PYSTACK – EVOLFY S.A. DE C.V.

EVOLFY S.A. DE C.V. (hereinafter “PYSTACK”), with registered address at Avenida Insurgentes Sur No. 605, 8th Floor, Interior 802, Colonia Nápoles, Alcaldía Benito Juárez, C.P. 03810, Mexico City, Mexico, is responsible for the processing of personal data collected from you (the “Data Subject”), in accordance with the Federal Law on the Protection of Personal Data Held by Private Parties and other applicable regulations.

This Privacy Notice applies to personal data collected through the website https://pystacklabs.com/ (the “Site”) and other contact channels associated with PYSTACK.

I. PERSONAL DATA COLLECTED

PYSTACK may collect the following types of personal data:

a) Identification and contact data

    • Full name
    • Legal name or company name (if applicable)
    • Email address
    • Phone number (mobile and/or landline)
    • Billing or tax address

b) Billing and transactional data

  • Tax ID (RFC)
  • Billing address
  • Information required for invoice issuance
  • Information related to contracted services, selected packages, amounts, and payment dates

c) Website usage data

  • IP address
  • Device identifiers
  • Browser type and operating system
  • Dates and times of site access
  • Pages visited and actions performed on the Site

In general, PYSTACK does not collect sensitive personal data. If, exceptionally, it becomes necessary to collect such data, explicit consent from the Data Subject will be requested in accordance with the law.

II. PURPOSES OF DATA PROCESSING

Collected personal data will be used for the following primary purposes (necessary for the legal relationship with the Data Subject):

  1. To provide digital product design and development services (mobile apps, web apps, and other services) offered by PYSTACK.
  2. To respond to information requests, quotations, clarifications, or technical support.
  3. To manage the contracting process, configuration of packages, personalized services, and project follow-up.
  4. Billing and collections, issuance of fiscal receipts, and accounting records.
  5. Management of client accounts, files, and internal databases.
  6. Compliance with legal and contractual obligations, including responding to requests from competent authorities.

Additionally, PYSTACK may process personal data for the following secondary purposes (not necessary for the legal relationship):

  1. Sending commercial information, newsletters, promotions, new service launches, or package updates.
  2. Improving user experience on the Site, including statistical and navigation analysis.
  3. Satisfaction surveys, market research, and internal service quality analysis.
  4. Invitations to events, webinars, or activities related to digital product design and development services.

If the Data Subject does not wish their data to be used for secondary purposes, they may notify PYSTACK by sending an email to: info@pystacklabs.com, providing their full name and stating: “I do not wish to receive commercial information / secondary purposes.”

Refusing the use of data for these secondary purposes does not affect the provision of contracted services.

III. TRANSFER OF PERSONAL DATA

PYSTACK may share your personal data only in the following cases:

  1. Service providers acting as data processors who assist PYSTACK with:
    • Payment processing
    • Hosting, cloud storage, and database management
    • Technical support, communication tools, and project management
    • Accounting, legal, or administrative services

These third parties will process personal data according to PYSTACK’s instructions and maintain confidentiality.

2. Competent authorities when legally justified, in compliance with laws, resolutions, or official requests.

PYSTACK does not sell or rent personal data for commercial purposes.

Transfers that do not require consent are carried out in accordance with Articles 10 and 37 of the Law and other applicable provisions.

IV. USE OF COOKIES AND SIMILAR TECHNOLOGIES

The Site may use cookies, web beacons, and similar technologies to:

  • Facilitate navigation and Site usage
  • Remember user preferences
  • Obtain statistics about usage, visited sections, and time spent
  • Improve content and user experience

Users can disable cookies in their browser settings; however, some Site functionalities may be limited.

V. SECURITY MEASURES

PYSTACK has implemented administrative, technical, and physical security measures to protect personal data against damage, loss, alteration, destruction, or unauthorized access or processing.

However, the Data Subject acknowledges that no security system is completely infallible and that electronic means inherently carry certain risks.

VI. ARCO RIGHTS (ACCESS, RECTIFICATION, CANCELLATION, AND OPPOSITION)

The Data Subject has the right to:

  • Access personal data processed by PYSTACK
  • Rectify inaccurate or incomplete data
  • Cancel data that is no longer necessary for the stated purposes, is no longer required for fulfilling a contract, or has been improperly used
  • Object to processing for specific purposes or request limitations on its use or disclosure

The Data Subject may also revoke consent previously granted for personal data processing, without retroactive effect, provided it does not conflict with legal requirements or existing contractual obligations.

6.1 Procedure to Exercise ARCO Rights
To exercise any of these rights, the Data Subject may submit a written request via email to info@pystacklabs.com, addressed to the personal data department, including at least:

  1. Full name of the Data Subject or legal representative
  2. Contact information (email and/or phone)
  3. Copy of valid official identification (INE, passport, or equivalent); for representatives, proof of representation
  4. Clear description of the personal data to which the request relates
  5. The ARCO right to be exercised (Access, Rectification, Cancellation, or Opposition) and description of the request
  6. Any element or document facilitating the location of the personal data

PYSTACK will respond within 20 business days from receipt of the complete request. If applicable, the request will be fulfilled within 15 business days following the response. Deadlines may be extended once for an equal period if justified, with notice to the Data Subject.

VII. LIMITATION OF USE OR DISCLOSURE OF DATA

Besides exercising ARCO rights, the Data Subject may limit the use or disclosure of personal data for secondary purposes by sending an email to info@pystacklabs.com, indicating the desire to restrict data for commercial or promotional purposes. PYSTACK will record the request in its internal exclusion lists.

VIII. DATA RETENTION

Personal data will be retained as long as necessary to:

  • Fulfill the purposes described in this Privacy Notice
  • Comply with applicable legal, tax, or contractual obligations
  • Address potential liabilities arising from processing

After the retention period, data will be securely blocked, deleted, or anonymized.

IX. CHANGES TO THE PRIVACY NOTICE

PYSTACK reserves the right to modify or update this Privacy Notice at any time due to:

  • Legislative or regulatory changes
  • Changes in PYSTACK’s services or business models
  • New requirements for service provision

Updates will be available on the Site https://pystacklabs.com/ in the Privacy Notice section, indicating the date of the last update. Continued use of the Site or contracting services after modifications implies acceptance of the updates.

X. CONTACT

For any questions or inquiries regarding this Privacy Notice or personal data processing, the Data Subject may contact PYSTACK at:

  • Email: info@pystacklabs.com
  • Address: Avenida Insurgentes Sur No. 605, 8th Floor, Interior 802, Colonia Nápoles, Alcaldía Benito Juárez, C.P. 03810, Mexico City, Mexico
  • Website: https://pystacklabs.com/