Privacy Agreement

The date of the last update: March 12, 2025. Pursuant to the provisions of the Law Federal Protection of Personal Data Held by Private Parties (the “Law”) and its secondary legislation,(“Handa cash” and/or the “Responsible”), expressly informs you of the following: The personal data that you provide to us provided, whether directly or indirectly, are confidential and will be subject to the current applicable regulations, as well as national and international standards regarding protection of personal data of which you are the owner (the “Owner”), which may consist of the following:
1. full name,
2. address,
3. email,
4. phone number,
5. Federal Taxpayer Registry (“RFC”),
6. Unique Population Registry Code (“CURP”),
7. marital status,
8. identification and contact data,
9. geolocation,
10. social network data when authorized by the Owner,
11. Employment status
12. Living conditions
13. Personal facial biometric data in facial recognition elements in order to corroborate your identity (the “Personal Data”).
14. Facial image or video are used to verify that the user is a real person.
15. ID card image
Handa cash will not collect Data Personal references that may be granted the Owners for the contracting of any service or product. The express consent of the Owner for the processing of Personal Data will be collected through our website https://api.handacash.store and the IT application that we make available to you (the “App”) or by any other electronic, telephone, video or other technology means (the “Means Electronics"), which may happen automatically and simultaneously at the time you make contact with them; the above to be able to provide you with the services and/or products offered by Handa cash (the “Services”) and fulfill the purposes set forth indicated in this Privacy Notice. Handa cash informs the Owner that all The Personal Data provided will be subject to the content of this Privacy Notice.

In any case, these entities will be equally subject to confidentiality obligations in the management of information with the legal limitations imposed by applicable laws on the matter, in the jurisdiction where it is collected, archived, processed or transmitted. Politics of privacy Personal information will not be used or processed for purposes other than those here indicated.



Dear Customer

In any case, these entities will be equally subject to confidentiality obligations in the handling of information with the legal limitations imposed by applicable laws on the matter, in the jurisdiction where it is collected, archived, processed or transmitted. Chamber Storage. Phone number,Camera,Storage,Basic phone information mobile, App installation list.

Personal information will not be used or processed for purposes other than those indicated here.


Camera

In certain situations, such as when applying for a loan, we may request access to your device's camera for live detection. This is necessary to ensure that the applicant is indeed you, helping to protect your account and prevent unauthorized access. By granting this permission, you allow us to capture real-time images for identity verification. We are committed to protecting your privacy. Any images captured during live detection will be encrypted and securely stored, and will only be used for authentication purposes. We will not share your images with any third party without your explicit consent. Please note that live detection requires granting camera access. Without this permission, you may not be able to fully utilize our services, such as completing a loan application. However, we will only activate the camera with your explicit consent, and you can choose to disable this permission at any time through your device settings. This information will be encrypted and uploaded to https://api.handacash.store.

Image Information

We will gather photos taken by users during the loan application process, along with photos that customers intentionally select and upload for KYC verification and anti-fraud checks. We will not access or retrieve any other photos from your device’s gallery. We are dedicated to protecting your data through encryption, ensuring the security of this information, which will be encrypted and uploaded to https://api.handacash.store.

Files

We require your files permission to upload and store the documents you choose to submit for your loan application. The Platform will only access the files you select to upload and will not access or modify any other documents stored on your device. These selected documents will only be used to complete your loan application process and will be securely encrypted and uploaded to https://api.handacash.store to ensure your privacy.

APP Use Information

To help prevent fraud while using the app, we collect APP Use Information (including package_name, interval_type, start time, end_time, launch_count, last_time_used, total_time_used). This data is securely transmitted, synced, and stored in an encrypted format, and subsequently transferred to https://api.handacash.store for processing.

Device Information

We collect a variety of device-related data, including device brand, model, operating system version, network environment, WiFi status, device health, memory details, mobile device identifiers (such as mobile ID or other unique identifiers), user account information, and application software details. This information is essential for delivering automatic updates, reinforcing security measures, and safeguarding your account from unauthorized access. Additionally, it enables us to analyze your device’s behavior and identity as its user, providing insights that help improve our services and tailor the user experience. We also track device attributes such as screen size, resolution, mobile network provider details, and proximity to network connections to ensure privacy protection and prevent fraudulent activities. All of this data is securely encrypted and then transmitted to https://api.handacash.store for further processing.

SMS

We will gather SMS messages received on your phone from government bodies, banks, financial institutions, and e-commerce or utility companies where you have accounts, with your permission. The collected data will be transmitted and stored securely on our server, https://api.handacash.store. This information will assist us in analyzing your income and spending patterns, which aids in performing credit assessments, adjusting credit limits, and speeding up the approval process. Any SMS messages exchanged with individuals will be carefully filtered to ensure that no personal information is accessed.

Call Logs

Handa cash requires access to your call logs when you use the voice text message function to register or log in. This is to verify that the SIM card receiving the voice verification code is present in your device and to help prevent fraud. Rest assured, all data collected will be encrypted and securely uploaded to https://api.handacash.store. Handa cash is committed to protecting your privacy and will never share your data with anyone or third parties.

Mobile Phone Code (IMEi)

We use your mobile phone's IMEI code to ensure that the device used during the loan application process cannot be replaced, which helps prevent fraud. We do not automatically collect your mobile phone number to complete the application login page, nor do we retain any data from applicants who are not approved for a loan. The information is securely uploaded in an encrypted format to our server at https://api.handacash.store. This data is used to assess and analyze your behavior and risk regarding multiple loans, to determine whether legal action may be taken and to enhance fraud prevention measures.

Calendar

Handa cash collects information about events on your calendar to assist with risk analysis and improve the credit approval process. With your authorization, we will access your calendar to add and modify events related to your loan repayment due dates, but we will not access or alter any other events you have set on your device. Your data will be encrypted and securely stored at https://api.handacash.store. We are committed to safeguarding your information and will not sell, trade, or disclose your personal data to third parties.

APP INSTALLED

To prevent fraud, we will collect a list of the apps installed on your device, including the following information: app name, installation time, update time, version name, etc. We will upload this data to our server. This information will be used to identify fraudulent activities and ensure the security of funds in lending transactions. These data and personal information will be strictly encrypted and uploaded to our server at https://api.handacash.store, and will not be used for any other purposes without the user's permission.

View Wi-Fi Connections

Handa cash collects your device's IP address, network type, and Wi-Fi address to help detect and prevent fraudulent activities. This data is used for assessing risks and identifying any irregular behavior, which helps protect the security of your account. All collected information is securely encrypted and uploaded to https://api.handacash.store for processing.

AD_ID

Handa cash requests permission to collect your Google Advertising ID (GAID) to evaluate ad performance and enhance your advertising experience. This data is securely encrypted and uploaded to https://api.handacash.store. You can turn off "Personalized Ads" in your device settings to disable this feature.

PURPOSE

Handa cash states in this act that it collects Personal Data to be used in the following way:


I. Necessary

a. Comply with the contractual relationship derived from the service request and/or contract.

b. Verify, confirm and validate the identity of the Owner, as well as the veracity of the information that you provide as your own, references, jointly liable parties, endorsements, as appropriate applicable in accordance with the service contracted with Handa cash.

c. Manage, operate and monitor the services you request or contract with Handa cash.

d. Analyze the information provided by the owner to determine the level of risk, payment capacity, status of the transaction and any other assessment required by law and regulations for the provision of services in accordance with current legal regulations.

e. Formally confirm the contractual relationship between Handa cash and the owner.

f. Include it in our database, integrate files, directly or through a third.

g. Process the requests you make through our Electronic Media and/or calls.

h. Create your profile as a user in the App. Verification and investigation of credit capacity.

i. Consult and carry out credit investigations with credit information companies that Consider convenient.

j. Offer an expansion or improvement of the contracted Services.

k. Inform about Handa cash updates.

l. Carry out commercial intelligence, conduct market research, give visibility to your activity in our Electronic Media, quality monitoring, evaluation and improvement of our Electronic Media.

m. Send communications through our Electronic Media related to the Services hired.

n. Carry out collection procedures.

o. Application of quality and satisfaction surveys of services.

p. Provide the services and products you have requested from our company.

q. Inform you about changes in the same or new products or services that are related with the one contracted or acquired by the client.


II. Not necessary:

a. Sending offers or discounts on products and articles, promotional, marketing or events specials that may be of interest to the Owner.

b. Send our newsletter of news and offers, as well as benefits and services offered by Business partners. The Owner of the Personal Data may refuse the processing of their Data Personal for non-necessary purposes, sending an email to the following address electronic:[email protected]; with the understanding that, if the request is not received corresponding, the use of your information for all purposes will be understood as consented. mentioned before.


Personal Data We Use

The categories of personal data that may be required to be collected and that are Subject to treatment are, but are not limited to:

1. Identification, Contact and Labor Data.

2. Asset and/or financial data.

To carry out the purposes described in this Privacy Notice, we will use the following personal data of which you are the Owner:

1. Federal taxpayer registration.

2. Address or addresses.

3. Asset and/or financial data.

To carry out the purposes described in this Privacy Notice, we will use the following personal data of which you are the Owner:

1. Federal taxpayer registration.

2. Address or addresses.

3. Full name.

4. Address.

5. Birthdate.

6. Cell phone.

7. Unique Population Registry Code.

8. Civil status.

9. Economic dependents.

10. Copy of official identification.

11. Personal references.

12. Bank account details.

Personal data may be collected by Handa cash required through the application Handa cash computer, via telephone.

The aforementioned personal data will be requested by Handa cash when you:

Register in the computer application to apply for a loan.

l Contact Handa cash by telephone.


Transfer of Personal Data

Handa cash will share your Personal Data with: (i) its controlling companies, subsidiaries or affiliates under the common control of Handa cash, as well as our company parent company or any company in our corporate group that operates under the same processes and Internal Politics; (ii) with competent authorities, if requested, in terms of the applicable legislation; (iii) societies or companies in charge of collection and collection of payments; (iv) with other companies in the event of being liquidated, split, merged or any other operation similar by this company; (v) third parties, including financial entities, for the assignment or discount of credit portfolio, endorsement or any other form of negotiation of the credit portfolio; (vi)commercial partners with whom contracts have been entered into for the commercialization of products and/or services for the benefit of the Owner, and (vii) in any other of the cases established in articles 10 and 37 of the Law.


Means and Procedure to exercise the right of access, rectification, cancellation and opposition established in the Law (“ARCO Rights”) and Revocation of Consent

Given that the Owner has the right to the protection of Personal Data, the rights ARCO of the same, as well as to express their opposition or revocation, in the terms established the Law, he may exercise the ARCO Rights or the revocation of consent personally, or well, through his legal representative, by generating and sending the request corresponding to the following email address [email protected] of the Responsible, and must accompany your request with a copy of the current official identification of the Owner or, where applicable, his legal representative and the power of attorney stating the powers to represent it, as well as the following data: i) full name; ii) current address; iii) Telephone contacts; iv) email; v) Customer ID, as well as the product ID hired; vi) the express request regarding the exercise of any of the access rights, rectification, cancellation or opposition to the processing of your data; or, vii) the revocation of the consent to treatment; and, a brief description of the reasons why the request to the Responsible.

After submitting the application in accordance with the above clauses, Handa cash will publish the approved decision within 20 (twenty) days after receipt of the application. If the request is appropriate, it will come into effect within fifteen (fifteen) days business days counted from the date on which the person responsible communicates the response. If the information provided in your application is incorrect or insufficient, or the documents necessary to prove your identity or the corresponding legal representative, The person responsible will request the missing documentation within a period of 5 (five) business days. upon receipt of the same, in order to have sufficient elements to assess whether it is whether your request is appropriate or not. Likewise, the Owner may request the correction of their Data Personal, in which case the Responsible Party will have a period of 10 (ten) business days from the date of receipt of the request to correct Personal Data to evaluate and correct the omissions or missing parts. If you do not respond within the aforementioned period, the request corresponding will be considered not sent. The Owner will be responsible for keeping their Personal Data before the Controller. Therefore, in any case, the Owner guarantees and is responsible for the accuracy, veracity, validity and authenticity of the Personal Data provided, and undertakes to update its content promptly and inform the Controller of any changes. If the request of the exercise of ARCO Rights is related to the exercise of the right of access, Handa cash will provide information or personal data by means of a simple copy and/or document email at the email address designated by the Owner. The Owner of the Personal Data You can only withdraw consent for their processing in accordance with the previous procedures, and in accordance with the provisions of the Law, subjecting the Owner to the legal procedures that apply. Handa cash may refuse to exercise ARCO Rights when permitted by applicable laws and regulations on the matter.

In the event that the previous modification or cancellation does not impact compliance with the obligations derived from the legal relationship in force between the Owner and the Responsible, the Owner You may withdraw your consent to the processing of your Personal Data without retroactive effect. He procedure to revoke consent by the Owner for the use of their Data Personal, will be the same as that established for the exercise of ARCO Rights in the section former.


Methods to restrict the use or disclosure of your Personal Data

The Owner of the Personal Data may restrict its use or disclosure in accordance with the procedures provided for in the section "Exercise of ARCO Rights and revocation of the consent".The authorization must include at least 1) The processing of the Controller in accordance with the method agreed in this agreement, 2) Share said personal information with the Owner, and 3)The Owner uses said data and personal information to carry out the agreed services in this agreement and other big data credit validation services of the Owner.


Cookies and Online Security Protocol

The Controller obtains information through the website through the use of cookies, understanding as a “cookie” the data file that is stored on the hard drive of the user's computer. Owner, when he has access to the Controller's Website. These files may contain information such as identification provided by the Owner, or information to track the pages of your preference, to monitor your behavior as an Internet user, provide them with a better service and user experience when browsing the Controller's Website. A cookie cannot read data or information from the Owner's hard drive or read cookies. created by other sites or pages. In the event that the Owner wishes to reject cookies or accept them selectively, you can do this by adjusting the preferences of the browser. The Electronic Media may include links to third party websites outside the Responsible, with respect to which the latter does not assume any ownership, obligation or any responsibility.


Consent

It will be understood that when using our electronic media and/or with the services provided by us to enter into the purpose described in this article, you expressly acknowledge and agree this Privacy Notice, and undertakes to carry it out in all its terms and conditions. If you have any questions about our notifications, please email [email protected]


Privacy notice availability

The owner can consult the privacy statement on our website https://api.handacash.store and in the application at any time, even if the declaration of privacy has been accepted.


Modifications to the privacy notice

The Controller reserves the right to periodically update the Privacy Notice in accordance with changes in information practices, in response to legislative reforms, policies internal or new requirements for the provision of services or products.

The modifications will be available to the public through our website, so The Owner may consult them on the website https://api.handacash.store, in the Notice of Privacy.