Comprehensive Privacy Notice
Version 1.1 · Updated on September 17, 2026
Courtesy translation. This English version is provided for convenience only. The Spanish version is the only legally binding text and prevails in the event of any discrepancy (Terms and Conditions, clause 18.4). Read the Spanish version
This notice is issued pursuant to the Ley Federal de Protección de Datos Personales en Posesión de los Particulares (Federal Law on the Protection of Personal Data Held by Private Parties) published in the Diario Oficial de la Federación (Official Gazette of the Federation) on March 20, 2025 (the “Law”) and its applicable regulations.
1. Controller
Gabriel Salloum, an individual engaged in business activity, with address for hearing and receiving notices in Cancún, Quintana Roo, Mexico (the “Controller”), who operates the FARO Markets service through faromarkets.com and its application (the “Platform”).
Contact for privacy matters: contacto@faromarkets.com.
2. Personal data we process
a) Identification and contact: name, email address, country of residence, password (stored only as an irreversible hash).
b) Account and security: IP address, device and browser type, operating system, date and time of each login, connected devices, two-factor authentication codes and secrets (encrypted), logs of sign-ins and sensitive actions.
c) Use of the service: list of assets you follow, analysis frequency you selected, delivery preferences, reports generated, FARO Tokens consumption and balance, the text you type to search for an asset in “Research an asset” and the on-demand queries you confirm, interactions with the Platform.
d) Financial and asset data — only if you choose to provide it: positions that you enter or import (assets, quantities or amounts, purchase prices, dates) and, if you state it, your investor profile (risk tolerance, time horizon and objective), which are used to generate your portfolio diagnostic. Because of their nature, this data is processed only with your express consent, which you give on the corresponding screen and may revoke at any time by deleting your positions or writing to us. It is stored encrypted and, to draft the diagnostic, only the already-calculated portfolio figures are sent to the artificial intelligence provider, without your name or your email.
e) Payment and billing: name, tax data for issuing receipts (RFC, tax regime, postal code), history of License and token purchases. The data of your card or payment method are received and processed directly by Stripe; the Controller does not store it.
f) Communications: messages you send us by email or support and the replies.
g) Evidence of consent: date, time, IP, user agent and version of the documents you accepted.
We do not collect sensitive personal data (health, ethnic origin, beliefs, sexual orientation, among others). If you send it to us by mistake, we will delete it.
3. Purposes
Primary purposes (necessary for the service; without them we cannot provide it):
- Create, manage and authenticate your account, including email verification and two-factor authentication.
- Generate and deliver to you the analysis reports at the frequency and through the channels you choose.
- Identify the asset you are searching for, verify its price data and quote the on-demand query; when the text is a free-form description, it is processed with artificial intelligence to identify the asset.
- Provide context for the analysis with your positions, only if you entered them.
- Measure FARO Tokens consumption, charge the License and balance packages, and issue tax receipts.
- Protect the Platform: detect unauthorized access, fraud, abuse and attacks; notify you of new sign-ins.
- Handle your requests, questions and support.
- Keep evidence of your acceptance of the Terms and Conditions, the Risk Disclosure and this Notice.
- Comply with legal and tax obligations and requirements of competent authorities.
Secondary purposes (not necessary; you may refuse without affecting the service):
- Send you commercial communications, product news and educational content by email.
- Invite you to surveys or interviews to improve the product.
- Prepare aggregate usage statistics and analyses.
You may refuse the secondary purposes by not checking the corresponding box when you sign up, by using the unsubscribe link included in each email, or by writing to contacto@faromarkets.com. Your refusal will not be grounds for limiting the service.
4. Processors and transfers
To provide the service we send data to providers that process it on behalf of and under the instructions of the Controller (processors), who are contractually obligated to protect the information and to use it only for the purpose entrusted to them:
| Processor | What it receives | Purpose | Location |
|---|---|---|---|
| Anthropic | List of assets, market data and public news; the asset search texts when they are a free-form description; your positions only if you entered them. It does not receive your name or your email. | Generate the analysis text and identify the asset searched for | United States |
| Akamai / Linode | All account data, encrypted at rest | Application server | United States |
| PingCAP / TiDB Cloud | All account data, encrypted at rest | Database | United States |
| Resend | Email address, name, content of the reports | Delivery of verification emails, security emails and reports | United States |
| Stripe | Payment and billing data | Process charges and issue receipts | United States |
Some processors are located outside Mexico, so your data may be stored or processed abroad. By accepting this Notice you consent to those transfers to processors.
Transfers to third parties: only to competent authorities when a law or a valid request so requires, or in the other cases provided for by the Law that do not require consent. We do not sell, rent or share your data for third-party marketing purposes.
5. ARCO rights (Access, Rectification, Cancellation and Opposition), revocation and limitation of use
You have the right to access your data, to rectify it if it is inaccurate, to cancel it when you consider that it is not required for the purposes of this Notice, and to object to its processing for a legitimate reason. You may also revoke the consent you have given and limit the use or disclosure of your data.
How to exercise them: send an email to contacto@faromarkets.com with: (i) your name and the email registered on the Platform; (ii) the right you are exercising and a clear description of the data; (iii) a means to respond to you; and (iv) if you write from an email other than the registered one, a document proving your identity. We will respond within a maximum of 20 business days and, if applicable, we will carry out the request within the following 15 business days.
From your account you may at any time edit your list of assets, delete your positions, manage connected devices, cancel commercial communications and close the account.
Some data cannot be canceled while a legal obligation to retain it remains in effect (for example, tax receipts) or while it is necessary to demonstrate compliance with these Terms.
6. Cookies and similar technologies
The Platform uses strictly necessary cookies and local storage (session, authentication, security, preferences). Among the security ones, a random cookie recognizes the browser from which you have already signed in, in order to notify you only when access comes from a new one; it contains no data about you and in our systems only an irreversible fingerprint of it is stored. We do not use analytics or third-party advertising cookies. You can disable cookies in your browser; the strictly necessary ones are indispensable for signing in.
7. Retention
We retain your data while your account is active. When you close it, we block the data and delete it within a maximum of 90 days, except for data that we must retain due to a legal obligation (tax documentation: 5 years pursuant to the Código Fiscal de la Federación (Federal Tax Code)) or to demonstrate consents and compliance (for the applicable statute of limitations period). Reports already generated are deleted together with the account. Backup copies are overwritten in cycles of up to 30 days. The text you type to search for an asset is retained for 90 days and then deleted; the record of each query (asset, cost and date) is retained with the account history.
8. Security
We apply administrative, technical and physical measures to protect your data: passwords with an irreversible hash (argon2id), secrets encrypted with an independent key, end-to-end encryption of the connection, two-factor authentication, progressive lockout against brute force, automated monitoring, a log of sensitive actions and security reviews. If a security breach occurs that significantly affects your rights, we will inform you immediately by email so that you can take the corresponding measures.
9. Minors
The Platform is exclusively for persons over 18 years of age. We do not intentionally collect data from minors; if we detect an account of a minor, we will cancel it and delete the minor’s data.
10. Users outside Mexico
The service is provided from Mexico and this Notice is governed by Mexican law. If you reside in another country, your local legislation may grant you additional rights; you may exercise them by writing to us and we will address them to the extent they apply. The service is not available to residents of the restricted jurisdictions indicated in the Terms and Conditions.
11. Changes to this Notice
We will publish any change at faromarkets.com/privacidad with a new date and version. If the change affects purposes, transfers or your rights, we will notify you by email and in the application before it takes effect, and we will ask for your consent again when the Law so requires.
12. Authority
If you believe that your right to data protection has been violated, you may go to the Secretaría Anticorrupción y Buen Gobierno (Ministry of Anti-Corruption and Good Governance), the authority competent in matters of protection of personal data held by private parties.
Simplified Privacy Notice
Gabriel Salloum, with address for hearing and receiving notices in Cancún, Quintana Roo, Mexico, is responsible for your personal data. He will use it to create and manage your account, authenticate you and protect the platform, generate and deliver your reports, measure your consumption and charge for the service, handle support and comply with legal obligations. To generate each analysis, your list of assets —and your positions, only if you choose to enter them— is processed with artificial intelligence and infrastructure providers, some located outside Mexico. With your consent, we will also send you commercial communications. You may exercise your rights of access, rectification, cancellation and opposition, and revoke your consent, at contacto@faromarkets.com.