates

.The Company reserves the right to add, revise, amend, modify or delete any part of this Policy (in part or in full) at its discretion. The updated version of this Policy in force will be posted on the Company’s website from time to time. In the event of any change or in case of any requirement arising under applicable law, this Policy shall be deemed to be amended or modified to the extent necessary to comply with such amendment to the applicable law or to meet any requirement under such applicable laws. Whenever we make material changes in this Policy, such changes will be valid, effective and binding after being: (1) disclosed in our Platform; or (2) communicated to you by e-mail; or (3) communicated to you in any other way. If you decide not to continue using the Services after such change, you must apply for the cancellation of your account and/or termination of your legal relationship.

How to Contact Us

If you have queries concerning your personal data – including requesting access to or correcting the details of your personal data – you may contact:

Email us at: privacy@payjoy.com

To report security vulnerabilities:
Please email us at: security@payjoy.com

Call us: 888-632-1922

Or write to us at:

PayJoy, Inc

655 4th Street, San Francisco, CA 94107

‍