How we handle your data.
Plain-English summary. Pesito operates in Mexico, so the binding legal version of this policy is the Spanish Aviso de Privacidad at /privacidad, written to comply with Mexico's Federal Law on the Protection of Personal Data held by Private Parties (LFPDPPP, 2025). This English page exists so you can understand the gist in your language.
Who is responsible
Pesito (legal entity name and RFC to be confirmed before launch), based in Mexico. We are a technology company, not a bank.
What this covers
This website, the waitlist, our surveys (hosted on Google Forms), account and $PesitoID creation, the app beta, support, and our marketing communications.
What data we collect today
- Waitlist: email, first and last name, optional phone, your language preference, the page you signed up from, your marketing and SMS consent choices with timestamps, your browser's user agent, and a keyed hash derived from your IP address. We don't store your IP in plain text, but we do keep that derived identifier to prevent abuse and duplicate signups.
- Surveys and forms (Google Forms): your responses are stored with Google (Forms, Sheets, Drive) under Pesito's Google Workspace account — see the Google Forms section below.
- Account ($PesitoID): phone number, email, your Google sign-in info if you use it, name, region, your $PesitoID, profile photo (if you add one), and session metadata.
- Investor form: the contact details and information you choose to share.
- App beta: we use Sentry for crash reports from the app. In release builds, those reports may include screenshots of the app's screen at the time of an error, plus technical device data. This applies to the app, not this website.
What we will collect when identity verification launches (future)
Once transfers are available, we will collect — through a regulated identity-verification provider — what the law requires: legal name, date of birth, address, country, government ID information, SSN/ITIN/CURP as applicable, intended use, expected volume, and source of funds.
To keep transfers safe and meet compliance requirements, Pesito may ask you to verify your identity before sending. Required information may vary by country, state, transfer amount, and partner requirements. We only ask for what we need to provide the service, prevent fraud, and meet legal obligations. Your waitlist or survey responses do not complete identity verification.
Why we collect it
- To run the waitlist and let you know about the launch.
- To create and run your account and $PesitoID.
- To operate the service and keep it secure, including fraud prevention and — once transfers launch — anti-money-laundering compliance (future).
- To help you when you contact support.
- To improve the product.
- To send marketing, only with your consent. Withdraw anytime via unsubscribe@pesito.la or the unsubscribe link in our emails.
Who we share it with
- Service providers: Google Firebase (auth, database, App Check/reCAPTCHA v3, hosting), Google Forms/Workspace (surveys), Sentry (app crash reports, which may include screenshots), our email-sending service, Twilio (SMS, only with your opt-in), and Cloudflare (serving this site).
- Regulators and law enforcement when legally required.
- Business transfers (e.g. a merger), with legal protections.
We never sell your personal information, and we never sell sensitive financial or identity-verification (KYC) data.
We do not run ad trackers or analytics pixels on this marketing site.
Your rights (ARCO)
Under Mexico's 2025 LFPDPPP you have the right to:
- Access the personal data we hold about you.
- Rectify incorrect data.
- Cancel (delete) your data, subject to legal retention.
- Oppose specific uses of your data.
- Withdraw consent and limit the use or disclosure of your data. Transfers that require your consent come with notice and the ability to opt out.
Exercise any of these by emailing hola@pesito.la from the address registered with us. We respond within the timelines the law sets. Mexico's data-protection authority is now the Secretaría Anticorrupción y Buen Gobierno (via Transparencia para el Pueblo), where you can file a complaint if we don't resolve your request. If you live in a US state with privacy rights, you can exercise those through the same email.
Retention and deletion
Honest version: there is no self-serve deletion today. Email hola@pesito.la to request deletion (or unsubscribe@pesito.la to stop marketing). We keep consent and suppression records so we can honor your opt-outs and meet legal obligations, even after a deletion request. Once the transfer service launches, KYC and remittance records may require longer retention under financial regulation.
Cookies
We set one functional cookie on this marketing site: pesito_lang,
which stores your Spanish/English preference so we send you to the
right version on return visits. One-year lifetime, SameSite=Lax (Secure over
HTTPS), readable by our own web app so it opens in your language.
No marketing or advertising cookies, and no third-party analytics.
You can clear it from your browser at any time.
Security
Data is encrypted in transit (TLS) and encrypted at rest by our cloud infrastructure provider. Database writes go only through our servers, database rules deny access by default, and secrets live in a managed store. No system is perfectly secure and we can't guarantee absolute security, but we work continuously to protect your data.
Minors
Pesito is not intended for anyone under 18, and we don't knowingly collect data from minors.
International transfers
Your data is processed in the United States and Mexico. Google and Cloudflare operate global infrastructure, so data may be stored or processed in other countries under contractual protections.
Google Forms
Our survey and waitlist signup are hosted by Google Forms and are subject to Google's Terms of Service and Privacy Policy. Do not submit passwords, account numbers, or other sensitive information through these forms. Form links open in a new tab. Google stores your responses (Forms, Sheets, Drive) as part of this processing.
Changes
We post the current version of this policy here with its update date. For material changes, we'll notify you by email before they take effect when we have your address on file.