How we handle your data.
Plain-English summary. Pesito operates in Mexico, so the binding legal version of this policy is the Spanish Aviso de Privacidad, written to comply with Mexico's Federal Law on the Protection of Personal Data held by Private Parties (LFPDPPP, 2025). This English page exists so you can understand the gist in your language.
Who is responsible
Pesito is operated by Aztlan Software, Inc., a Delaware corporation. We are a technology company, not a bank.
What this covers
This website, the waitlist and its referral program, the "Help shape Pesito" survey (both on this site; see the waitlist section below), account and $PesitoID creation, the app beta, support, and our marketing communications.
What data we collect today
- Waitlist (native form on pesito.la; see the Waitlist and Referral Program Terms): your first name, last name, email and mobile phone number (required); the phone number of the person who referred you (optional); whether you asked to appear on the leaderboard (optional); your language; a hash of your IP address with a salt that changes daily, used only to detect abuse of the referral program; and the time you signed up.
- "Help shape Pesito" survey: your phone number and your answers. One survey per phone number. See the waitlist section below.
- Account ($PesitoID): phone number, email, your Google sign-in info if you use it, name, region, your $PesitoID, profile photo (if you add one), and session metadata.
- Investor form: the contact details and information you choose to share.
- App beta: we use Sentry for crash reports from the app. In release builds, those reports may include screenshots of the app's screen at the time of an error, plus technical device data. This applies to the app, not this website.
What we will collect when identity verification launches (future)
Once transfers are available, we will collect, through a regulated identity-verification provider, what the law requires: legal name, date of birth, address, country, government ID information, SSN/ITIN/CURP as applicable, intended use, expected volume, and source of funds.
To keep transfers safe and meet compliance requirements, Pesito may ask you to verify your identity before sending. Required information may vary by country, state, transfer amount, and partner requirements. We only ask for what we need to provide the service, prevent fraud, and meet legal obligations. Your waitlist or survey responses do not complete identity verification.
Why we collect it
- To run the waitlist and the referral program, and to send you alpha, beta and launch invitations and your waitlist status (see the waitlist section below).
- To create and run your account and $PesitoID.
- To operate the service and keep it secure, including fraud prevention and, once transfers launch, anti-money-laundering compliance (future).
- To help you when you contact support.
- To improve the product.
- To send marketing, only with your consent. Withdraw anytime via business@pesito.la or the unsubscribe link in our emails.
Who we share it with
- Service providers: Google Firebase (auth, database, App Check/reCAPTCHA v3, hosting), Vercel, Inc. (hosting and the functions that receive the waitlist and survey forms; United States, US East), Supabase, Inc. (waitlist and survey database; United States, US East), Sentry (app crash reports, which may include screenshots), our email-sending service, Twilio (SMS, only with your opt-in), and Cloudflare (serving this site).
- Regulators and law enforcement when legally required.
- Business transfers (e.g. a merger), with legal protections.
We never sell your personal information, and we never sell sensitive financial or identity-verification (KYC) data.
We do not run ad trackers or analytics pixels on this marketing site.
Your rights (ARCO)
Under Mexico's 2025 LFPDPPP you have the right to:
- Access the personal data we hold about you.
- Rectify incorrect data.
- Cancel (delete) your data, subject to legal retention.
- Oppose specific uses of your data.
- Withdraw consent and limit the use or disclosure of your data. Transfers that require your consent come with notice and the ability to opt out.
Exercise any of these by emailing business@pesito.la from the address registered with us. We respond within the timelines the law sets. Mexico's data-protection authority is now the Secretaría Anticorrupción y Buen Gobierno (via Transparencia para el Pueblo), where you can file a complaint if we don't resolve your request. If you live in a US state with privacy rights, you can exercise those through the same email.
Retention and deletion
Honest version: there is no self-serve deletion today. Email business@pesito.la to request deletion, or to stop marketing. We keep consent and suppression records so we can honor your opt-outs and meet legal obligations, even after a deletion request. Waitlist and survey data is kept until 12 months after Pesito launches, or until you ask us to delete it, whichever comes first (see the waitlist section below). Once the transfer service launches, KYC and remittance records may require longer retention under financial regulation.
Cookies
We set up to five functional, first-party cookies on this marketing site. None of them holds your name, email or phone number, and we share none of them with anyone:
pesito_lang(your language),pesito_theme(day or night mode) andpesito_region(dollar or peso view), each set only when you use the matching control. One year, readable by our own web app so it opens with the same choices.pesito_ref: the referral code in a waitlist link you opened, so the person who invited you is credited if you join within 30 days. Opening another person's link replaces it, and joining clears it.pesito_my_ref: your own referral code, saved when you join the waitlist or get your link back, so the waitlist page can show your link again on this device. One year. The "Forget this link" button on that page clears it.
All five are SameSite=Lax and Secure over HTTPS. No marketing or advertising cookies and no third-party analytics. You can clear them from your browser at any time.
Security
Data is encrypted in transit (TLS) and encrypted at rest by our cloud infrastructure provider. Database writes go only through our servers, database rules deny access by default, and secrets live in a managed store. No system is perfectly secure and we can't guarantee absolute security, but we work continuously to protect your data.
Minors
Pesito is not intended for anyone under 18, and we don't knowingly collect data from minors.
International transfers
Your data is processed in the United States and Mexico. Google and Cloudflare operate global infrastructure, so data may be stored or processed in other countries under contractual protections.
Waitlist and surveys on pesito.la
The waitlist, the referral program and the "Help shape Pesito" survey are Pesito's own forms on pesito.la. No Google product is involved any more: what you type goes from your browser to our functions on Vercel and is stored in our database at Supabase, in the United States (US East). The full rules are in the Waitlist and Referral Program Terms.
- What we keep. What the data section above lists: first name, last name, email, mobile phone, the referrer's phone (optional), whether you asked to be on the leaderboard (optional), your language, a daily-salted hash of your IP and the time you signed up; for the survey, your phone number and your answers.
- Why. To keep the list; to send you alpha, beta and launch invitations and your waitlist status by SMS and email; to run the referral program (your referral code and link, your referral count and your position on the list); to show the leaderboard; to prevent abuse; and to comply with the law.
- Messages. We text and email you only with the consent you give on the form, and only about invitations and your waitlist status. Opt out any time: reply STOP to any text, use the unsubscribe link in any email, or write to business@pesito.la.
- Leaderboard. Only people who ticked the box when signing up appear, and only with their first name, the initial of their last name and their referral count. You can leave it any time by writing to business@pesito.la.
- Abuse. The IP hash is used only to detect fake or automated signups in the referral program. The salt changes daily, so it cannot track you.
- Retention. We keep this data until 12 months after Pesito launches, or until you ask us to delete it, whichever comes first.
- Your rights. You can exercise your ARCO rights (above) over this data, leave the list or the leaderboard, and withdraw your consent to messages by writing to business@pesito.la.
Changes
We post the current version of this policy here with its update date. For material changes, we'll notify you by email before they take effect when we have your address on file.