Compliance & Privacy

01Communications Consent & SMS Terms

By submitting a form, providing your mobile phone number, or otherwise consenting to communications from MoXi®, you agree to receive text messages, phone calls, and other communications from MoXi® at the phone number and email address you provide. These communications may include marketing, promotional, advertising, transactional, and informational messages related to your mortgage application or interest in MoXi® products and services.

You acknowledge and consent that these communications may be sent using:

• Automatic telephone dialing systems
• AI-generated voices
• Prerecorded or artificial voice messages
• AI-generated text messages
• Automated systems for the selection or dialing of telephone numbers

Communications will be sent during permissible hours in accordance with applicable federal and state regulations. Consent is not required as a condition of purchasing any product or service.

Do Not Call Waiver

By providing your phone number and consenting to communications, you agree to receive these communications even if your phone number is registered on a state or federal Do Not Call list.

Message Frequency

Up to 10 messages per month per active inquiry or application. Frequency may vary based on your application status and engagement with MoXi®.

Message and Data Rates

Standard message and data rates may apply depending on your wireless carrier and plan.

Opting Out

You may opt out of SMS communications at any time by replying STOP to any text message you receive from MoXi®. After opting out, you will receive a confirmation message and we will cease sending SMS messages to that number.

To opt out of phone call communications, including AI-generated voice calls, email [email protected] or call +1 866-509-4657. You may also state your request to any caller, including any AI-generated voice agent. All opt-out requests will be honored within 10 business days.

Help and Support

If you need assistance or have questions about our communications, reply HELP to any SMS message you receive, or contact our team at [email protected] or +1 866-509-4657.

SMS Privacy

Your phone number will be handled in accordance with the Privacy Notice below. No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. All categories described in this privacy policy exclude text messaging originator opt-in data and consent. This information will not be shared with any third parties.

02Use of Artificial Intelligence in Communications

MoXi® uses artificial intelligence technology, including AI-generated voice agents and AI-generated text messaging, to communicate with prospective and current clients. When you interact with an AI-generated voice or text from MoXi®, you will be informed at the start of the interaction that you are speaking or messaging with an AI agent.

Speak to a Human Anytime

You may request to speak with a human MoXi® team member at any time by emailing [email protected] or calling +1 866-509-4657. You may also state your request to any AI agent during an active interaction.

The use of AI in our communications does not change your rights under this Privacy Notice or any applicable law. Personal information collected during AI-mediated communications is handled in accordance with the same privacy and security standards described below.

03Depository Identity & Domicile

In accordance with the provisions of the Federal Law for Protection of Personal Information in Possession of Particulars (the "Information Law"), its Rules, the General Guidelines for the Privacy Notice and other applicable legislation, we inform you that MoXi GM, S.A.P.I. de C.V. (the "Depository") with registered office at Carretera Transpeninsular KM 29.5, Colonia La Jolla, Plaza Península, Local 5D, C.P. 23406, San José del Cabo, Baja California Sur (the "Contact Address"), shall treat your personal information in the terms of this Privacy Notice.

Depository Contact Information

The Depository has designated a supervisor for personal information (the "Privacy Officer"). For any information regarding this Privacy Notice or the exercise of any of your rights related to the use of your personal information, please contact our Privacy Officer by email at [email protected].

04Purpose of the Use of Your Personal Information

Your personal information shall be used for the following purposes:

Required for the legal relationship between the Depository and You (the "Owner")

• To attend the request, analysis, formalization and rendering of the services and products requested by the Owner, including all credit-related proceedings.
• To carry out all the proceedings related to the loan(s) granted to the Owner by the Depository (the "Loan" or "Loans"), including the Owner's identification and acknowledgement.
• To consult credit information institutions about the Owner's information and credit history.
• To comply with the Federal Law on the Prevention and Identification of Operations with Illicit Resources, its Rules, and all other applicable legislation.
• To estimate payment feasibility, relying on a qualitative and quantitative information analysis that allows the Depository to establish credit solvency and capacity of payment by the Owner.
• The identification, origination, operation and administration of the Loans and contracted services.
• The prevention and detection of frauds and other illicit acts against the Depository and the Owner.
• The procurement of insurance by the Depository and the Owner that is mandatory or relative to the Loans, or separate or additional to them.
• To consult, search, and review the activities, operations, complaints, and claims of the Owner in connection with the Loans.
• To comply with the acquired obligations to and by our customers.
• To inform on changes or new products and services that are related to the Loans or contracted services.
• The extrajudicial and judicial collection of the Loan granted to the Owner.
• The fulfillment of the laws, regulations, and any applicable legal disposition.
• To resolve your inquiries and clarifications.

Not needed for the legal relationship between the Depository and the Owner

• Measuring the quality of our service, statistics (including performing internal studies on consumer habits), marketing, and reports by the Depository, related to the Loan or the Owner.
• Advertising, promotion, and telemarketing to the Owner of the assets, products, and services rendered by the Depository or any third-party, by any material or electronic means.

Right to Refuse Non-Essential Use

You shall be granted 5 business days after the date this Privacy Notice is made available to you to refuse the treatment and process of your personal information for purposes not relating to the legal relationship with you, by sending an email to [email protected]. Otherwise, it shall be understood that the Owner consents to the treatment and process of its personal information for all the purposes mentioned above.

05Personal Information to be Processed

In order to achieve the purposes set forth above, the Depository shall process the following personal information of the Owner:

• Contact information
• Personal details
• Employment information
• Asset and financial details

The Depository shall also compile the full name and phone number of the Owner's personal references, in order to corroborate the information submitted by the Owner to the Depository.

The Depository may gather your personal information either personally, directly, or indirectly, when provided for, by using or requesting the products and services from the Depository or whenever you participate in promotions or contests sponsored by the Depository, either on the Depository's website or any other instances permitted by law.

The Owner declares and accepts that it has the consent of all such people from whom it is providing personal information in their condition of relatives, personal or employment references, or emergency contacts, understanding that all such personal information shall be ruled under this Privacy Notice.

Sensitive Information

The Depository shall not process Sensitive Personal Information of the Owner.

06Options to Limit the Use or Release of Personal Information

In order to enable the Owner to limit the use or release of its personal information for any purposes other than those strictly needed for the legal relationship between the Owner and the Depository, the Owner may enroll in the Public Registry of Users (REUS), according to the Protection and Defense of the User of Financial Services Act.

This registry allows the Owner to be filed in a database with the purpose of preventing promotional and marketing phone calls to particular numbers (landline or cellular), office numbers, or email, seeking to keep its privacy safe and avoid the inconveniences caused by such phone calls or emails.

The Owner may enroll at the REUS through the procedures set on the website: webapps.condusef.gob.mx/reus/app/registro.jsp.

07Means to Exercise ARCO Rights

The Owner may exercise at any given time its rights for the access, rectification, cancellation, or objection of the treatment we give to its personal information (the "ARCO Rights"). It is important to remark that any and all of these rights are independent in relation to each other; hence, it is not necessary to waive one to exercise the other.

Access

The Owner may request at any time to know the information of its own that has been gathered and is kept at the Depository's database, as well as the particulars for processing them.

Rectification

If any of your information is inaccurate or incomplete, you may request the Depository to make a correction in its database, attaching all documentation to accredit such correction.

Cancellation

The Owner may request at any time the cancellation of its personal information in possession of the Depository when it is no longer necessary or used for purposes other than those consented to.

Objection

At any time, the Owner may object to the Depository's treatment of its personal information for specific purposes, for instance, for advertising.

How to Submit a Request

To exercise the ARCO Rights, the Owner or its legal representative shall prepare a Written Request and submit it electronically to [email protected], or deliver it at the Contact Address, addressed to the Privacy Officer.

It is important to consider the following at the time of submitting your request:

• Fill out (print) the total application clearly.
• Write your name, address, and email to inform you on the response of your request.
• Mention the personal information for which you intend to exercise any of your rights.
• Attach any documents or information to facilitate the localization of your personal information.
• Attach a copy of your personal ID.
• If the request is made through a legal representative, attach the power of attorney evidencing the capacity conferred by the Owner for this process, or a proxy duly granted by the Owner including the acceptance signature of the attorney-in-fact, before two witnesses, which shall also include the name, signature, address, and photocopy of the personal ID of each of the signatories.
• For rectification of information, please attach the necessary documentation to support such modification.

Upon submittal of the request to the Depository by the Owner, we suggest you send a follow-up email.

Our response shall be sent to the email provided in the request in a term no longer than 20 business days starting on the date the request was received. In case your request is approved, the modification shall be made within 15 business days from the date said request was received. In case you request access to your personal information, the Depository shall inform you about your request by email regarding the means by which you shall be granted access to your information, if applicable. The Depository may extend the terms granted herein, only once, for a period exactly the same as the original, which shall be informed to you.

The Depository may reject the exercise of your ARCO Rights to the extent permitted by the Information Law and shall inform you of the reasons in case this situation arises. The rejection may be partial, in which case the Depository shall carry out said access, rectification, cancellation, or objection in the appropriate part.

Filing a Complaint

If you consider that your personal information protection rights have been violated by any conduct of our employees or our actions or answers, or if you presume that during the treatment of your personal information there were any violations to what is contained in the Information Law, you may file a complaint or suit at the National Institute for Transparency, Access to Information and Personal Information Protection (INAI). For further information, you may call +1 866-509-4657, Monday through Friday 9:00 to 17:00 hours, business days.

08Means for Revoking Consent

To revoke your consent for processing your personal information, you shall submit your request to the Privacy Officer by email at [email protected].

If after such revocation you need confirmation of the same, the Depository shall answer to you expressly.

We inform you that in some cases we might be unable to answer your request or conclude the process of your personal information immediately, due to the fact that it is quite likely that we shall be required to process your personal information due to any legal requirement.

09Release of Personal Information

We inform you that, in order to pursue the purposes mentioned above, the Depository shall release the Owner's personal information without its consent in the following cases:

• To financial institutions, investors, and purchasers to carry out the primary purposes described above, when the Depository assigns, transfers, affects, levies, or negotiates, in any way, the rights of the Loan registered in the relative loan agreement(s), or when the Depository executes mergers and splits in which said people are an interested party.
• To local or foreign third-parties when the Depository requires their assistance for operating or administrating the Loans.
• To the holding or subsidiaries, affiliates, or entities composing the same group as the Depository to carry out the aforementioned main purposes.
• To insurance companies for contracting insurance relative to the Loan(s).
• To the successors and beneficiaries of the Loan Rights.
• When a transfer is mandatory, necessary, or convenient in connection with the Loan Rights or the Loan(s).
• To any third-party providing any product or service related or connected to the product(s) or service(s) requested or offered by the Depository or related to the Loan(s).
• To any authority with the purpose of complying with applicable law when said transfer is ordered.
• To Notary Publics duly authorized under applicable legislation to formalize all procedures inherent to the Loan(s).
• To retain expert appraisers and other service providers to attain the required documents for all procedures related with the Loan(s).
• For all other items stipulated by Article 37 of the Information Law.

The Depository, as responsible for your personal information, warrants that this Privacy Notice shall be observed at all times and that the necessary measures shall be taken in order to ensure that all people with access to your personal information do so according to the principles for the protection of personal information established in the Information Law.

With exception of these cases, the Depository shall neither share nor release your personal information to any third party, except for those cases provided in the applicable legal dispositions or when the Owner has consented to the release of its personal information in advance.

10Security Measures

Your personal information shall be protected in consistency with the administrative, technical, and physical measures that the Depository has implemented. These measures include policies, procedures, employee training, control of physical access, and technical elements related to the control of access to information.

In case there is a security breach in any stage of the process of your personal information that may adversely affect your assets or moral rights, the Privacy Officer shall contact you immediately via email or, if the Depository is unable to contact you by such means, by regular mail in order to facilitate the Owner to take all necessary measures to defend its rights.

11Changes or Modifications to the Privacy Notice

The Depository reserves the right to carry out any changes or updates to this Privacy Notice at any time, in the understanding that all such modifications shall be notified to the Owner by publishing a new privacy notice on our website at www.moxi.global. We recommend you to verify it frequently.

When personal information is no longer needed for the purposes set forth in this Privacy Notice and all applicable laws and regulations, it shall be cancelled.

Consent

The Depository shall request the Owner's consent to process its personal and financial information under the terms of this Privacy Notice at the time of gathering said personal information.