Mexican LFPDPPP compliant · Last updated: March 24, 2026
In accordance with Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), we inform you that the controller of personal data collected through Attendae is:
| Field | Detail |
|---|---|
| Name | Cristian Jesus Torres Pacheco |
| Entity type | Individual (sole proprietor) |
| Mexican Tax ID (RFC) | TOPC840408QL7 |
| Privacy contact | legal@attendae.com |
| Website | attendae.com |
Regarding participant data uploaded by institutional users, Attendae acts as a Data Processor (Encargado), and the institution acts as the Data Controller (Responsable), as formalized in the Data Processing Agreement (DPA).
| Data | Purpose | Source |
|---|---|---|
| Full name | Account identification | Registration form |
| Institutional email | Authentication, notifications | Registration form |
| Institution name | Service personalization | Registration form |
| Institution logo | Display on certificates and event page | Upload |
| IP address | Security audit log | Automatic |
| Access logs | Security and fraud prevention | Automatic |
| Payment data (via Stripe) | Transaction processing | Stripe (not stored by Attendae) |
Stored payment method for later charges. Attendae operates on a pay-per-event model: when the initial service fee for an event is paid, the payment method used is registered with Stripe (via tokenization, without exposing the card number to Attendae) to automatically charge, without further action from the User, the variable amount owed once that event closes. This future ("off-session") charge authorization is a condition of the pay-per-event service and is detailed in Section 5 of the Terms of Service. You may request removal of the stored payment method once all pending charges for your events are settled, by writing to legal@attendae.com.
Participant data is loaded by the institution (as Controller). See the Participant Privacy Notice for details.
Attendae does not collect biometric data, health data, financial data, political or religious opinions, or any other special category of sensitive personal data in the context of its standard attendance management features.
You may withdraw consent for secondary purposes at any time by writing to legal@attendae.com or using the unsubscribe link in any communication.
Attendae shares personal data only with the following third parties, for the specific purposes listed:
| Recipient | Purpose | Location | Legal basis |
|---|---|---|---|
| Banahosting | Web hosting and infrastructure | Mexico or USA | Service contract execution (LFPDPPP Art. 37) |
| Stripe, Inc. | Payment processing | United States | Service contract execution (LFPDPPP Art. 37) |
| Competent authorities | Legal compliance | Mexico | Legal obligation |
Attendae does not sell, rent, or commercialize personal data to any third party for advertising, profiling, or marketing purposes.
Personal data is retained only for as long as necessary to fulfill the stated purposes and comply with legal obligations. For detailed retention periods by category, see the Data Retention Policy. Main periods:
Under Mexico's LFPDPPP, you have the following rights over your personal data:
Know what personal data Attendae holds about you, for what purposes, how it was obtained, and with whom it is shared.
Request correction of inaccurate, incomplete, or outdated data, indicating what is incorrect and what the correct data is.
Request deletion of your personal data once the legally required retention periods have been met. Cancellation initiates a blocking period before permanent deletion.
Object to the processing of your data for secondary purposes or when there is a legitimate reason. Does not apply to processing necessary to perform the service contract.
To exercise any of these rights, contact us at legal@attendae.com with the subject "ARCO request – [right type] – [your name]". Response time: up to 20 business days under Mexican law. See the full ARCO rights process.
If you believe your request was improperly denied, you may file a complaint with INAI (Mexico's National Institute for Transparency, Access to Information and Personal Data Protection): inai.org.mx · Free phone: 800 835 4324.
Attendae implements administrative, technical, and physical safeguards to protect personal data. Key measures:
For full details, see the Security Policy.
Attendae uses only strictly necessary technical cookies: session cookie, CSRF token, and interface preferences. No advertising or third-party tracking cookies are used. For full details, see the Cookie Policy.
Attendae may update this Privacy Policy to reflect changes to its data processing practices or applicable law. Material changes that affect your rights will be communicated by email at least 30 days before taking effect.
The current version of this policy is always available at attendae.com/legal/privacidad (Spanish) and attendae.com/en/legal/privacidad (English). Continued use of the service after the notice period constitutes acceptance of the changes.
For privacy-related inquiries or to exercise your rights:
Response time for privacy requests: maximum 20 business days (LFPDPPP Art. 32).
Note for non-Mexican users: Attendae operates under Mexican law. This Privacy Policy is governed by the LFPDPPP. If you are located outside Mexico, the service is still governed by Mexican law and jurisdiction as stated in the Terms of Service.