LaPieza Privacy Notice

Effective date: March 12, 2026

1. Identity and Address of the Data Controller

Talento Startup, S.A.P.I. de C.V. (hereinafter, "LaPieza"), with address in Mexico City, Mexico, is the legal entity responsible for the processing of personal data that you provide to us through the platform https://lapieza.io or by any other means. For any matter related to the processing of your personal data, you can contact us through email: [email protected].

2. Personal Data We Collect

LaPieza collects the following categories of personal data for the purposes described in this Notice:

2.1 Identification data

Full name, email address, CURP and/or RFC (when applicable), profile photo (optional).

2.2 Work and professional data

Professional experience history, education level and academic training, skills, competencies and certifications, salary aspirations, curriculum vitae.

2.3 Contact data

Phone number, city and state of residence.

2.4 Technical and navigation data

IP address, device type and browser, navigation data and behavior within the Platform.

2.5 Sensitive data

LaPieza does not intentionally collect sensitive personal data as defined by LFPDPPP (such as racial origin, health status, religious beliefs, among others). In case the User voluntarily includes this type of data in their profile or curriculum vitae, LaPieza will process it with the enhanced security measures established by law and only for the primary purposes described in this Notice.

3. Processing Purposes

3.1 Primary purposes (necessary for the legal relationship)

Create and manage the User's account on the Platform. Facilitate recruitment and personnel selection processes between candidates and employing companies. Allow employing companies to access the candidate's profile for hiring purposes. Perform automated matching between candidate profiles and available vacancies using artificial intelligence algorithms. Carry out AI-assisted interview processes and generate evaluation reports for employing companies. Facilitate face-to-face networking among LaPieza community users through community matching functionality. Comply with legal obligations and requirements from competent authorities.

3.2 Secondary purposes (not necessary, but you can object to)

Sending communications about new functionalities, featured vacancies, events and LaPieza news. Preparation of statistics and aggregate usage reports to improve the Platform. Marketing, advertising and commercial prospecting activities of LaPieza and its commercial partners.

If the User does not want their data to be processed for secondary purposes, they may express this at any time by sending an email to [email protected] with the subject "Opposition to secondary purposes".

4. Personal Data Transfers

LaPieza may transfer your personal data to the following third parties, without requiring your consent in the cases provided by article 37 of the LFPDPPP:

Employing companies (LaPieza clients): for the purpose of facilitating recruitment and selection processes for which the User has applied or shown interest. Commercial partners and strategic alliances: with whom LaPieza has agreements to expand job opportunities or services available to the User, always under confidentiality obligations equivalent to those of this Notice. Government and judicial authorities: when required by legal provision or resolution of competent authority.

LaPieza does not transfer personal data to third parties outside the national territory. All processing operations are carried out within the United Mexican States.

LaPieza ensures, through contractual clauses or other legal mechanisms, that third-party data recipients maintain security measures equivalent to those established in this Notice.

5. Automated Processing and AI Decisions

LaPieza informs that it uses automated systems and artificial intelligence that may produce effects on the User's profile, including:

Classification and prioritization of the candidate's profile within selection processes. Suggestion of vacancies and matching with employing companies. Generation of evaluation reports derived from AI-assisted interviews. Suggestion of contacts for networking within the LaPieza community.

The User has the right to request information about the logic applied in these automated processes by sending a request to [email protected]. Final hiring decisions always rest with the employing company and not with LaPieza.

6. ARCO Rights and How to Exercise Them

The User, or their duly accredited legal representative, may exercise the following rights at any time:

Access: know what personal data we have about you, what we use it for and the conditions of processing. Rectification: request correction of your data when it is inaccurate, incomplete or outdated. Cancellation: request deletion of your data when you consider it is not necessary for processing purposes, or that processing does not comply with LFPDPPP. Opposition: oppose the processing of your data for specific purposes, particularly the secondary ones described in section 3.2.

6.1 Procedure to exercise ARCO rights

To exercise any of the above rights, the User must send a request to email [email protected] with the following elements:

Full name of the holder. Email address registered on the Platform. Clear description of the right you wish to exercise and the data on which the request falls. Copy of valid official identification.

LaPieza will respond within a maximum period of 20 business days counted from receipt of the complete request. If it proceeds, the response will be made effective within the following 15 business days. These terms may be extended once for an equal period, when justified by the circumstances of the case.

7. Revocation of Consent

The User may revoke at any time the consent granted for the processing of their personal data, provided there is no legal obligation that requires its conservation. To do so, they must follow the same procedure described in section 6.1. LaPieza will make the revocation effective within a maximum period of 15 business days. Revocation of consent may imply the impossibility of continuing to use some or all of the Platform's services.

8. Use of Cookies and Tracking Technologies

LaPieza uses only strictly necessary cookies for the technical functioning of the Platform. These cookies do not have advertising purposes nor are they shared with third parties for those purposes. Their function is:

Maintain the User's active session. Remember basic configuration preferences. Ensure session security and integrity.

The User can configure their browser to reject or delete cookies; however, this could affect the proper functioning of the Platform. For more information, write to [email protected].

9. Security Measures

LaPieza has implemented administrative, technical and physical security measures to protect users' personal data against damage, loss, alteration, destruction, use, access or unauthorized processing, in accordance with the provisions of LFPDPPP and its Regulation. In the event of a security breach that significantly affects the patrimonial or moral rights of Users, LaPieza will notify immediately through the means enabled on the Platform and by email.

10. Modifications to the Privacy Notice

LaPieza reserves the right to modify this Privacy Notice at any time to adapt to legislative, jurisprudential novelties, industry practices or business needs. Any modification will be notified through the Platform and/or by email to the address registered by the User, with at least 5 calendar days in advance of its entry into force. The current version of the Privacy Notice will be available at all times at https://lapieza.io/aviso-de-privacidad.

11. Right to Appeal to INAI

If the User considers that their right to personal data protection has been violated by any conduct or omission of LaPieza, or presumes that there is a violation of the provisions in LFPDPPP, they may file the corresponding complaint or report before the National Institute of Transparency, Access to Information and Protection of Personal Data (INAI), through the website https://www.inai.org.mx.