Client Privacy Policy

This is the Privacy Policy (“Policy”) for Belvo Clients (also called “Clients”), as well as for users and visitors of our website (“You”). In addition to complying with applicable regulations, through this Policy we wish to provide a simple and direct explanation of the information that Belvo collects from and about our Clients, how we use and how we share that information. Said information, when together or separately, is capable of identifying you and will be referred to as “Personal Data” from now on. 

As a condition for accessing and using the exclusive functionalities of our website, you declare that you have carefully read this Policy, thus granting your free and express consent with the terms stipulated herein, including obtaining the Personal Data mentioned here, as well as its treatment for the purposes specified below. If you do not agree to the provisions of this Policy, you must stop accessing or using our website.

The website is intended for adults who are interested in our services as part of their commercial activity. For this reason, we do not expect minors to contact or contract our services through the website. We do not knowingly solicit and collect information from minors. If parents or legal guardians believe that the minors in their care have sent us Personal Data, please contact us by sending an email to

Identity and contact details of the Controller

Belvo Technologies SAPI de CV (for Mexico and Colombia) or Belvo Tecnologias LTDA (for Brazil) (hereinafter, “Belvo”or the “Controller”) is the legal controller of the processing of your personal data for the fulfillment of the purposes established here. The Controller hereby indicates as his address to hear and receive notifications:

  • For Belvo Technologies SAPI de CV (RFC: BTE1912023D6): Av. Pdte. Masaryk 61, Polanco V Secc, Miguel Hidalgo, 11550 Mexico City, CDMX, Mexico;
  • For Belvo Tecnologias LTDA (CNPJ: 37.869.837/0001-81): Rua Capitão Antônio Rosa, 409, São Paulo – SP, Brazil. 

To ask any questions or clarifications about the use of your personal data, you can also contact Belvo through the following email account:

Purposes for the processing of your personal data

Belvo processes your personal data for the purposes listed below:

What data do we collect?Why do we collect them?

Navigation and device data, such as the IP address, the date and time records of the accesses, the session ID, the version of the device used.
– To identify you and, where appropriate, authenticate you as our Client. 
– When applicable, comply with the legal record-keeping obligations established by the Internet Civil Framework – Law 12.965 / 2014 (Brazil).  

– When applicable, comply with the database registration obligations established by Statutory Law 1581 of 2012 (Colombia). 
– Protect you by preventing fraud, in addition to complying with the applicable legal and regulatory obligations.
– Improve our relationship through the development of analysis and statistical studies.
– Statistics of the use of our services and investigation of violations of our conditions of use of the service, criminal activities or unauthorized access to the services of Belvo.
– Guarantee the security of Belvo’s services by creating and encrypting your access credentials and applying measures to prevent fraud and malicious activities that may affect the security of our systems and your information.
Data about your employment situation.
– If you are assigned as the point of contact during the use of the platform, or as the legal representative of the company to sign the contract. 

Identification and contact data, such as name, address, identification number, telephone, email. 

– Communication of offers, promotions and new products or services from Belvo.
– Support our clients in the use and functionality of Belvo services.
– Manage the contracting of our services, through the channels established by Belvo, including the billing of our services.
– Provide information on the characteristics and costs of our services when you contact Belvo to request this information.

Many of our services depend directly on some of the Personal Data mentioned in the previous table, mainly the identification and contact data. If you decide not to provide some of this information, we may not be able to provide all or part of our services. 

Similarly, we are not obliged to process or treat any of your Personal Data if there are reasons to believe that such processing or treatment could entail any violation of any applicable law, or if you are using our services for any illegal, illicit or unethical purpose.  

With whom can we share your information?

We may share your personal data, inside and outside your country of residence, with the recipients and for the purposes that we explain below:

Purpose of the transferCategory of recipients
Management and administration of Clients and performance of statistics on the use of our services.Holding companies, affiliates or subsidiaries; and companies of our same corporate group, which operate under the same internal policies and processes.
Compliance with judicial or administrative requirements, for the fulfillment of information requirements.Judicial or administrative authorities.
Software, platform and infrastructure services in the cloud.Cloud computing service providers that provide their services to Belvo as processors.
Sending electronic communications about Belvo products or services.
Belvo business partners who serve Belvo as processors.

When such transfers are necessary, we will make them in accordance with the applicable regulations in your place of residence, with a legal basis for this. 

When Personal Data is sent outside of your place of residence, Belvo guarantees that it complies with all legal and information security requirements established by applicable regulations, through the contracts, clauses and controls necessary to ensure the protection of your Personal Data.

Storing periods; criteria to determine the retention period

Belvo will keep your Personal Data for the periods strictly necessary to achieve the purposes indicated in this Privacy Policy and, where appropriate, until the statute of limitations for actions derived from the legal relationship that gave rise to the processing of your data.

Criteria to determine the retention period
Provide information on the characteristics and costs of our services.Up to 1 year, or earlier, if you request the cancellation of your personal data related to this purpose.
Manage the contracting and provision of our services.Up to 10 years, counted from the end of the provision of the contracted services, and except for interruption of the maximum limitation period established in the regulations on consumer protection.
Ensure the security of Belvo services.Up to 10 years, counted from the end of the provision of the contracted services.
Provide support to our Clients.
Up to 2 years, counted from the end of the support actions requested by the Client.
Statistics of the use of our services, and investigation of violations of our Terms of Use of the Service.Up to 5 years, counted from the date Belvo has obtained the information for these purposes.
Communication of offers, promotions and new products or services from Belvo.For customer prospects, up to 1 year, or earlier, if you request the cancellation of your personal data related to this purpose.
For clients, indefinitely, or before, if you request the cancellation of your personal data related to this purpose.

For the purposes of market research, the eventual disclosure of data to the press and the making of advertisements, the data provided by you will be shared anonymously, that is, in a way that does not allow its identification.

The data collected may be stored on our servers, as well as in an environment of use of resources or servers in the cloud (cloud computing), which may require a transfer and/or processing of this data outside the country that is collected.

Data Subject’s rights; means for its exercise

In all legally applicable cases, you may exercise your rights to confirm the existence of treatment, access, rectification of incomplete, inaccurate or expired data, request for anonymization, request for blocking or deletion of data unnecessary and excessive, request for the deletion of personal data processed with your consent, request information from public and private entities with which Belvo has shared Personal Data, request information on the possibility of not giving consent and the consequences of denial, and revoke any consent you have given to Belvo, upon request to the following email address

When submitting a request to exercise your rights, please provide the following information and documentation:

  1. Your name and address, or another means to communicate the response to your request.
  2. Copy of your identification and, where appropriate, of your legal representative.
  3. The clear and precise description of the personal data with respect to which you wish to exercise any of the rights related to the processing of your data; and
  4. Any other element or document that facilitates the location of your personal data.

Belvo will communicate the determination adopted on your request within the deadlines established by the data protection regulations applicable to the processing of your data. Exceptionally, we may extend this period, up to the maximum allowed by the applicable regulations and taking into account the complexity of the request. In case of considering that your request is inadmissible, Belvo will inform you directly, indicating the reasons for its determination.

In the event that the information provided in your request turns out to be erroneous or insufficient, or the necessary documents to prove your identity or the corresponding legal representation are not attached, Belvo will require the correction of the deficiencies in order to process your request. 

You may revoke your consent for the processing of your Personal Data, without retroactive effects, in all those cases in which said revocation does not imply the impossibility of fulfilling obligations derived from a legal relationship in force between you and Belvo.

In the event that you request the cancellation or deletion of your Personal Data, we may have to keep it for longer than that related to your deletion request, in accordance with the applicable Data Protection Law, for any of the following reasons: (i) comply with a legal or regulatory obligation, (ii) study by a research body, or (iii) transfer to a third party (in compliance with the data processing requirements established in the Law on Protection of Applicable Personal Data). In all cases, we will use techniques to anonymize Personal Data, to the extent possible. 

After the maintenance period and legal necessity, Personal Data will be deleted using secure deletion methods, or will be used anonymously for statistical or technological improvement purposes.

You are responsible for keeping your personal data in Belvo’s possession up to date. Therefore, by providing your data, you guarantee and respond, in any case, to the veracity, accuracy, validity and authenticity of the Personal Data provided, and undertake to keep them duly updated, communicating any change to Belvo.

If you do not agree with the determination adopted by Belvo in response to a request to exercise your rights as a personal data holder, you may file a complaint or claim with the control authority of your country of residence.

Automatic means to collect personal data

Belvo uses cookies to facilitate navigation on the website Cookies are a tool used by web servers to save and retrieve information that is stored in the browser used by users or visitors to our website and allow you to save your preferences to provide a better browsing experience.

Cookies have an expiration date, which can range from the duration of the session or visit to our website, to a specific date from which they cease to be operational. Most of the cookies used in are only associated with an anonymous User and their computer equipment, they do not provide references that allow the User’s name and surname to be deduced, they cannot read data from your hard drive, or include viruses in your texts.

We may also collect information using “web beacons”, “pixel tags”, “clear gifs” or similar means (generically “web beacons”) that allow us to obtain non-personal or aggregated information, such as domain names, areas of the site what you visit, your operating system, the version of the operating system you use, the browser version and the URL prior to your visit. This information is used to understand traffic patterns.

You can configure your browser to automatically accept or reject all cookies or to receive a warning on the screen about the receipt of each cookie and decide at that time whether or not to implement it on your hard drive. In any case, you can delete cookies from our website at any time, following the procedure established in the help section of your browser.

For more information about the type of cookies we use at, you can access our Cookies Policy.

Modifications or updates to this Privacy Policy

Belvo may modify, update, extend or in any other way change the content and scope of this Privacy Policy, at any time and under its complete discretion. In such cases, we will post these changes on the website

Changes to this Privacy Policy may also be communicated by email, when said medium has been established as a communication channel between you and Belvo, during the validity of a legal relationship. The continuous use of Belvo’s services after either notification via email, or publication in the website about the changes in our Privacy policy, shall consist of its acceptance of the new terms.

In the event that any part of these Policies is deemed unenforceable by a data authority or court, the remaining terms will remain fully effective. 

Date of last update: February 22, 2021