This is an English translation provided for convenience. The Spanish version is the legally binding version; in case of any discrepancy, the Spanish version prevails.

Comprehensive Privacy Notice

Version 1.0 | Last updated October 13, 2026

1 Data controller and scope

Tesla Market Insight, S.A. de C.V. is the controller of the personal data it collects to operate its websites and SaaS services identified in this notice. Address: Arquímedes 205, interior 302, Col. Polanco, Alcaldía Miguel Hidalgo, C.P. 11560, Ciudad de México, México. Personal data department: Personal Data Protection Department of Tesla Market Insight. Privacy and ARCO rights (access, rectification, cancellation and objection) email: lifemystylemx@gmail.com · +52 55 2766 3197. Product and domain: Cleaning Business SOP Library (this site).

This notice explains what data is used, for what purposes, with whom it may be shared and how to exercise your rights. The product-specific data sheet, available at privacy.html#ficha, identifies the features and processing actually enabled. This notice does not authorize collecting every category described here in every product.

When we process data exclusively on the instructions of a business customer, we act as processors; the notice of the customer acting as controller and the data processing agreement govern those operations. This notice does cover the data we use as controller for purchasing, billing, customer service and security.

2 Data and how it is obtained

Depending on the features you use and the product data sheet, the following may be processed: identification and contact data such as name, email and phone; professional data such as company, position and team; account data such as identifier, permissions and protected credentials; tax data such as RFC (Mexican taxpayer ID), tax address and invoice data; and transactional data such as plan, amount, date, payment status and transaction identifier.

Essential technical data may also be processed, such as IP address, browser, device, authentication events, security actions and support requests. Browsing data for optional analytics or advertising is collected only in accordance with cookie preferences and this notice.

Files, forms, messages and tool inputs may contain data that you provide. Authorized integrations may transmit the fields and permissions expressly indicated before connecting them. General access to contacts, precise location, microphone, camera or social networks will not be requested without explaining the feature and obtaining the corresponding permission.

Data is obtained directly through registration, purchase, forms, use of features and support; from integrations that you activate; or from technologies described in the Cookie Policy. If a product incorporates data obtained from other sources, it must identify the categories, origin and legal basis in its data sheet before such processing. The fact that a piece of data is visible on the internet does not permit any reuse.

3 Sensitive data, financial data and data of minors

The general service does not request sensitive data. If a feature requires health, biometric or other sensitive data, it will be enabled only with a specific notice, a concrete purpose and express written consent by signature or a valid authentication mechanism, unless a legal exception applies. Generic acceptance of these documents will not be considered sufficient.

For financial or property data, express consent will be obtained when required and no legal exception applies. The product data sheet will identify the payment processor and whether the Company receives complete financial data or only transaction references. Card numbers or security codes must not be sent in open fields or chats.

General services are intended for persons over 18 years of age. If we identify data of minors collected without the necessary authorization and representation, we will restrict the processing and arrange for its deletion, unless there is a legal duty to retain it. A product for minors requires specific measures and a specific notice.

4 Necessary purposes

The relevant data is used to respond to requests and demonstrations; create and authenticate accounts; manage users and permissions; provide the requested features; process transactions and billing; handle support and complaints; communicate incidents and service notices; prevent fraud and abuse; maintain security; comply with legal obligations; and document purchases and consents.

Only data necessary for the applicable purpose will be requested. Mandatory and optional fields will be identified. Not providing an essential piece of data may prevent the associated feature, without limiting access to features that do not require it. Operations based on legal obligations or on the legal relationship may be carried out without consent in the cases provided by law.

5 Optional purposes and limitation of use

With separate authorization, we may send advertising, promotions and newsletters about the Company's products; conduct surveys not necessary for the service; carry out optional behavioral analytics; or personalize advertising through authorized technologies. No optional purpose will be activated that is not identified in the product data sheet and in the corresponding consent control.

You may refuse those purposes at registration, change your preferences or write to lifemystylemx@gmail.com · +52 55 2766 3197 with the subject “Limitar uso de datos” (limit use of data). You may unsubscribe from marketing messages through the link included in them. Refusing optional advertising or analytics does not prevent purchasing or using the main service. Essential security, billing and operational messages are not advertising.

We do not sell your personal data, nor does this notice authorize its publication, the sale of identifiable databases or its disclosure to third parties for their own commercial purposes. Sending promotions for other products of the same Company requires the corresponding marketing authorization; it does not turn all accounts into a shared profile without information and a legal basis.

6 Consent and evidence of consent

When processing requires consent, we will request a free, specific and informed expression of will through the corresponding controls. Acceptance of the Terms does not constitute authorization for any use of data. Consent for marketing, optional cookies, optional transfers or sensitive data is managed separately.

We may keep the version of the notice and the accepted text, date, time, account or session, channel and authorized categories, as well as subsequent revocations. These records are used to demonstrate and respect your decisions and are kept only for the period justified by applicable obligations and liabilities.

You may revoke your consent for processing that depends on it by writing to lifemystylemx@gmail.com · +52 55 2766 3197 with the subject “Revocar consentimiento” (revoke consent), stating your name, means of response and the processing you wish to stop. We will verify your identity proportionately. Revocation has no retroactive effect; it does not prevent retaining information when a legal obligation or a valid exception requires it. We will inform you of the outcome and the functional consequences. As a service commitment, we will respond within a maximum of twenty business days and carry out what is appropriate within the following fifteen business days, without prejudice to stricter legal deadlines.

7 Providers, remissions and transfers

We may use hosting, storage, operational email, support, security, payment and AI providers, solely for the active features. When they act on our instructions, they will be subject to contractual obligations of confidentiality, security and limited processing. These communications on behalf of the controller (remissions) are distinguished from transfers to third parties that determine their own purposes.

The privacy data sheet identifies the relevant providers, their function, the categories disclosed, the country of processing and whether they act as processors or independent controllers. Some data may be processed outside Mexico, under the applicable obligations; this does not imply a waiver of your rights.

Transfers without consent will be made only when a legal exception applies, such as a legal obligation, a valid request from an authority or the need to perform the legal relationship, and exclusively to the extent necessary. In all other cases, before transferring, the recipient or specific category, the data and the purpose will be identified, acceptance or refusal will be requested, and the applicable obligations will be communicated to the recipient.

No optional transfers to business partners are enabled by this general notice. If a product requires them, its data sheet must describe them expressly and offer a specific checkbox, initially unticked. Refusing will not prevent features unrelated to that transfer.

8 AI, analysis and automated decisions

If you use an AI feature, the data essential to generate the response may be sent to the provider disclosed in the product data sheet. The Company will not use inputs, files or personal data to train general-purpose models without specific enablement and the corresponding legal basis or consent.

The feature will only be activated with provider terms compatible with the disclosed purposes. The data sheet will indicate retention and the relevant controls. Sensitive data will not be sent to AI providers through general features without the required measures and authorizations.

If a product incorporates solely automated decisions that produce legal effects or significantly affect your rights, it must disclose their existence, purpose and the means to request review or object before activating them. This notice does not authorize any profiling of individuals.

9 Retention, cancellation and backups

We keep account data during the relationship and for the time necessary for closure, complaints and applicable obligations. Tax and contractual records are kept for the corresponding legal periods. Security, consent and browsing records have periods defined in the product data sheet according to their purpose, and are not kept indefinitely for convenience.

The published data sheet indicates specific retention periods or criteria, the export period and the backup deletion cycle. When a purpose ends, data is deleted or blocked when it must be retained solely for legal liabilities; during blocking it is not used for commercial purposes.

Deleting an account and cancelling a subscription are separate procedures, available upon request to lifemystylemx@gmail.com · +52 55 2766 3197 with the subject “Cierre de cuenta” (account closure) and upon request to lifemystylemx@gmail.com · +52 55 2766 3197 with the subject “Cancelar suscripción” (cancel subscription), or from the payment processor's portal where available. Closure does not eliminate tax obligations or evidence that must legally be retained. Information deleted from active systems is deleted from backups according to the published cycle; access to it is restricted and, if a backup is restored, the deletions are reapplied.

10 Security and breaches

The Company must maintain administrative, technical and physical measures proportionate to the risk, such as access control, permission management, credential protection, secure transmission, confidentiality obligations and incident response procedures. The product's actual measures are described at privacy.html#ficha, without disclosing information that would facilitate attacks.

No system offers absolute security; this circumstance does not eliminate our obligations or automatically shift to the User the responsibility for the Company's failures. Breaches that significantly affect your property or moral rights will be reported immediately in accordance with the law, with the information relevant to protect yourself.

11 ARCO rights and procedure

You may request access to your data and the conditions of processing; rectification of incorrect data; cancellation in the cases provided by law; or objection for a legitimate reason. To do so, write to lifemystylemx@gmail.com · +52 55 2766 3197 with the subject “Solicitud ARCO” (ARCO request). You do not need to exercise one right before another.

Include your name and a means to receive a response; proof of identity and, where applicable, of representation through a secure channel; the right or request; a description of the data, unless you are requesting access; and information that allows it to be located. For rectification, indicate the correction and attach the relevant supporting documentation. Only proportionate information will be requested to verify identity and process the request.

We will communicate our determination within a maximum of twenty business days from receipt of the request and, if appropriate, will make it effective within the fifteen business days following the communication. These periods may be extended once for an equal period when justified, and you will be informed of the justification. Requests for clarification will be handled in accordance with applicable regulations.

Access will be provided through secure electronic means or copies, upon proof of identity. Exercising these rights is free of charge, without prejudice to legally permitted reproduction or shipping costs communicated in advance. A refusal will state its reasons and will not prevent you from seeking protection before the Secretaría Anticorrupción y Buen Gobierno (Mexico's Ministry of Anti-Corruption and Good Governance) or the competent authority.

12 Cookies, changes and international services

Cookies and similar technologies are described in cookie-policy.html, including their purposes and how to refuse or withdraw them. Non-necessary options will remain deactivated until authorized according to the published settings.

Updates will be published at privacy.html, indicating the version and date. Relevant changes will be communicated through the account, email or another available channel. A new purpose that requires consent is not enabled by continuing to browse; the corresponding authorization will be requested.

If a product is offered in another country, the additional notices, rights and mechanisms required by the applicable legislation will be implemented. This Mexican notice does not by itself constitute a declaration of compliance with all the laws of other territories.