Privacy notice

Last updated: November 8, 2026. This is a courtesy translation: the Spanish version prevails.

1. Who is responsible for your data

Payg0, based in Mérida, Yucatán, Mexico, is responsible for processing your personal data under Mexico's Federal Law on the Protection of Personal Data Held by Private Parties. Contact: support@payg0.io.

2. What data we process

• Identity and contact: full name, email and username. If you choose to add them to your profile: phone, CURP and date of birth.
• Financial: balance, payments sent and received, amounts, recipients, descriptions and account tier. Payg0 currently operates with simulated money.
• Verification documents: to raise your account tier we may ask for and keep a copy of your official ID, a photo of you, proof of address or utility bills, bank statements and a statement of your economic activity. These documents may show your address, your transactions and your bank balances.
• Security: password and PIN (we only keep an encrypted version that can't reveal them), failed attempts, API keys (also encrypted) and the devices you authorize.
• Technical: IP address, device browser and system, approximate city and country derived from the IP, and API usage history.

Apart from the photo we may ask for to verify your identity, we don't request sensitive personal data.

3. What we use it for

Purposes necessary for the service:

• Creating and managing your account and verifying your email.
• Processing your payments and those of the agents you authorize, and applying tier limits.
• Verifying your identity and the information in your documents to decide on your account tier.
• Sending you notices about payments, security and your account.
• Protecting your account, preventing fraud and reviewing unusual activity.
• Handling your requests and complying with legal obligations.

Purposes that require your consent: processing your financial data, including your verification documents, and the photo used to verify your identity requires your express consent, which you give by checking the acceptance box. Without it we can't offer you the service.

We don't use your data for advertising or marketing, and we don't sell it.

4. Who we share it with

To keep the service stable and fast, your data, such as your name and email, is stored and processed in the cloud, with providers located mainly in the United States. This is standard practice in the industry, and these providers only use it to deliver the service to us.

Your verification documents are kept in private cloud storage. Only authorized Payg0 staff can open them, and every access is recorded.

If you pay someone, they see what's needed to identify the payment. We don't transfer your data to third parties for their own purposes, except where the law allows it without your consent, such as a request from a competent authority.

5. How to limit its use or disclosure

Write to support@payg0.io. You can also remove authorized devices and revoke API keys from your profile. You can withdraw your consent through the same email; if the data is necessary for the service, that may mean closing your account.

6. Your ARCO rights

You can request access to, rectification or cancellation of your data, or object to its processing. Send your request to support@payg0.io with:

• Your name and a way to reply to you.
• A document proving your identity or, if applicable, your representative's.
• A clear description of the data and the right you want to exercise.
• Anything that helps locate your data.

We'll reply within 20 business days at most and, if applicable, act on it within the following 15 business days. These periods can be extended once, if justified. The process is free; only reproduction or delivery costs could apply. If you disagree with the reply, you can go to the Secretaría Anticorrupción y Buen Gobierno.

7. Cookies

We only use necessary cookies, none for advertising or analytics:

• user_session: keeps you logged in for up to 24 hours.
• payg0_device: remembers a device you authorized, for up to 30 days.
• lang: remembers your language, for up to a year.
• admin_session and admin_2fa: for the admin team only.

You can delete them from your browser, though without them you can't log in.

8. How long we keep it

While your account exists and, afterwards, for up to 10 years or the period the law requires, to meet legal obligations and handle disputes. This includes your verification documents, even if you close your account.

9. Changes to this notice

We'll publish any change on this page, with its date. If a change is important we'll also email you and, for a new purpose, ask for your consent.