Privacy Notice for Users

Last updated January 09, 2025

This Privacy Notice is directed to users of the platform available at https://brainxinstitute.ai, through which we provide education services in the form of courses or certification programs. In this document, we specify the conditions under which we will process your personal data so that you can make informed decisions, maintain control, and dispose of your personal data.

1. Who is responsible for your personal data?

To make the platform available to you and provide services, we require some of your personal data; therefore, we are responsible for its processing under the terms of the Federal Law on Protection of Personal Data Held by Private Parties. VIDICRON SA DE CV ("Brainxinstitute") is located at Avenida Secretaría de Marina 538, Office A, Colonia Lomas del Chamizal, Cuajimalpa de Morelos, Mexico City, ZIP Code 05129.

2. What personal data do we collect and how do we collect it?

The personal data we collect may be obtained through different mechanisms:

2.1. When creating an account or contracting a service in accordance with the terms and conditions available at https://brainxinstitute.ai/terms-and-conditions ("Terms and Conditions"), you directly provide us with your full name, country of residence, address, phone number, email, username, account password, and your credit or debit card information.

2.2. Furthermore, regardless of whether you create an account or not, when you access our website https://brainxinstitute.ai, we automatically obtain information from the devices through which you access the platform, the actions you perform on the website, your preferences regarding the products we offer, and IP address. For this purpose, we use "Cookies," provided by third parties such as Google L.L.C. and Meta Platforms, Inc., which are small data files stored on your electronic device to analyze your personal data for purposes such as measurement and statistics, as well as to offer you targeted advertising (ad segmentation). We will inform you through a visible window when we use Cookies and how you can disable, block, or limit them through your browser's toolbar to prevent your data from being collected and targeted advertising from being sent. To access a mechanism that allows you to make this decision, you can visit the following website: http://www.aboutads.info/choices.

2.3. Additionally, we may obtain personal data from databases that can be consulted by any person, including but not limited to: information collected by organizations dedicated to fraud prevention, anti-corruption, anti-money laundering, and compliance with reporting regimes (PEPs lists, OFAC, etc.); credit information we obtain from credit risk databases and/or public access sources, in accordance with applicable legislation; data obtained from secure and reliable sources, such as public organizations, service providers, or business allies with whom we work.

2.4. Some of the personal data we obtain, such as gender or credit or debit card information, may be considered sensitive personal data in certain contexts. Before collecting such data, we will require your express consent for its processing.

3. How do we use your personal data?

3.1. Primary Purposes. The personal data we collect will be used to comply with the obligations set forth in the Terms and Conditions and, specifically, for the following purposes that gave rise to and are necessary for the existence, maintenance, and fulfillment of our legal relationship:

To provide you with a digital platform and financial education services.
To create an account through which you can access our services.
To recognize the devices from which you access the platform.
To remember your username and password assigned to your account.
To personalize the platform content.
To identify your preferences to adapt services accordingly.
To offer courses and/or certification programs that match your preferences.
To provide financial education courses and/or certification programs.
To share audiovisual content, texts, activities, activity schedules, and any other materials you need to complete the courses.
To offer various payment plans for services.
To obtain payment for services.
To collect any compensation for services.
To verify your identity.
To manage the platform and services.
To provide support related to platform use.
To address your comments, complaints, or suggestions about the platform and services.
To monitor and evaluate the performance and quality of the platform and services.
To conduct quality and satisfaction surveys regarding the services and platform offered.
To prevent fraud, corruption, and money laundering.

3.2. Secondary Purposes. Furthermore, subject to your consent, we may process your personal data according to the following purposes that did not give rise to and are not necessary for the existence, maintenance, and fulfillment of the legal relationship:

To analyze data for measurement and statistical purposes.
To conduct customer prospecting, marketing, and targeted advertising (ad segmentation) regarding the services we offer.
To deliver advertisements, personalize features and content, and improve and protect Facebook Ireland LTD's products.

If you do not wish for us to process your personal data according to the secondary purposes indicated in the previous paragraph, you must check the box that states "I do not wish for my personal data to be used for advertising, marketing, measurement and statistical purposes, or customer prospecting" prior to creating an account in accordance with the Terms and Conditions.

4. With whom do we share your personal data?

Your personal data may be transferred to natural persons or legal entities, in Mexico or in a different country, for the purposes described in this Privacy Notice, who act on our behalf and whom we engage as data processors under the terms of Section IX, Article 3, of the Federal Law on Protection of Personal Data Held by Private Parties.

Google L.L.C., as our data processor, will process personal data in accordance with the purposes established in this Privacy Notice and in accordance with its privacy policy (available at: https://policies.google.com/privacy) and Google's terms of service (available at: https://policies.google.com/terms). For this purpose, Google L.L.C. may employ tools such as Google Analytics that use the collected data as described on the website: www.google.com/policies/privacy/partners/.

Facebook Ireland Ltd. and Facebook Inc. will act as our data processors for the processing of personal data in accordance with Facebook's Data Processing Terms available at https://www.facebook.com/legal/terms/dataprocessing.

Furthermore, Facebook Ireland Ltd. will act as our joint controller, and we make available to you the agreement that governs our relationship as joint controllers, in accordance with the Facebook Ireland Ltd. Controller Addendum available at https://www.facebook.com/legal/controller_addendum, to determine the respective responsibilities regarding compliance with the obligations stipulated in the General Data Protection Regulation with respect to the joint processing of personal data relating to the actions you perform on our website https://brainxinstitute.ai. You agree that we may transfer your personal data to Facebook Ireland LTD in accordance with applicable laws and for the following purposes:

To conduct customer prospecting, marketing, and targeted advertising (ad segmentation) regarding the services we offer.
To improve ad delivery, personalize features and content, and improve and protect Facebook Ireland Ltd.'s products.

The identity and contact details of Facebook Ireland Ltd. required under Article 13(1)(a) and (b) of the European Union General Data Protection Regulation can be found in Facebook Ireland Ltd.'s Data Policy at https://www.facebook.com/about/privacy. Facebook Ireland Ltd. is responsible for enabling data subjects' rights in accordance with Articles 15 to 20 of the European Union General Data Protection Regulation with respect to the personal data that Facebook Ireland Ltd. stores after joint processing.

5. What rights do I have and how can I exercise them?

As the owner of your personal data, you have the rights of Access, Rectification, Cancellation, and Opposition ("ARCO Rights") as follows:

Access: your right to know what personal data is held in our databases and for what purpose it is processed.
Rectification: your right to request the correction of your personal data if it is outdated, inaccurate, or incomplete.
Cancellation: your right to have your personal data deleted from our records or databases, provided there is no current obligation regarding such data.
Opposition: you may object to the use of your personal data for specific purposes.

You may request the exercise of your ARCO Rights or revoke your consent regarding the processing of your personal data at any time through a request addressed to Brainxinstitute, which must be sent to the email address contact@brainxinstitute.ai. The request must clearly express the ARCO Rights you intend to exercise or your intention to revoke consent for the processing of your personal data, as well as the personal data for which you wish to exercise these rights. In order to validate your identity, you must accompany your request with the following documentation:

Valid official identification (National Electoral Institute credential, passport, Military Service Card, or professional license).
If you make the request through your legal representative, you must accompany the corresponding email with the representative's official identification, as well as the power of attorney that proves representation.
When you wish to exercise the right of rectification, you must present documentation that justifies the requested change.

We will respond to your request by email within a maximum period of 20 (twenty) business days from the date it was received, and only if it is deemed appropriate, we will have a maximum period of 15 (fifteen) days from the date the request was answered to effectuate the exercise of ARCO Rights or the revocation of consent, as applicable. The aforementioned periods may be extended once for an equal period, provided that the circumstances of the case so warrant.

6. What other means do you have to limit the use and disclosure of personal data?

To limit the use and disclosure of your personal data, you may register in the Public Consumer Registry provided for in the Mexican Federal Consumer Protection Law, and in the Public Users Registry pursuant to the Law for Protection and Defense of Financial Services Users, under the terms of Article 111 of the Regulations of the Federal Law on Protection of Personal Data Held by Private Parties.

7. How do we inform you about changes to the Privacy Notice?

This Privacy Notice may be modified due to new legal requirements, or our own needs, for the products and services we offer, to comply with best practices, technology changes, and any changes in our business model. We will inform you of any modification through a publication on the website https://brainxinstitute.ai/privacy-notice, so we recommend you continuously visit this page. The header of the Privacy Notice will indicate the last modification date. Any modification will take effect within 15 (fifteen) calendar days after we publish the corresponding modifications, unless they are made for legal reasons or by order of an authority, in which case, they will take effect immediately. The changes will take effect within 10 (ten) business days following the modification.