This Privacy Policy explains how EDUNIC, S.A.P.I. de C.V. ("we", "us", the "Company") collects, uses, and protects your personal data when you use Tax Free, our assistant on WhatsApp that helps foreign tourists claim a refund of the value-added tax (IVA) paid on purchases in Mexico under Article 31 of the Ley del Impuesto al Valor Agregado (LIVA).
1. Information we collect
We only collect what you choose to send us through WhatsApp in order to process your refund:
- Contact data: your WhatsApp phone number and profile name, provided to us by the WhatsApp Business Platform.
- Messages you send: text messages, photographs of documents, and voice notes.
- Passport / identity data extracted from the document image you send: full name, nationality, date of birth, passport number, and the passport image itself.
- Purchase data from the store invoices (CFDIs / facturas) you send: merchant, amounts, IVA, invoice folio/UUID, and line items.
- Travel data from your boarding pass: flight, route, and departure date and airport.
- Refund destination data: the image of the payment card and/or payment voucher you submit, used solely to identify where your refund should be sent. We do not charge or debit your card.
- Derived data: the eligibility results and refund claim we generate from the documents above.
2. How we use your information
- To read your documents and converse with you (using AI models).
- To verify your eligibility under Article 31 LIVA and calculate your estimated refund (using deterministic rules).
- To prepare, submit, and substantiate your tax-refund claim with the relevant authorities and partners.
- To provide customer support and improve the reliability of the service.
We do not sell your personal data, and we do not use it for advertising.
3. Service providers (sub-processors)
We share data only with providers that help us deliver the service, under their respective terms:
- Meta Platforms, Inc. — WhatsApp Business Cloud API, to receive and send your messages.
- Google LLC — Gemini API, to read your documents and generate replies.
- OpenAI, L.L.C. — Whisper, to transcribe voice notes (only if you send voice notes).
- Supabase, Inc. — database hosting and private, access-controlled file storage.
4. Data retention
We retain your personal data only for as long as necessary to process and substantiate your refund and to comply with applicable tax and legal obligations. After that period, your data is deleted or anonymized.
5. Security
Your documents are stored in private, access-restricted storage. Access is limited to authorized personnel who process your claim, and data is transmitted over encrypted (HTTPS/TLS) connections.
6. Your rights (ARCO)
Under Mexico's Federal Law on Protection of Personal Data Held by Private Parties (LFPDPPP), you may access, rectify, cancel, or object to the processing of your personal data, and withdraw your consent at any time. To exercise these rights, email contacto@grupopandal.com. You may also ask us to delete your data after your refund is complete.
7. Minors
Tax Free is intended for adult travelers and is not directed to children.
8. Changes to this policy
We may update this Privacy Policy from time to time. The current version, with its effective date, is always available at this URL.
9. Contact
Data controller (responsable): EDUNIC, S.A.P.I. de C.V. (RFC EDU2403151A3), Mexico City, Mexico.
Email: contacto@grupopandal.com