PRIVACY NOTICE

*English version for reference only. Spanish version of this Privacy Notice shall prevail.

‍CLIP CARTERA DIGITAL, S.A.PI. DE C.V. (hereinafter “CLIP”), and related companies, subsidiaries and/or affiliates (including, among others, Payclip, Inc.), domiciled at Av. de los Insurgentes Sur 1457, Piso 23, Insurgentes Mixcoac, Benito Juárez, CP 03920, Mexico City, Mexico, is responsible for collecting your personal data during the use of CLIP CARTERA DIGITAL services, as well as guaranteeing your right as a Holder to informational self-determination.

We know that it is essential for you to know what personal data we use and how we use it. At CLIP CARTERA DIGITAL we take your privacy as a matter of the utmost importance.

Our goal is to provide you with exceptional service, and we understand that you probably have several concerns and questions about how we will use your personal data. Therefore, we have made this Privacy Notice available to you both on our website https://clip.mx/privacidad and in our mobile applications. We also invite you to write us an email at privacidad@payclip.com in case you have any questions.

This Privacy Notice describes the way in which CLIP CARTERA DIGITAL, being responsible for the use, management and confidentiality of personal data provided by our Clients who carry out operations through point-of-sale terminals and/or through remote operations, employees (CLIP CARTERA DIGITALpers) and third parties or providers (any of them, the "Owner"); collects, maintains, uses, stores and discloses your information.

The information we collect will be used and retained for as long as necessary to fulfill the purpose for which it was collected and in accordance with the requirements of applicable laws.

‍Who is responsible?

The person responsible for the processing of Personal Data is the legal entity called CLIP CARTERA DIGITAL, , with address at Av. de los Insurgentes Sur 1457, Piso 23, Insurgentes Mixcoac, Benito Juárez, CP 03920, Ciudad de Mexico, Mexico, an entity that undertakes to respect the provisions of this Privacy Notice, as well as the provisions contained in the Federal Law on Protection of Personal Data Held by Private Parties, its Regulations and applicable provisions (the "Law") .

‍What personal data do we collect?

CLIP CARTERA DIGITAL obtains your information when you create an account in any of our applications to be able to carry out transactions with your point-of-sale terminal or when you visit our website. We also collect information such as your email, during form filling, phone calls, audio recordings, images or videos, IP address, and standard online revenue information, such as your browser type and the web pages you have visited within our Internet page. We may also obtain information regarding your geolocation. If you do not agree that we can collect such information, you will not be able to use our services since, without such information, our service could not function properly.

‍When you activate your CLIP CARTERA DIGITAL, we will collect information from you.

In accordance with CLIP CARTERA DIGITAL's know-your-customer ("KYC") policy, we collect data from Customers, including data relating to access and/or use derived from the regular development of CLIP CARTERA DIGITAL's services. Next, the personal data that is collected:

‍Personal information:

Identification Information: Your name, CURP, address, email and date of birth. This information can be obtained by filling out forms within the application or through requested documents and images (file information) exclusively to verify your identity.

• Information to Authenticate: email, password and other validation data with which we verify that it is you carrying out the transactions.
• Smartphone Information: We may also obtain information about you: (a) through your mobile device, machine or mobile device identification number, geolocation, time zone, language preference, web browser type, and IP address, and (b) from third parties for the purposes of transaction processing, identity verification, fraud detection and prevention, and other similar purposes.
• Financial Information: Your bank account number, "routing" and credit and debit cards associated with your CLIP CARTERA DIGITAL account. CLIP CARTERA DIGITAL will not share your financial information with third party social media platforms.
• Contact Information: all the information you provide us to be able to call and/or write to you.

‍Sensitive Personal Data of Clients:

• Geolocation: remember that, by law, we must mark the geolocation of all operations carried out through our point-of-sale terminals.
• Biometric: to verify your identity, we may request, collect and/or process biometric data (such as facial recognition).

At CLIP CARTERA DIGITAL we may require you to provide us with additional personal data or obtain the information indirectly through public access sources and other available sources in order to verify your identity, address or other identification information in compliance with legal provisions.

In terms of the provisions of articles 7 and 8 of the Law, the Holder grants his express consent for CLIP CARTERA DIGITAL to submit his Personal Data to Processing, including those of a financial and patrimonial nature, as well as those of a sensitive nature.

‍What if I am a Clipper in Cartera Digital  or applied to work at CLIP CARTERA DIGITAL?

Please note that if you are a Clipper in Cartera Digital, or even if you contact us to apply for one of our positions, we may collect any of the following:

‍Personal information:

• Identification data
• Authentication data
• Contact information
• Academic data
• Labor data
• Financial and asset data
• Legal data

Sensitive Personal Data:

• At the moment we do not collect and/or save them, but if this changes, we will notify you!

‍What if I am a CLIP CARTERA DIGITAL provider?

Take into consideration that for our suppliers we can collect any of the following:

‍Personal information:

• Identification data
• Authentication data
• Contact information
• Financial and asset data

‍Sensitive Personal Data:

• At the moment we do not collect and/or save them, but if this changes, we will notify you!

In terms of the provisions of articles 7 and 8 of the Law, the Owner grants his express consent for CLIP CARTERA DIGITAL to submit his Personal Data to Treatment, including those of a financial and patrimonial nature, as well as those of a sensitive nature.

‍What if I am a user of a CLIP CARTERA DIGITAL Client?

Please note that for our users of CLIP CARTERA DIGITAL Clients, we may collect any of the following:

‍Personal Data:

• Identification data
• Contact information

Sensitive Personal Data:

• At the moment we do not collect and/or store them, but if this changes, we will notify you!

In terms of the provisions of articles 7 and 8 of the Law, the Owner grants their express consent for CLIP CARTERA DIGITAL to submit their Personal Data to Processing, including those of a financial and patrimonial nature, as well as those of a sensitive nature.

‍Use of Cookies

When you enter our website http://clip.mx Both we and companies we hire to monitor or maintain our website may place small data files called "cookies" on your computer.

As a Customer, you are completely free to reject our cookies if your browser allows you to do so, but it may interfere with your use of our website or mobile applications.

‍How do we protect and store your personal data?

We store and process your personal data through third-party servers located in secure data centers in the United States of America. This information is protected by physical, electronic, and procedural safeguards that comply with applicable federal and state regulations. We also use computer protections such as "firewalls" and data encryption. We have strict physical access controls to our office and files, and we authorize access to personal data only to Clippers in Cartera Digital who need it to fulfill their responsibilities.

We make a significant effort to ensure the security of our systems. Despite our efforts, we cannot guarantee that your personal data will be inaccessible, disclosed, altered or destroyed due to a failure of our administrative or technical security measures. Therefore, we suggest you take the necessary precautions to protect your personal data, as well as not share your CLIP CARTERA DIGITAL, password with anyone.

‍How do we use your personal data?

Our primary goal in collecting your personal data is to provide you with a personalized experience that is safe, efficient, and fun.

No more surprises! All data collected and stored is done for a purpose, regardless of whether you are a Client, Clipper in Cartera Digital, or Supplier.

‍Primary Purposes for Clients:

• Authenticate your identity as a Holder in accordance with the legal provisions applicable to Clip Cartera Digital and identification policies (KYC).
• Register, as well as create the Holder's account in the Clip Cartera Digital application.
• Validate the Owner's information.
• Manage and validate the upgrade of the Client Account.
• Manage and validate the transactions made by the Client, including online payments and with the Clip card.
• Sending the Holder a summary of daily movements, transaction information, payments and account statements.
• Generate links so that the Owner can carry out transactions through WhatsApp, other means of instant messaging or social networks.
• Allow the Holder to register additional cards to the Clip Cartera Digital card within the mobile application.
• Provide support and attention to the Holders, as well as make changes to their information, in case they so request.

‍Secondary Purposes for Clients:

• Improve the quality of the service, as well as carry out tests or analysis of solutions aimed at studying the Client's behavior.
• Contact the Holder with the purpose of notifying him of updates to the website and mobile application, reports on the Treatment and situation of his Personal Data, as well as changes in this Privacy Notice or in the published Terms and Conditions.
• Sending advertising information and/or for the use of Customer information for marketing, advertising or any other similar purposes for the offering of products and services to the Customer, which may be done by various means such as email, push notification, instant messaging, among others (Opt-In).
• Offer financial products or services from other entities that are linked to those offered to the Client.
• Carry out analysis of the behavior of the different Clients of the mobile application for statistical and marketing purposes.

‍Primary Purposes for Users of Clients:

• Validate the Owner's information.
• Send a copy of the transactions made by the Client's user, including online and card payments.
• Provide support and attention to the Owners, as well as make modifications to their information, in case they so request.

Secondary Purposes for Users of Clients:

• Contact the Owner with the purpose of notifying them of updates to the website and mobile application, reports on the Processing and status of their Personal Data, as well as changes in this Privacy Notice or in the published Terms and Conditions.
• Sending advertising information and/or for the use of the User of Client's information for marketing, advertising, or any other similar purposes for the offering of products and services to the User of Client, which may be done by various means such as email, push notification, instant messaging, among others.
• Offer financial products or services from other entities

‍Primary Purposes for Clippers in Cartera Digital:

• Authenticate the identity of the Holder and open a file in his name for the purposes of conservation, identification, consultation and analysis of the information, as well as to comply with legal provisions and possible requirements of competent authorities or regulatory bodies.
• Carry out and coordinate the necessary procedures and procedures for registration, cancellation, modifications and disabilities before the public institutions that Clip Cartera Digital is required by ministry of law.
• Structure and plan all those measures or actions that allow you to carry out the projects and activities within Clip Cartera Digital.
• Assign the Holder the tools and work resources necessary for the development of their work activities.
• Coordinate the payments of salary and benefits that correspond to the Holder.
• Evaluate the performance and development of the Holder in the exercise of his duties.
• Make available to the Holder the necessary documentation to be part of Clip Cartera Digital's team of collaborators for their due consultation, understanding and signature.
• Generation and updating of organizational charts.
• Allow entry to any Clip Cartera Digital facility.

‍Secondary Purposes for Clippers in Cartera Digital:

• Contact the Holder with the purpose of notifying him about the Treatment and situation of his Personal Data, as well as changes in this Privacy Notice.
• Sending Clip Cartera Digital information, such as newsletters, as well as invitations to courses or seminars.
• Sending Clip Cartera Digital promotional and advertising information, as well as information about its services or products (Opt-In).
• Use personal data for statistical purposes.
• Take photographs and videos for Clip Cartera Digital promotional and publicity purposes.

‍Primary Purposes for Clippers Prospects in Cartera Digital:

• Authenticate the identity of the Holder and open a prospect file.
• Carry out an evaluation of the Holder's profile to verify and validate its coincidence with the characteristics and specifications required for the vacancy.
• Carry out an investigation in order to verify the information provided by the Holder.
• Coordinate agendas in order to schedule and hold an interview to verify the adequacy of the Holder to the profile of the vacant position.
• Contact the Owner by any means, in order to follow up on the contracting process.
• Preparation of an opinion to determine the viability of a candidate.
• In the event that the Holder does not continue with the recruitment process, he may refer to a different vacancy, or store his information in the Clip Cartera Digital databases in order to contact him for future vacancies.

‍Secondary Purposes for Clippers Prospects in Cartera Digital :

• Contact the Holder with the purpose of notifying him about the Treatment and situation of his Personal Data, as well as changes in this Privacy Notice.
• Sending information from Clip Cartera Digital, such as newsletters, as well as invitations to courses or seminars.
• Sending Clip Cartera Digital promotional and advertising information, as well as information about its services or products (Opt-In).
• Use personal data for statistical purposes.

‍Primary Purposes for Suppliers:

• Authenticate the identity of the Holder.
• Register the Holder in the Clip Cartera Digital systems.
• Carry out the contracting of products or services.
• Preparation of contracts and documents related to the commercial relationship between Clip Cartera Digital and the Holder.
• Payment of considerations and compliance with tax obligations.
• Sending vouchers, transaction information, payments and invoices to the Holder.

‍Secondary Purposes for Suppliers:

• Contact the Holder with the purpose of notifying him of updates to the website and the mobile application, reports on the Treatment and situation of his Personal Data, as well as changes in this Privacy Notice.
• Sending offers of Clip Cartera Digital products and services (Opt-In).

‍Client Consent.

For the purposes of the provisions of the Federal Law on Protection of Personal Data Held by Individuals (the "Law") and other applicable legislation, the Holder states:

1. That this Privacy Notice has been made known to you by Clip Cartera Digital.
2. Have read, understood and agreed to the terms set forth.
3. That you grant your consent regarding the processing of your personal data.
4. That you grant your consent to Clip Cartera Digital so that it can collect your personal data by any means of contact, digital or physical.
5. That you grant your consent to Clip Cartera Digital so that your personal data is processed in accordance with the provisions of this Privacy Notice.

The Holder is the one who provides the data and according to the "Law", the fact that the Holder uploads his information of their own free will to our platform is considered as the express consent for the use or treatment of their personal, financial or asset information.

‍Do you not agree with our privacy policy?

At any time you can revoke or limit your consent so that we stop using your personal data in terms of this Privacy Notice, even after closing your Clip Cartera Digital account.

This exercise of the right of revocation may be enforced by means of a free writing that complies with the information and minimum annexes described by the Law and its Regulations (name and address, copy of a document that proves your identity, clear and precise description of personal data on which you seek to exercise this right and description of your request) and that it be sent to the email address privacidad@payclip.com .

The processing of your personal data is essential to be able to provide you with Clip Cartera Digital services; Therefore, revoking your consent could imply that you cannot use Clip Cartera Digital's services and you must close your Client account with us, following the instructions in the Clip Cartera Digital application or on the http://clip.mx website . In this case, if you don't close your account within a reasonable period of time, don't worry, we'll do it for you.

As Owner you can oppose through the means made available to you for the exercise of your rights called ARCO RIGHTS, in accordance with the provisions of the Law.

Clip Cartera Digital recognizes the Holders the possibility of exercising ARCO Rights over their Personal Data, which consist of the following:

• Right of Access: The Owner has, at all times, the right to know what personal data we obtained, what we use it for (purposes) and the conditions of use that we give them.
• Right of Rectification: The Holder has the right to request the correction of his personal information in case it is outdated, inaccurate or incomplete.
• Right of Cancellation: The Owner has the right to request that we remove their information from our records or databases, when they consider that it is not being used in accordance with the principles, duties and obligations provided for in the Law.
• Right to Oppose: The Owner has the right to oppose the use of his or her personal data for specific purposes.

‍How do we share your personal data?

Clip Cartera Digital will not carry out Transfers of your Personal Data, except for those listed in article 36 of the Law, for which the consent of the Owners is not required.

Next, we share how we can get to share your data, and the elements of consideration:

‍

How can you agree to change your Personal Information stored by Clip Cartera Digital?

You can update your Personal Information at any time by accessing your account and clicking on the “settings” and “profile” tab through one of our mobile applications or by contacting us directly at privacy@payclip.com .

Additional Information Requirements

Advance Sales

The Client accepts that CLIP CARTERA DIGITAL subsidiaries and/or affiliates, among them Payclip, S. de R. L. de C.V., Pocketgroup Technologies, Institución de Fondos de Pago Electrónico, Prestaclip, SA de CV, may contact him for any request for information, documentation and/or form (KYC), among them, for the case particular of Prestaclip, SA de CV the express consent form for its consultation before any credit information society, this being necessary for the offer of the Sales Advance product.

How to exercise your ARCO Rights?

Whenever you want to exercise your ARCO Rights, remember to write to:‍

Responsible : Clip Cartera Digital Personal Data Protection Officer.

Email: privacy@payclip.com

‍The exercise of the rights described in this numeral is carried out by means of a free written request sent via email to the address privacidad@payclip.com with the subject "Exercise of ARCO Rights". The electronic address mentioned corresponds to the department that will process the requests in question and that may be contacted by the Holders at any time.

‍The Holder must provide the following information:

1. Full name, address and email.
2. Specify the product or service by virtue of which the ARCO Right is exercised.
3. Clear and precise description of the Personal Data with respect to which you intend to exercise any of the ARCO Rights, in addition to any document that allows you to locate them.
4. Mention of the ARCO Law that you wish to exercise and the motivation to do so.
5. The arguments that support your position.
6. In the event that a data rectification is requested, the modifications to be made must be indicated and the documentation that proves the reason for the requested changes must be provided.

‍Likewise, the application must be accompanied by the following documents:

1. Copy of the official identification (INE or passport) of the Holder or his representative.
2. Document and/or information proving that the personal information is in the possession of Clip Cartera Digital.
3. In the event that the Owner does not personally submit the request, whoever does so must prove their representation. This may be done by means of a public deed or power of attorney signed before two witnesses, together with official identification of the Holder and representative.‍

Once the Holder's request is received, Clip Cartera Digital will send an acknowledgment of receipt via email. Subsequently, it will respond to the Holder's request by email within a period that may not exceed 20 (twenty) business days from the date it was received. This term will only apply as long as Clip Cartera Digital has sufficient information to be able to meet the request, in terms of what is established in the following paragraph.‍

The Holder must take into consideration that, in order to have sufficient elements to meet his request, Clip Cartera Digital may request additional information within 5 (five) business days following receipt of the request. As of the Clip Cartera Digital requirement, the Holder will have a period of 10 (ten) business days to fulfill this requirement. In this case, the period of 20 (twenty) business days mentioned in the previous paragraph will begin to run the day after the day on which the Holder has met the Clip Cartera Digital requirement.‍

If the request is declared admissible and the Holder has accredited his personality and the ownership of the ARCO Right that he intended to exercise, Access to Personal Data, the requested changes, Cancellation or the response to the Opposition will be made within a maximum period of 15 (fifteen) business days from the date the request was answered.‍

In the case of requests for Access to Personal Data, they will be delivered after proving the identity of the applicant or representative, as appropriate. Said delivery will be free digitally to the email address from which the request was sent.‍

In the event that the object of the request is the Opposition, the processing of Personal Data will cease the business day immediately following the date on which the affirmative response to the Owner was communicated.‍

How do I limit my personal data?

Clip Cartera Digital is committed to the execution of legal acts, the adoption of privacy policies, protection of Personal Data and information security required within its organization, as well as to implement security measures of a technological, physical and administrative nature.‍

Clip Cartera Digital stores personal information in databases with limited access that are located in controlled facilities with security mechanisms. Clip Cartera Digital undertakes that the information provided by the Owner is considered and treated confidentially.‍

In the event that the Holder wishes to know more about what is addressed in this section, he may send an email to privacidad@payclip.com with the subject "Limitation of Use or Disclosure", expressing his doubts, comments and suggestions regarding the object of the present.‍

How long will my data be kept?

In compliance with the principle of quality, all the Personal Data of the Holder will be safeguarded for the time necessary to fulfill the purposes for which they were collected and once said purpose has been completed for a period of ten years. In accordance with the foregoing, before deleting Personal Data, Clip Cartera Digital will block and encrypt it within our servers.‍

Links to Other Sites

Our website may contain links to other sites. Clip Cartera Digital does not control the collection of your information on these sites. We recommend that you read the privacy policies of each website that collects your personally identifiable information outside of the Clip Cartera Digital platform.‍

Changes to Our Privacy Policies

At Clip Cartera Digital we are always looking to improve, so any of our services may undergo changes, therefore, we reserve the right to update and/or modify our Privacy Notice at any time. In case of modifying this privacy notice, we will publish said changes on our website https://clip.mx , and we will modify the "last update" section in our mobile application in the same way. It is the Owner's responsibility to periodically review our privacy notice, this latest notice being published, the most recent and applicable to Clients, Users of Clients Clippers in Cartera Digital and Clip Providers.‍

Contact us!

We'd love to hear from you. If you have any questions or suggestions regarding the privacy policies mentioned above, please do not hesitate to contact us through the chat located in the CLIP CARTERA DIGITAL application or by email at privacidad@payclip.com .‍

Last updated: February 10, 2026

‍

‍