Lopsf

Privacy Policy

Last updated: January 15, 2026

1. Identity of the controller

The controller of your personal data is Lopsf S.A.P.I. de C.V. (hereinafter "Lopsf"), with address at Av. Paseo de la Reforma 250, Floor 15, Col. Juárez, Cuauhtémoc, ZIP 06600, Mexico City. Privacy officer contact: privacy@lopsf.com.

2. Personal data we collect

We collect: full name, email, phone, RFC, CURP, INE number, address, employment information, banking data (CLABE) and net-worth information required for compliance with the Ley Fintech and Anti-Money-Laundering regulations.

3. Purposes of processing

Your data is used to: (i) identify you as an investor, (ii) comply with KYC/AML obligations, (iii) process your investments and payments, (iv) send you communications about new projects, (v) handle complaints and (vi) meet requirements from authorities such as CNBV, CONDUSEF and SAT.

4. Legal basis

Processing is based on the Federal Law on the Protection of Personal Data Held by Private Parties (LFPDPPP), its Regulations and the obligations derived from the Ley Fintech.

5. Transfers

We may share your data with: notaries public, Mexican banking institutions, credit bureau, regulatory authorities (CNBV, CONDUSEF, UIF) and technology providers that meet our security standards.

6. ARCO Rights

You may exercise your Access, Rectification, Cancellation and Opposition rights, as well as withdraw your consent, by writing to privacy@lopsf.com. We will respond within a maximum of 20 business days.

7. Security measures

We apply TLS 1.3 encryption in transit, AES-256 at rest, multi-factor authentication and annual audits aligned with ISO/IEC 27001.

8. Retention

We keep your data for the applicable legal term: 10 years after the end of the relationship, as required by the Ley Fintech and tax rules.

9. Changes to this notice

Any modification will be published on this page with the update date. We recommend reviewing it periodically.